Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e31302e3135372e302f32342d3234203d3e20323131383330.roa
File:                     34352e31302e3135372e302f32342d3234203d3e20323131383330.roa (raw, json)
Hash identifier:          V901sd9LcXkRnqiyIkKwn4R7WR51HSB0gIVj5GegoF8=
Subject key identifier:   02:75:D6:E0:21:5C:9B:6E:93:F4:DF:65:08:CB:DC:7D:91:C2:E5:F1
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       1B7633422EC642F96A5DCBB9C7FA58FE1E35172D
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e31302e3135372e302f32342d3234203d3e20323131383330.roa
Signing time:             Sat 22 Oct 2022 04:33:26 +0000
ROA not before:           Sat 22 Oct 2022 04:28:26 +0000
ROA not after:            Sat 21 Oct 2023 04:33:26 +0000
asID:                     211830
IP address blocks:        45.10.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:76:33:42:2e:c6:42:f9:6a:5d:cb:b9:c7:fa:58:fe:1e:35:17:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:26 2022 GMT
            Not After : Oct 21 04:33:26 2023 GMT
        Subject: CN=0275D6E0215C9B6E93F4DF6508CBDC7D91C2E5F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:76:16:75:20:a3:44:59:55:8f:c4:3c:23:d4:
                    bb:7b:1c:d6:14:0c:92:56:a3:17:2d:62:f4:a2:a3:
                    ba:04:ff:59:d2:ca:f4:06:49:e4:e0:76:aa:78:b0:
                    dd:f6:8d:42:28:7f:14:73:bc:34:e4:a1:04:55:6f:
                    be:0f:5b:1c:b6:89:0a:4f:c8:d6:a7:1c:a2:ec:a6:
                    d2:db:c7:dd:4e:cd:ab:a9:42:15:5c:fb:f8:0e:ed:
                    5e:a5:12:8f:81:65:7a:39:7f:34:b0:9b:8b:8f:d0:
                    a0:c4:ee:1a:40:2f:f5:d2:54:9c:2d:31:74:82:63:
                    14:8c:e9:7b:80:2b:19:18:94:6d:42:2f:e8:01:f1:
                    85:be:8e:f3:00:e3:96:fa:37:da:c7:24:ca:69:e8:
                    fc:28:14:82:3e:71:0e:a2:e4:14:77:12:da:2d:b4:
                    02:cc:c0:c7:b9:71:17:b9:3d:fc:cc:7e:de:7c:e8:
                    d7:7b:70:c2:23:bb:f8:34:73:10:1e:63:c4:66:4c:
                    bc:93:62:fd:c8:51:82:ad:c5:20:e1:cd:88:40:b1:
                    4d:9a:67:b4:93:48:fe:65:1a:51:7a:94:be:be:89:
                    65:7f:4a:3e:3b:22:75:6c:c2:fa:33:2b:b0:66:f2:
                    24:7f:92:a8:fb:5c:14:e7:83:c8:70:0d:c3:18:49:
                    d8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:75:D6:E0:21:5C:9B:6E:93:F4:DF:65:08:CB:DC:7D:91:C2:E5:F1
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e31302e3135372e302f32342d3234203d3e20323131383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:dc:71:ea:3f:6e:b2:0d:a4:21:16:1a:75:32:3a:39:40:97:
