Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e3132392e33332e302f32342d3234203d3e20323032343235.roa
File:                     34352e3132392e33332e302f32342d3234203d3e20323032343235.roa (raw, json)
Hash identifier:          tlgw3yBRYi3xQa/reQ3LdqmkS5UDng6pB9GOK9RrFUo=
Subject key identifier:   96:53:4C:5E:40:1C:25:CD:BB:90:71:1A:02:D1:39:61:A7:FD:D3:A9
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       520A11789F89E36C4AB2EC1559612E1DDC552FE7
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3132392e33332e302f32342d3234203d3e20323032343235.roa
Signing time:             Sat 22 Oct 2022 04:33:34 +0000
ROA not before:           Sat 22 Oct 2022 04:28:34 +0000
ROA not after:            Sat 21 Oct 2023 04:33:34 +0000
asID:                     202425
IP address blocks:        45.129.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:0a:11:78:9f:89:e3:6c:4a:b2:ec:15:59:61:2e:1d:dc:55:2f:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:34 2022 GMT
            Not After : Oct 21 04:33:34 2023 GMT
        Subject: CN=96534C5E401C25CDBB90711A02D13961A7FDD3A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:af:d7:a4:3f:24:03:86:85:2e:57:6b:52:dc:
                    3b:ac:f5:15:c1:e4:5b:81:5e:35:72:48:2b:94:be:
                    f2:4d:83:8c:1a:16:79:6f:eb:69:b7:35:51:c1:6d:
                    32:d7:76:66:80:e4:91:be:b9:28:f4:00:8c:ca:e9:
                    9d:c2:2d:de:97:5d:5c:19:5d:6d:d5:13:c3:7e:a2:
                    9c:be:15:c2:e5:74:e0:40:e5:e3:1c:aa:4a:68:44:
                    5e:2d:b0:d1:a4:ff:93:97:bc:e5:ba:dc:a3:be:4c:
                    f6:2b:5a:05:61:de:c7:40:98:7a:03:dd:3e:8c:71:
                    c8:82:1a:ec:a8:f3:9c:25:c7:69:6d:57:a6:7a:0d:
                    bc:52:34:63:88:9f:44:d7:ca:cc:6d:1d:69:12:da:
                    a6:75:3d:0d:fd:f4:37:82:68:93:83:34:eb:6d:3c:
                    e6:95:80:58:4d:82:1c:34:cf:6c:4d:81:2b:54:f0:
                    63:46:8a:3c:3a:48:13:ce:48:61:79:42:a5:1f:19:
                    8c:12:c3:67:45:82:4f:ea:a8:19:ca:37:dd:e9:2f:
                    c5:dd:39:c5:b9:ad:59:73:2e:8c:fc:11:49:64:02:
                    5b:18:be:d8:e2:b0:b8:d3:83:5e:4d:23:6c:78:f9:
                    cc:a7:24:8c:a9:54:59:d9:65:61:37:00:8f:42:34:
                    73:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:53:4C:5E:40:1C:25:CD:BB:90:71:1A:02:D1:39:61:A7:FD:D3:A9
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3132392e33332e302f32342d3234203d3e20323032343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.129.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:33:a8:ba:bb:97:c3:49:a9:bd:fe:79:ae:de:29:36:24:85:
         75:f5:56:22:ec:17:29:e1:cc:f6:3a:3b:53:13:82:18:fd:57:
         86:d9:69:7f:0d:81:bc:e8:01:fb:d0:cc:00:42:0b:a2:ab:32:
         55:26:10:2b:b8:1a:7b:7f:31:d5:46:2c:78:d5:f8:3f:42:b7:
         89:ff:97:00:9c:99:23:b4:95:eb:cc:2f:47:23:47:b1:fc:86:
         65:21:76:d2:0d:f3:b6:86:41:3a:dc:33:33:20:14:c7:03:f3:
         bd:d6:77:65:9b:71:0c:16:c7:ad:06:6e:0e:b6:ad:af:30:c7:
         dc:29:72:0e:c9:04:48:c9:0b:4f:2e:35:65:c1:93:33:08:ea:
         f6:f3:bb:32:15:a1:65:eb:f0:80:af:16:86:9c:e0:40:a9:ec:
         05:38:26:59:1a:83:f8:d5:1c:6f:33:3a:4b:e7:0d:15:08:24:
         e7:2c:b6:27:f0:4a:52:3f:dd:e4:f1:e8:d2:30:de:d9:b1:b3:
         7c:b2:32:5d:fb:2b:39:4c:c5:53:e0:16:fa:85:4c:8b:91:7e:
         6b:b5:ca:45:ef:5b:98:78:f9:0c:8c:b1:7f:ad:e7:19:dd:53:
         ef:42:f7:c2:ff:d0:d6:75:cd:b7:e4:b0:2d:f7:da:fa:91:1b:
         6f:b4:8e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-fra.rpki-client.org