Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e3133372e3139332e302f32342d3234203d3e20323131383330.roa
File:                     34352e3133372e3139332e302f32342d3234203d3e20323131383330.roa (raw, json)
Hash identifier:          sOnySm9GfBYZHRwMPwBzYoL3NoSIkZyXvMtih/ll1lw=
Subject key identifier:   A3:9E:1F:89:99:33:9D:13:CE:0C:A4:3E:57:BB:F9:0A:87:6A:D7:44
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       3B12CD2CCB9756EC93FBE2F42DC8145AAE36BEE2
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3133372e3139332e302f32342d3234203d3e20323131383330.roa
Signing time:             Sat 22 Oct 2022 04:33:27 +0000
ROA not before:           Sat 22 Oct 2022 04:28:27 +0000
ROA not after:            Sat 21 Oct 2023 04:33:27 +0000
asID:                     211830
IP address blocks:        45.137.193.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:12:cd:2c:cb:97:56:ec:93:fb:e2:f4:2d:c8:14:5a:ae:36:be:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:27 2022 GMT
            Not After : Oct 21 04:33:27 2023 GMT
        Subject: CN=A39E1F8999339D13CE0CA43E57BBF90A876AD744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:22:50:bb:b3:61:22:95:be:71:7f:d5:d7:13:
                    58:63:15:e7:47:f7:68:0d:df:6a:37:d7:bd:32:50:
                    85:b1:53:c2:74:1e:5b:7f:07:0b:d7:b8:53:c8:42:
                    3c:2a:e8:1b:c4:2e:6b:0d:fb:54:bf:94:68:c8:cc:
                    73:5c:1c:e0:91:64:d1:26:60:87:de:34:b7:46:ce:
                    70:15:73:da:94:3c:6a:84:09:70:af:23:a9:cd:e9:
                    22:e8:46:e6:6b:ad:91:ac:a8:7d:be:f4:52:13:31:
                    5b:8c:59:58:a9:e0:cf:df:af:c7:d2:98:eb:05:ac:
                    72:eb:c9:f9:43:bd:98:1c:2e:62:6b:5c:4a:ec:fe:
                    7b:97:2c:e1:e5:47:2d:3e:05:e3:ae:79:4c:72:1a:
                    a9:d8:e8:bf:a4:62:ed:98:42:40:9b:6d:13:19:8b:
                    cd:cf:2e:b5:de:90:7e:ff:c2:7e:05:80:12:b4:80:
                    b3:db:d0:1a:fd:9b:c1:72:39:d9:62:dd:4d:d3:3d:
                    b8:40:07:86:18:ea:82:58:30:72:67:ea:2d:16:8c:
                    49:86:fb:e0:a2:01:f6:d4:fc:25:be:6a:f8:b9:ee:
                    1f:d3:e2:8a:c0:36:49:65:41:ce:41:4f:a7:53:5b:
                    a1:5c:61:ac:e7:32:4f:d9:2a:6c:11:77:fd:5c:d9:
                    bd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:9E:1F:89:99:33:9D:13:CE:0C:A4:3E:57:BB:F9:0A:87:6A:D7:44
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3133372e3139332e302f32342d3234203d3e20323131383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:68:6e:fb:41:32:64:c0:51:60:d5:77:e6:cb:dc:92:a9:47:
         82:1f:3e:2d:52:ad:bc:c6:21:f3:cd:ea:38:f8:d1:8c:e1:87:
         7f:bc:93:27:d7:03:a4:27:e3:a1:3a:44:33:7c:80:43:e7:55:
         63:0f:f1:32:d6:4b:8d:bb:79:38:66:91:74:af:50:e8:4e:cb:
         72:42:a6:2d:35:1e:6b:2f:b1:2c:c7:00:3e:91:aa:e7:72:0b:
         b6:e9:b4:0e:52:3e:a7:d8:17:5f:c0:d1:59:e1:22:33:01:f0:
         e4:01:47:4f:4a:1c:32:ff:dd:f5:b4:16:a3:f1:ce:7d:58:a0:
         c4:0c:1e:e4:9f:81:bb:b4:f3:68:21:8c:16:99:5c:0f:cf:e8:
         e5:9d:4a:53:6d:51:03:fd:b8:b9:6d:9f:a1:33:b5:74:6c:06:
         77:2b:fc:05:0b:6f:a7:7d:52:0a:62:8c:9f:e0:11:bc:12:76:
         01:51:24:d8:6b:66:fc:bd:cf:51:22:42:8c:d3:af:cb:80:57:
         30:95:bf:ff:52:5a:55:83:45:12:d1:e4:41:48:1c:53:85:bf:
         5c:3b:95:19:78:88:d3:27:7b:5f:d5:43:63:ea:3c:92:04:72:
         7d:fe:0f:9d:81:78:b6:84:b6:80:80:e0:e7:b3:78:77:b3:dc:
         bc:a3:7c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:37 2023 by rpki-client on console-ams.rpki-client.org