Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e3133342e3232372e302f32342d3234203d3e203534323532.roa
File:                     34352e3133342e3232372e302f32342d3234203d3e203534323532.roa (raw, json)
Hash identifier:          GwVaHzXL5iCubS9buyy3iw8xB3fpQHMvo5EbuCRtIiA=
Subject key identifier:   8B:80:1E:15:4D:2E:F6:46:53:EF:A2:FC:D2:EC:20:DE:DA:A6:08:0B
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       4A7D7DCE5826DE26468F04105E609F09DA9F016B
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3133342e3232372e302f32342d3234203d3e203534323532.roa
Signing time:             Sat 22 Oct 2022 04:33:28 +0000
ROA not before:           Sat 22 Oct 2022 04:28:28 +0000
ROA not after:            Sat 21 Oct 2023 04:33:28 +0000
asID:                     54252
IP address blocks:        45.134.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:7d:7d:ce:58:26:de:26:46:8f:04:10:5e:60:9f:09:da:9f:01:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:28 2022 GMT
            Not After : Oct 21 04:33:28 2023 GMT
        Subject: CN=8B801E154D2EF64653EFA2FCD2EC20DEDAA6080B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e6:ba:08:92:af:8b:34:fe:ca:d1:e8:c0:7a:
                    81:81:d7:0a:23:d6:30:8d:0c:6e:21:9a:1b:8d:d8:
                    8a:ea:49:0f:ad:5c:1e:aa:07:fa:ee:95:70:cc:e7:
                    c3:56:06:e4:3f:64:68:fa:51:20:f2:2d:be:dd:40:
                    03:01:e1:78:05:ed:9a:ec:79:90:8d:00:bf:b3:08:
                    28:d4:d9:74:cb:7d:e2:b9:a5:bb:44:a9:bd:f3:54:
                    ce:a1:96:f1:03:9f:f4:39:0a:a6:0c:49:48:06:e3:
                    bd:15:2f:84:f5:14:bf:e8:2b:3c:ed:71:1e:3b:94:
                    79:f5:03:be:62:4c:00:8f:12:22:57:a4:19:12:91:
                    21:f7:5c:8e:33:89:3b:29:2f:30:5a:0e:3c:1d:d2:
                    a9:60:2e:11:7f:78:ef:9e:6c:a2:44:05:cf:d0:9a:
                    da:e9:fc:fe:67:d5:5a:fd:58:81:e7:95:1d:fe:c0:
                    3d:cf:49:30:2b:46:3f:39:c6:8d:21:d3:8b:08:f6:
                    39:0c:82:0d:1e:f0:56:64:94:27:7d:6e:ca:98:95:
                    5b:1a:12:37:1c:95:be:e3:8b:5d:1d:f8:ee:45:5e:
                    52:25:f1:a1:d7:c1:a8:ae:71:e2:25:a9:ef:b3:7f:
                    5c:ef:a0:48:29:d4:1d:5d:37:ac:b4:f6:fa:87:50:
                    a1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:80:1E:15:4D:2E:F6:46:53:EF:A2:FC:D2:EC:20:DE:DA:A6:08:0B
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3133342e3232372e302f32342d3234203d3e203534323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.134.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:76:61:1c:37:d9:68:85:8f:2a:7d:46:a5:31:7e:b9:bd:79:
         75:fb:27:69:e2:84:3c:7c:e0:5c:84:74:14:1b:11:7f:e6:eb:
         ba:81:c8:c6:62:06:8b:c5:45:74:7c:2f:91:4b:f9:33:74:e4:
         31:00:fb:6c:28:34:62:d2:8f:48:5e:a1:6e:e9:a7:2e:3b:2a:
         c5:d1:fe:fe:5b:64:c5:52:6a:71:6e:71:91:ec:c1:68:ac:25:
         31:01:d0:1d:63:59:36:00:0f:5c:b7:e9:27:08:6a:d6:37:07:
         ed:bd:42:be:18:39:b1:aa:c3:37:80:fc:22:3d:1e:82:34:ca:
         5f:9e:ee:d3:26:12:15:88:d1:30:98:91:27:4b:73:aa:de:8d:
         1b:3d:1f:d7:77:94:3c:cc:c4:ec:e4:4d:b2:7f:02:4b:0f:2c:
         3d:9c:22:39:b1:74:27:c2:26:2b:8f:61:be:e5:aa:ef:b9:0e:
         01:0c:c1:63:36:bf:37:0e:16:43:47:3f:9c:86:3a:66:05:65:
         20:74:c7:a2:81:52:0a:b3:9c:68:d6:d1:a6:d1:3f:d3:4f:0e:
         70:6b:d2:fb:a5:2d:cf:fe:99:8c:74:11:8f:ba:35:a9:02:e7:
         ba:d1:b3:cb:73:85:bd:3b:c5:c4:04:05:62:2d:1b:84:4d:e7:
         7f:d7:1e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:37 2023 by rpki-client on console-ams.rpki-client.org