Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/108/34352e38352e3235302e302f32342d3234203d3e203134363138.roa
File:                     34352e38352e3235302e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          E6WNr+nHLS3NSAlNhEcOtpYYK05MICUetEgY18//68s=
Subject key identifier:   19:91:9C:D9:61:4F:EC:2E:23:0A:B6:8B:AE:37:8E:A2:D0:49:3C:94
Certificate issuer:       /CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
Certificate serial:       2317C214B6CAE553782A036552BBF7274A277CC8
Authority key identifier: 79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/108/34352e38352e3235302e302f32342d3234203d3e203134363138.roa
Signing time:             Tue 28 Jun 2022 04:41:20 +0000
ROA not before:           Tue 28 Jun 2022 04:36:20 +0000
ROA not after:            Tue 27 Jun 2023 04:41:20 +0000
asID:                     14618
IP address blocks:        45.85.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:17:c2:14:b6:ca:e5:53:78:2a:03:65:52:bb:f7:27:4a:27:7c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
        Validity
            Not Before: Jun 28 04:36:20 2022 GMT
            Not After : Jun 27 04:41:20 2023 GMT
        Subject: CN=19919CD9614FEC2E230AB68BAE378EA2D0493C94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:03:6f:98:af:54:40:53:87:66:71:9a:00:70:
                    94:ce:a5:93:ea:bc:73:75:67:0b:e0:e6:3d:76:d6:
                    45:5d:eb:9d:fc:7d:a0:5f:3b:a8:ad:2f:a5:35:e2:
                    11:da:27:30:17:17:a7:5e:73:00:ad:be:7d:66:b3:
                    d7:55:3d:43:34:59:4a:42:e2:91:2a:f8:73:e6:d6:
                    fe:32:b5:4e:7a:93:58:28:55:e8:b4:4d:b6:50:e1:
                    53:8c:31:37:45:70:50:70:9f:be:84:40:78:e9:24:
                    28:92:3b:20:c1:70:06:13:2d:4e:63:12:94:6a:ff:
                    c1:4d:e6:4b:91:7a:0a:b5:ff:7b:ad:6a:0a:d6:98:
                    7d:d5:aa:60:d6:2b:53:a4:a1:00:c6:62:39:07:fb:
                    fd:e2:6e:00:e1:cf:f7:5b:eb:55:64:aa:c2:e9:2d:
                    1b:4d:e4:d4:fa:6c:d0:03:fd:95:0f:a5:f3:0d:fa:
                    82:95:f9:fd:c7:ba:07:1f:13:3f:e3:96:ae:a3:d9:
                    65:16:77:03:fa:40:a3:8b:e2:de:67:a9:03:64:b1:
                    47:42:cb:00:48:02:ae:e8:27:91:99:e0:6f:0a:9b:
                    b9:7b:d5:17:43:97:c9:d5:32:e3:17:2b:b4:0a:f3:
                    a4:54:4f:bf:73:d7:7c:df:32:14:3c:46:6f:b6:7b:
                    7d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:91:9C:D9:61:4F:EC:2E:23:0A:B6:8B:AE:37:8E:A2:D0:49:3C:94
            X509v3 Authority Key Identifier:
                keyid:79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/79131A4E3CC0851C2ED1363D6982E7436D3DF9F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/34352e38352e3235302e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.85.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:d0:f8:ad:5d:68:f7:db:37:d2:9c:1b:7d:6b:4a:b5:bd:7a:
