Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/176/34352e38372e382e302f32322d3234203d3e20323031333431.roa
File:                     34352e38372e382e302f32322d3234203d3e20323031333431.roa (raw, json)
Hash identifier:          exxFg9szh4Qy7RrhMDiFaltXIrjsanveTjIZ0xS9rww=
Subject key identifier:   77:BD:4A:56:64:02:B8:97:EA:1D:74:16:64:07:B7:DA:8E:91:29:37
Certificate issuer:       /CN=e53a419d6fa14fc2cb279f0a28daf4a6cc9415fd
Certificate serial:       22EAF6B5ADBAD74DA45DCD9D69F51192D7CC4856
Authority key identifier: E5:3A:41:9D:6F:A1:4F:C2:CB:27:9F:0A:28:DA:F4:A6:CC:94:15:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5TpBnW-hT8LLJ58KKNr0psyUFf0.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/176/34352e38372e382e302f32322d3234203d3e20323031333431.roa
Signing time:             Sat 22 Oct 2022 04:34:37 +0000
ROA not before:           Sat 22 Oct 2022 04:29:37 +0000
ROA not after:            Sat 21 Oct 2023 04:34:37 +0000
asID:                     201341
IP address blocks:        45.87.8.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ea:f6:b5:ad:ba:d7:4d:a4:5d:cd:9d:69:f5:11:92:d7:cc:48:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e53a419d6fa14fc2cb279f0a28daf4a6cc9415fd
        Validity
            Not Before: Oct 22 04:29:37 2022 GMT
            Not After : Oct 21 04:34:37 2023 GMT
        Subject: CN=77BD4A566402B897EA1D74166407B7DA8E912937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:29:68:58:5d:76:2a:bd:93:c9:a0:30:80:4f:
                    00:50:47:cf:a3:b5:2b:8c:0f:b5:5c:95:e4:b1:90:
                    8e:12:ec:b9:20:5f:99:29:c2:8c:a8:93:5d:3c:e0:
                    a3:92:d1:35:7d:ee:7c:d3:19:5b:6b:8b:8d:a6:a5:
                    95:d0:ea:2e:ed:da:2e:f7:9f:12:0d:6e:1c:45:69:
                    2a:92:6c:7e:dd:5e:c2:20:14:8a:33:a5:a0:dd:89:
                    94:af:a9:b7:fd:dc:93:40:36:60:0a:7b:ba:0b:6d:
                    09:dc:2a:c2:d4:5c:93:49:11:0f:31:4c:2a:2e:d9:
                    9d:3d:10:3d:c1:53:a3:b8:20:49:86:a2:b2:08:ab:
                    94:4e:8c:80:54:b6:13:a5:7d:f6:da:46:8d:bb:1e:
                    19:e6:e6:4a:6f:13:55:bb:90:05:4e:c3:ad:1e:de:
                    4e:76:73:6f:31:2d:e9:03:6e:64:14:4f:18:a4:b6:
                    02:27:20:68:36:1c:d7:e6:04:28:91:cd:62:e7:2e:
                    20:aa:89:11:b9:3b:5b:47:07:78:50:ce:47:74:ec:
                    d7:75:79:c7:cf:fe:76:92:36:e9:09:64:82:ca:c1:
                    85:96:c3:94:28:e3:c0:d5:d6:41:7d:78:bc:00:bb:
                    8e:68:5e:95:ca:8c:bb:27:ea:29:e0:f5:96:0e:35:
                    07:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:BD:4A:56:64:02:B8:97:EA:1D:74:16:64:07:B7:DA:8E:91:29:37
            X509v3 Authority Key Identifier:
                keyid:E5:3A:41:9D:6F:A1:4F:C2:CB:27:9F:0A:28:DA:F4:A6:CC:94:15:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/176/E53A419D6FA14FC2CB279F0A28DAF4A6CC9415FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TpBnW-hT8LLJ58KKNr0psyUFf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/176/34352e38372e382e302f32322d3234203d3e20323031333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.87.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e2:f8:d9:1e:a5:f5:d1:0d:c7:11:15:1d:98:32:84:d0:4b:a0:
         35:de:ad:6f:25:fc:fb:ad:e8:15:f7:70:a5:18:c1:e1:16:72:
         d2:ea:2a:16:a6:da:64:04:c3:77:45:95:0e:af:d4:94:d7:20:
         cb:7e:02:88:8e:8e:a2:34:e0:93:1c:0d:bb:7b:11:39:37:0b:
         04:d4:98:f3:ca:41:ec:e5:01:d0:be:24:4c:a3:f0:60:a2:9c:
         e1:d3:6f:5d:dd:5d:22:cb:9f:e6:ce:cf:44:e0:f0:02:81:56:
         86:37:55:13:56:e6:b8:b3:0f:e3:4f:95:2f:a0:4a:5f:61:c3:
         0f:9d:22:c4:1d:0b:4b:0c:f6:31:1f:2b:59:fb:22:82:7a:a2:
         7d:ed:53:ab:dc:ea:9a:82:03:4d:6d:41:c1:97:0f:10:6b:92:
         23:93:6f:56:99:49:e1:25:9c:9c:50:4c:94:69:78:71:78:fc:
         1c:c1:42:be:0b:f8:9b:25:15:a2:95:6d:b0:37:25:cd:f1:dd:
         cc:8f:38:4e:da:c4:33:90:00:5d:fa:a0:5d:e8:39:b9:30:14:
         0b:c4:54:81:01:a1:8a:01:35:0d:ee:b3:cc:e0:46:0c:25:8f:
         89:04:0a:a4:84:d2:e9:bc:f6:14:c4:b1:ff:be:c4:f0:9b:9a:
         0a:0f:45:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:46 2023 by rpki-client on console-fra.rpki-client.org