         21:87:5a:c8:90:67:39:b6:3e:c1:dd:8c:cd:9d:18:ce:48:08:
         b5:dd:0d:e3:ff:7b:dd:c8:22:b8:82:b4:8d:97:e3:e0:29:a0:
         8b:c2:c9:4a:a0:e3:b4:a7:35:e3:16:19:c7:61:f9:16:0c:e5:
         72:9f:cc:f2:6d:f8:33:7e:08:ff:88:22:6b:e6:f7:b3:5c:da:
         3e:c3:ed:cd:7d:bb:2c:1c:cb:b6:36:5e:c0:68:b6:28:07:69:
         0c:e9:c7:45:b7:3d:bb:f9:c1:7d:95:51:f2:b0:24:00:73:66:
         9d:7e:1d:8c:80:e2:af:8a:68:11:45:14:bf:b3:3a:db:c2:2a:
         c9:bc:27:14:28:3c:99:c4:3f:be:51:a0:5e:25:35:51:5b:e9:
         1f:8a:da:cf:30:5e:7e:aa:c3:43:d6:d2:dd:a1:39:1e:67:6a:
         d3:3a:eb:3d:8a:f7:5a:aa:8c:32:37:b6:0e:86:2f:71:16:b2:
         73:9d:05:6c:2c:64:70:9d:dc:77:e6:b5:5c:2b:f2:02:79:b1:
         b7:8c:fd:dc:f1:20:1e:4f:96:a3:7a:a9:cb:c0:67:e6:94:67:
         8d:c1:2a:52:ae:2e:73:c0:c5:65:af:b4:7b:93:f5:60:e3:b0:
         2e:4d:c9:e1
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUG3YzQi7GQvlqXcu5x/pY/h41Fy0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdhOGFmMmI1ZmU4MzFmZjU4OWViMzhhZTNjMDI1Y2U4
NzFmMjNlNzAeFw0yMjEwMjIwNDI4MjZaFw0yMzEwMjEwNDMzMjZaMDMxMTAvBgNV
BAMTKDAyNzVENkUwMjE1QzlCNkU5M0Y0REY2NTA4Q0JEQzdEOTFDMkU1RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkdhZ1IKNEWVWPxDwj1Lt7HNYU
DJJWoxctYvSio7oE/1nSyvQGSeTgdqp4sN32jUIofxRzvDTkoQRVb74PWxy2iQpP
yNanHKLsptLbx91OzaupQhVc+/gO7V6lEo+BZXo5fzSwm4uP0KDE7hpAL/XSVJwt
MXSCYxSM6XuAKxkYlG1CL+gB8YW+jvMA45b6N9rHJMpp6PwoFII+cQ6i5BR3Etot
tALMwMe5cRe5PfzMft586Nd7cMIju/g0cxAeY8RmTLyTYv3IUYKtxSDhzYhAsU2a
Z7STSP5lGlF6lL6+iWV/Sj47InVswvozK7Bm8iR/kqj7XBTng8hwDcMYSdg7AgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUAnXW4CFcm26T9N9lCMvcfZHC5fEwHwYDVR0j
BBgwFoAUB6ivK1/oMf9YnrOK48AlzocfI+cwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzIvMDdBOEFGMkI1RkU4MzFGRjU4OUVCMzhBRTNDMDI1Q0U4
NzFGMjNFNy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0I2aXZLMV9vTWY5WW5y
T0s0OEFsem9jZkktYy5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Mi8zNDM1MmUzMTMwMmUzMTM1MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMx
MzEzODMzMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtCp0wDQYJKoZIhvcNAQELBQADggEBAGrcceo/
brINpCEWGnUyOjlAlyGHWsiQZzm2PsHdjM2dGM5ICLXdDeP/e93IIriCtI2X4+Ap
oIvCyUqg47SnNeMWGcdh+RYM5XKfzPJt+DN+CP+IImvm97Nc2j7D7c19uywcy7Y2
XsBotigHaQzpx0W3Pbv5wX2VUfKwJABzZp1+HYyA4q+KaBFFFL+zOtvCKsm8JxQo
PJnEP75RoF4lNVFb6R+K2s8wXn6qw0PW0t2hOR5natM66z2K91qqjDI3tg6GL3EW
snOdBWwsZHCd3HfmtVwr8gJ5sbeM/dzxIB5PlqN6qcvAZ+aUZ43BKlKuLnPAxWWv
tHuT9WDjsC5NyeE=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:37 2023 by rpki-client on console-ams.rpki-client.org