         62:34:10:06:9d:78:f3:7a:c9:2d:b1:fc:b9:fe:c7:3b:d8:13:
         17:c7:81:2d:cc:1f:bb:b5:5f:4d:1c:2a:a3:60:fd:14:87:64:
         07:46:f8:57:03:13:f6:f1:f5:a3:e8:5d:71:3b:de:b7:03:2b:
         34:d3:58:7b:95:16:bb:da:38:4a:b3:bd:52:c3:87:5b:54:1e:
         59:2a:7e:b8:7e:3c:e5:dd:55:8a:6f:23:4a:1c:64:cf:2f:3c:
         8e:29:c5:f8:3a:e3:bd:6e:bc:52:fe:ee:dc:be:a1:58:ee:6d:
         21:26:4f:5e:28:94:41:b5:54:05:8f:8f:7b:b1:a0:c3:1d:24:
         2f:07:61:e1:91:69:eb:a8:0c:99:aa:e3:5c:45:47:f1:20:4c:
         8b:6e:79:9f:ce:80:ba:c8:b1:64:17:99:00:e5:e9:22:4e:f7:
         56:bd:f0:6c:1e:22:b4:50:eb:20:d5:60:d0:f7:9d:b7:ac:7b:
         11:b0:4c:0d:13:a1:85:63:5d:be:11:5b:0f:8a:cc:d0:b1:cb:
         a7:a0:74:9d:15:cf:b4:da:cd:ca:28:1f:8a:9a:97:91:4e:51:
         75:dc:e2:96:1d:50:1c:88:5a:18:8b:f2:4b:15:f6:fc:01:2e:
         0c:e0:4b:23
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUIxfCFLbK5VN4KgNlUrv3J0onfMgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkxMzFhNGUzY2MwODUxYzJlZDEzNjNkNjk4MmU3NDM2
ZDNkZjlmOTAeFw0yMjA2MjgwNDM2MjBaFw0yMzA2MjcwNDQxMjBaMDMxMTAvBgNV
BAMTKDE5OTE5Q0Q5NjE0RkVDMkUyMzBBQjY4QkFFMzc4RUEyRDA0OTNDOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsA2+Yr1RAU4dmcZoAcJTOpZPq
vHN1Zwvg5j121kVd6538faBfO6itL6U14hHaJzAXF6decwCtvn1ms9dVPUM0WUpC
4pEq+HPm1v4ytU56k1goVei0TbZQ4VOMMTdFcFBwn76EQHjpJCiSOyDBcAYTLU5j
EpRq/8FN5kuRegq1/3utagrWmH3VqmDWK1OkoQDGYjkH+/3ibgDhz/db61VkqsLp
LRtN5NT6bNAD/ZUPpfMN+oKV+f3HugcfEz/jlq6j2WUWdwP6QKOL4t5nqQNksUdC
ywBIAq7oJ5GZ4G8Km7l71RdDl8nVMuMXK7QK86RUT79z13zfMhQ8Rm+2e33JAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUGZGc2WFP7C4jCraLrjeOotBJPJQwHwYDVR0j
BBgwFoAUeRMaTjzAhRwu0TY9aYLnQ209+fkwDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzEwOC83OTEzMUE0RTNDQzA4NTFDMkVEMTM2M0Q2OTgyRTc0
MzZEM0RGOUY5LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZVJNYVRqekFoUnd1
MFRZOWFZTG5RMjA5LWZrLmNlcjCBiAYIKwYBBQUHAQsEfDB6MHgGCCsGAQUFBzAL
hmxyc3luYzovL3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNp
dC8xMDgvMzQzNTJlMzgzNTJlMzIzNTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIw
MzEzNDM2MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1V+jANBgkqhkiG9w0BAQsFAAOCAQEAg9D4
rV1o99s30pwbfWtKtb16YjQQBp1483rJLbH8uf7HO9gTF8eBLcwfu7VfTRwqo2D9
FIdkB0b4VwMT9vH1o+hdcTvetwMrNNNYe5UWu9o4SrO9UsOHW1QeWSp+uH485d1V
im8jShxkzy88jinF+DrjvW68Uv7u3L6hWO5tISZPXiiUQbVUBY+Pe7Ggwx0kLwdh
4ZFp66gMmarjXEVH8SBMi255n86AusixZBeZAOXpIk73Vr3wbB4itFDrINVg0Ped
t6x7EbBMDROhhWNdvhFbD4rM0LHLp6B0nRXPtNrNyigfipqXkU5Rddzilh1QHIha
GIvySxX2/AEuDOBLIw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:44 2023 by rpki-client on console-fra.rpki-client.org