Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e3134302e3138342e302f32342d3234203d3e20313336373837.roa
File:                     34352e3134302e3138342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          hLQA8Gy6rPC0X6LYEKSua+48vQ+fpnNQFUHM0x8ezd4=
Subject key identifier:   6C:2F:D1:B7:B6:56:21:A0:80:78:7D:8B:1F:93:45:BF:52:47:CC:54
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       63DC4F64275B56916FFF8441FE59671AEF704A9B
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3134302e3138342e302f32342d3234203d3e20313336373837.roa
Signing time:             Sat 22 Oct 2022 04:33:37 +0000
ROA not before:           Sat 22 Oct 2022 04:28:37 +0000
ROA not after:            Sat 21 Oct 2023 04:33:37 +0000
asID:                     136787
IP address blocks:        45.140.184.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:dc:4f:64:27:5b:56:91:6f:ff:84:41:fe:59:67:1a:ef:70:4a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:37 2022 GMT
            Not After : Oct 21 04:33:37 2023 GMT
        Subject: CN=6C2FD1B7B65621A080787D8B1F9345BF5247CC54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ea:83:10:78:76:74:fb:8f:5e:62:aa:11:9e:
                    c5:10:32:12:f1:b6:b1:4b:5a:98:eb:a8:01:08:07:
                    60:2f:b4:7f:a1:09:9a:f9:a3:63:79:9f:8d:f5:4f:
                    f5:26:bc:82:f4:6b:27:6f:fa:c8:e0:84:6c:74:6e:
                    1e:e5:1a:9a:c9:2d:7b:e9:1e:65:31:6a:bc:b9:ca:
                    da:81:04:08:4f:88:a2:77:b4:79:a0:97:d4:fd:27:
                    b4:07:16:f7:eb:2c:8d:fc:6e:3c:f1:60:b3:2d:dd:
                    f7:ff:af:8d:93:8a:e8:17:dd:a9:b1:87:3d:4b:b7:
                    9d:a7:c3:7f:28:5f:5e:8b:c7:0a:60:6b:7e:76:bb:
                    ac:28:3b:97:78:0d:ac:70:84:1b:31:6e:c2:2b:a0:
                    08:a6:62:2d:37:55:3f:02:4b:01:be:b7:90:08:02:
                    72:04:b2:eb:4b:60:64:d3:ba:9c:f1:a8:76:9f:6d:
                    8e:72:3c:f5:28:6f:88:85:f0:d0:4c:d8:96:e8:58:
                    99:ec:86:20:5a:1d:3f:d2:e9:23:da:a2:e3:b9:65:
                    46:a5:c7:c4:08:ee:6f:3c:e4:4c:de:8f:1c:63:22:
                    46:e1:74:88:47:ae:c3:8c:24:23:b9:83:08:ce:78:
                    a8:86:de:6b:18:03:b5:4f:36:20:7c:b2:78:da:7e:
                    c2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:2F:D1:B7:B6:56:21:A0:80:78:7D:8B:1F:93:45:BF:52:47:CC:54
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3134302e3138342e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.140.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:94:42:32:c8:ee:46:90:e0:f2:3a:b8:9c:5f:79:9a:f6:8e:
         58:25:13:1e:ac:48:2a:9c:4e:df:12:61:9d:87:3a:c7:bb:ac:
         0f:52:f5:0a:70:36:90:ef:50:70:7f:87:ff:14:61:87:f1:52:
         ba:2f:f7:65:20:bd:86:a7:0e:54:84:42:a1:62:56:a6:15:1f:
         c4:ef:41:34:c7:09:03:e6:3f:52:ba:bb:b1:b5:87:a6:0d:cd:
         d9:ca:78:08:3f:9c:0e:56:5d:b0:13:d4:42:9c:e9:3c:e8:bc:
         83:60:c5:7b:73:be:47:bd:b7:a0:72:27:39:7c:da:b7:65:d4:
         17:ee:7b:b7:9b:e8:05:9e:a6:fa:d6:63:43:6b:fd:7c:c0:6c:
         a0:25:ae:e7:98:1c:b1:63:81:50:3e:13:ae:33:4d:e8:25:9d:
         f4:81:c5:01:5e:46:97:c4:39:8b:65:2d:1b:0a:44:32:d4:a5:
         9b:5a:f5:ef:1c:88:7b:b3:b6:a6:6d:b8:7b:77:3e:2c:25:4d:
         67:e5:73:b3:2a:2f:59:64:35:f7:63:d6:f5:36:fd:a6:89:dc:
         dd:9d:75:e1:59:7f:9a:bb:b6:49:cc:30:06:15:d8:7e:11:ee:
         70:d4:04:75:68:eb:9a:8d:8c:60:a5:f9:75:77:7e:aa:e1:a0:
         35:55:cd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-fra.rpki-client.org