Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e3133322e3135372e302f32342d3234203d3e203437353833.roa
File:                     34352e3133322e3135372e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier:          sSYHiNkdbQQdb9smLLeNlIvYVBsEn4JLe3mD6jM1Rrg=
Subject key identifier:   2A:35:A1:D6:54:93:6F:94:E3:60:37:C9:7C:3C:0C:44:F8:77:CC:40
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       659CF140277BF9634FB3F45027274A6B6E847F7C
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3133322e3135372e302f32342d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:33:26 +0000
ROA not before:           Sat 22 Oct 2022 04:28:26 +0000
ROA not after:            Sat 21 Oct 2023 04:33:26 +0000
asID:                     47583
IP address blocks:        45.132.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:9c:f1:40:27:7b:f9:63:4f:b3:f4:50:27:27:4a:6b:6e:84:7f:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:26 2022 GMT
            Not After : Oct 21 04:33:26 2023 GMT
        Subject: CN=2A35A1D654936F94E36037C97C3C0C44F877CC40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ef:1c:82:d0:2f:8a:f8:ea:56:88:b3:70:a2:
                    a9:63:16:dc:4d:3a:b3:89:55:5b:f6:6a:ed:5b:d4:
                    06:de:6b:87:47:58:32:f1:45:5f:c3:88:c1:d2:e7:
                    d7:7d:06:a1:f0:79:95:5d:45:c8:68:1a:82:0e:c6:
                    ab:f3:fb:95:02:15:cd:4b:c6:e7:75:a6:cb:c3:3b:
                    2c:65:cb:7b:bd:27:08:ec:4c:07:0d:28:06:bd:f1:
                    17:6d:c0:dc:55:85:79:4e:14:7f:e9:f6:3d:65:6c:
                    f3:25:f0:94:ae:2c:41:29:8c:a5:1b:86:98:af:43:
                    8c:76:4c:38:d8:82:57:5b:dc:18:15:1c:7d:a2:2b:
                    cb:64:64:33:dc:66:20:6b:60:40:fd:e3:1c:61:e8:
                    39:cb:99:fb:a2:0b:bc:f3:c5:0c:d1:61:24:84:36:
                    05:e6:de:32:5e:3a:de:f1:7b:03:8a:5c:bc:14:63:
                    58:99:71:37:e6:3b:e7:93:6a:55:03:66:d6:75:93:
                    fa:a1:13:1f:97:69:f6:e3:b7:70:b6:82:a3:23:3a:
                    e2:1a:dd:94:c6:b6:81:86:46:f5:0e:2f:f1:fc:4f:
                    cf:1b:c9:28:b4:be:57:de:77:21:c9:78:19:64:ad:
                    e2:d3:1b:65:f1:d7:bc:94:9d:ec:1e:05:2c:bb:c1:
                    ce:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:35:A1:D6:54:93:6F:94:E3:60:37:C9:7C:3C:0C:44:F8:77:CC:40
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3133322e3135372e302f32342d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:5b:68:ed:d3:ad:1b:db:e8:dc:15:98:99:64:52:dd:f1:49:
         df:71:50:75:e7:4b:fa:8d:51:74:96:47:b1:d0:6b:e9:78:03:
         4e:e6:89:43:2e:06:59:18:8a:17:50:bc:f4:ee:e9:60:d9:f4:
         97:3b:5a:bf:cd:ec:73:8c:9f:44:0a:b0:87:78:ca:0e:b8:31:
         ba:16:7c:32:3a:79:43:25:5e:4d:06:0d:ef:0e:dd:69:a5:7f:
         64:1d:bf:88:da:b2:27:9a:f7:7d:16:cb:4a:6a:b9:7b:53:d7:
         d0:1d:1f:dd:57:75:e6:1b:7e:57:21:9c:c3:4d:3f:63:dd:29:
         01:a1:5c:c3:06:cf:5e:7d:0d:40:5b:46:d8:42:44:a5:ca:92:
         35:5c:56:85:07:d3:1f:5d:8e:10:82:ce:2d:bc:15:fb:44:6f:
         39:cc:d6:7a:57:6c:ff:f4:d6:f8:29:bb:b0:0d:2c:1a:00:1c:
         a7:0c:15:fa:77:63:8e:b1:42:f8:d8:d0:a7:80:a0:a3:6d:ec:
         25:e9:5f:46:79:f0:26:78:58:40:4f:e9:13:c6:c9:92:50:af:
         8f:21:36:e2:51:38:b3:85:00:8f:e0:62:5d:12:69:c2:00:91:
         71:42:91:57:2b:40:d7:5d:24:79:a0:33:bb:99:7b:d4:8e:ac:
         46:a0:e8:ba
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUZZzxQCd7+WNPs/RQJydKa26Ef3wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdhOGFmMmI1ZmU4MzFmZjU4OWViMzhhZTNjMDI1Y2U4
NzFmMjNlNzAeFw0yMjEwMjIwNDI4MjZaFw0yMzEwMjEwNDMzMjZaMDMxMTAvBgNV
BAMTKDJBMzVBMUQ2NTQ5MzZGOTRFMzYwMzdDOTdDM0MwQzQ0Rjg3N0NDNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz7xyC0C+K+OpWiLNwoqljFtxN
OrOJVVv2au1b1Abea4dHWDLxRV/DiMHS59d9BqHweZVdRchoGoIOxqvz+5UCFc1L
xud1psvDOyxly3u9JwjsTAcNKAa98RdtwNxVhXlOFH/p9j1lbPMl8JSuLEEpjKUb
hpivQ4x2TDjYgldb3BgVHH2iK8tkZDPcZiBrYED94xxh6DnLmfuiC7zzxQzRYSSE
NgXm3jJeOt7xewOKXLwUY1iZcTfmO+eTalUDZtZ1k/qhEx+Xafbjt3C2gqMjOuIa
3ZTGtoGGRvUOL/H8T88bySi0vlfedyHJeBlkreLTG2Xx17yUneweBSy7wc7PAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUKjWh1lSTb5TjYDfJfDwMRPh3zEAwHwYDVR0j
BBgwFoAUB6ivK1/oMf9YnrOK48AlzocfI+cwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzIvMDdBOEFGMkI1RkU4MzFGRjU4OUVCMzhBRTNDMDI1Q0U4
NzFGMjNFNy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0I2aXZLMV9vTWY5WW5y
T0s0OEFsem9jZkktYy5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Mi8zNDM1MmUzMTMzMzIyZTMxMzUzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0
MzczNTM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAthJ0wDQYJKoZIhvcNAQELBQADggEBAJtbaO3T
rRvb6NwVmJlkUt3xSd9xUHXnS/qNUXSWR7HQa+l4A07miUMuBlkYihdQvPTu6WDZ
9Jc7Wr/N7HOMn0QKsId4yg64MboWfDI6eUMlXk0GDe8O3Wmlf2Qdv4jasiea930W
y0pquXtT19AdH91XdeYbflchnMNNP2PdKQGhXMMGz159DUBbRthCRKXKkjVcVoUH
0x9djhCCzi28FftEbznM1npXbP/01vgpu7ANLBoAHKcMFfp3Y46xQvjY0KeAoKNt
7CXpX0Z58CZ4WEBP6RPGyZJQr48hNuJROLOFAI/gYl0SacIAkXFCkVcrQNddJHmg
M7uZe9SOrEag6Lo=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:37 2023 by rpki-client on console-ams.rpki-client.org