Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e3133322e3135362e302f32342d3234203d3e20313336373837.roa
File:                     34352e3133322e3135362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          nbepwQTb1wy45ef2hioQiRScDtkHn9NotoV3XWexkfY=
Subject key identifier:   46:F5:54:39:E1:55:28:3B:0C:B8:A9:E5:E5:15:C8:78:65:3C:39:BD
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       6FFC9574ECD335ECA31306AA75DF4B83216EE18F
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3133322e3135362e302f32342d3234203d3e20313336373837.roa
Signing time:             Sat 22 Oct 2022 04:33:35 +0000
ROA not before:           Sat 22 Oct 2022 04:28:35 +0000
ROA not after:            Sat 21 Oct 2023 04:33:35 +0000
asID:                     136787
IP address blocks:        45.132.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:fc:95:74:ec:d3:35:ec:a3:13:06:aa:75:df:4b:83:21:6e:e1:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:35 2022 GMT
            Not After : Oct 21 04:33:35 2023 GMT
        Subject: CN=46F55439E155283B0CB8A9E5E515C878653C39BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ce:a9:dc:26:b5:09:e0:ad:ae:4d:77:4a:ad:
                    eb:75:b7:17:a1:1a:7c:e8:12:23:7a:c5:60:62:02:
                    26:b3:d0:2b:a5:01:d0:bf:57:c2:8f:a5:4d:17:94:
                    ac:f2:71:67:50:98:98:87:14:83:e8:e3:9e:3c:8a:
                    53:e1:a4:df:7a:a8:d5:fe:c4:3d:41:bc:99:ee:5d:
                    1c:62:db:33:2c:e6:5f:78:bf:e9:54:3e:b7:f2:18:
                    4f:13:16:93:cd:66:f9:fe:42:b3:10:91:fc:95:0c:
                    c3:3f:44:4f:da:da:0c:92:ec:d6:37:f1:ba:b4:26:
                    27:cb:93:69:75:f9:e2:39:ef:2e:ad:51:0c:ae:ed:
                    97:fd:49:92:92:a5:a0:ae:db:bc:3a:88:bb:58:66:
                    24:cb:29:a4:7e:8f:4d:eb:14:eb:f2:7c:2b:ab:23:
                    c4:ad:d3:23:17:d1:2d:a1:aa:a5:d8:60:cd:2b:57:
                    81:c3:09:3d:a2:d5:59:c1:ff:24:dc:8b:e3:1c:6b:
                    c1:f9:ed:8b:b5:05:2e:08:63:6c:97:31:6c:b0:79:
                    c7:16:36:98:20:b2:76:b1:96:f9:de:3c:bc:cd:26:
                    83:d6:dd:2c:74:f8:00:b4:ff:59:82:06:44:14:27:
                    e5:9f:aa:7e:11:1a:0f:0a:ca:e4:4b:1b:7e:09:cf:
                    82:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F5:54:39:E1:55:28:3B:0C:B8:A9:E5:E5:15:C8:78:65:3C:39:BD
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3133322e3135362e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:b9:d3:08:ff:53:65:62:f5:1e:db:a3:03:b2:55:26:f5:77:
         52:75:d6:7c:4f:f8:ee:56:85:de:95:c6:c4:58:fb:05:4b:e2:
         5b:36:49:a7:51:b5:46:04:4a:fa:f2:b4:b6:f4:de:14:ca:13:
         d9:16:6e:ab:c5:2d:1d:18:69:33:f6:e9:4a:91:36:cb:5b:43:
         53:20:a1:d2:17:e4:b9:c9:d3:db:dc:e7:26:c4:f7:83:4f:9b:
         d7:ea:44:e8:81:23:13:a3:8b:8c:68:2f:7a:44:95:1b:ca:1e:
         f9:c2:b3:82:26:c9:7f:99:36:1a:3f:fe:4a:81:18:54:b6:af:
         b7:29:20:40:f9:6f:1f:41:c4:2b:47:8a:94:3e:53:86:00:f9:
         32:45:ae:b6:de:04:ef:06:3e:8a:d3:82:77:50:ca:7a:e5:30:
         f3:d3:f6:9b:9d:c4:14:8d:ab:72:ea:eb:f9:99:89:f2:1f:02:
         47:a0:33:d6:e0:10:1d:d6:8e:1f:7c:5e:37:62:2a:ac:5a:22:
         8a:87:9a:d7:5b:d4:fe:cb:b5:a2:95:d8:5a:37:78:e0:c4:11:
         a6:33:77:67:5f:13:c0:6b:f2:58:e9:b5:5c:c1:25:fb:e4:bd:
         60:81:66:48:c7:3e:58:b7:72:b2:53:13:27:31:3d:c3:1d:e3:
         32:88:87:fb
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUb/yVdOzTNeyjEwaqdd9LgyFu4Y8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdhOGFmMmI1ZmU4MzFmZjU4OWViMzhhZTNjMDI1Y2U4
NzFmMjNlNzAeFw0yMjEwMjIwNDI4MzVaFw0yMzEwMjEwNDMzMzVaMDMxMTAvBgNV
BAMTKDQ2RjU1NDM5RTE1NTI4M0IwQ0I4QTlFNUU1MTVDODc4NjUzQzM5QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCzqncJrUJ4K2uTXdKret1txeh
GnzoEiN6xWBiAiaz0CulAdC/V8KPpU0XlKzycWdQmJiHFIPo4548ilPhpN96qNX+
xD1BvJnuXRxi2zMs5l94v+lUPrfyGE8TFpPNZvn+QrMQkfyVDMM/RE/a2gyS7NY3
8bq0JifLk2l1+eI57y6tUQyu7Zf9SZKSpaCu27w6iLtYZiTLKaR+j03rFOvyfCur
I8St0yMX0S2hqqXYYM0rV4HDCT2i1VnB/yTci+Mca8H57Yu1BS4IY2yXMWyweccW
NpggsnaxlvnePLzNJoPW3Sx0+AC0/1mCBkQUJ+Wfqn4RGg8KyuRLG34Jz4LHAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQURvVUOeFVKDsMuKnl5RXIeGU8Ob0wHwYDVR0j
BBgwFoAUB6ivK1/oMf9YnrOK48AlzocfI+cwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzIvMDdBOEFGMkI1RkU4MzFGRjU4OUVCMzhBRTNDMDI1Q0U4
NzFGMjNFNy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0I2aXZLMV9vTWY5WW5y
T0s0OEFsem9jZkktYy5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Mi8zNDM1MmUzMTMzMzIyZTMxMzUzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMx
MzMzNjM3MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2EnDANBgkqhkiG9w0BAQsFAAOCAQEAT7nT
CP9TZWL1HtujA7JVJvV3UnXWfE/47laF3pXGxFj7BUviWzZJp1G1RgRK+vK0tvTe
FMoT2RZuq8UtHRhpM/bpSpE2y1tDUyCh0hfkucnT29znJsT3g0+b1+pE6IEjE6OL
jGgvekSVG8oe+cKzgibJf5k2Gj/+SoEYVLavtykgQPlvH0HEK0eKlD5ThgD5MkWu
tt4E7wY+itOCd1DKeuUw89P2m53EFI2rcurr+ZmJ8h8CR6Az1uAQHdaOH3xeN2Iq
rFoiioea11vU/su1opXYWjd44MQRpjN3Z18TwGvyWOm1XMEl++S9YIFmSMc+WLdy
slMTJzE9wx3jMoiH+w==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:37 2023 by rpki-client on console-ams.rpki-client.org