Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e38312e342e302f32322d3234203d3e2030.roa
File:                     34352e38312e342e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          QzWiGq+ZcwL+QCOw+lX0HZlq6ZHyONWNUL2TmiOKlso=
Subject key identifier:   A2:E0:A1:06:1D:CE:0D:D2:91:FD:E0:CB:06:10:5B:16:D8:FC:82:D0
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       2DCC2AFEA35CF7D50527D162C1E115EEFC251305
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e38312e342e302f32322d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 15:52:59 +0000
ROA not before:           Fri 03 Mar 2023 15:47:59 +0000
ROA not after:            Fri 01 Mar 2024 15:52:59 +0000
asID:                     0
IP address blocks:        45.81.4.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:cc:2a:fe:a3:5c:f7:d5:05:27:d1:62:c1:e1:15:ee:fc:25:13:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Mar  3 15:47:59 2023 GMT
            Not After : Mar  1 15:52:59 2024 GMT
        Subject: CN=A2E0A1061DCE0DD291FDE0CB06105B16D8FC82D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d6:cf:c8:a9:a6:ff:96:d9:a0:f0:11:07:10:
                    be:b4:b2:b7:1d:c0:3d:ed:b9:32:6f:91:73:d1:ac:
                    1b:2c:ea:8e:a4:e6:54:cf:28:9f:35:49:ff:11:11:
                    86:4a:48:e1:64:3e:2d:be:c4:0f:15:9f:b1:02:90:
                    8d:26:ae:d4:ff:4e:7f:65:52:17:61:35:64:53:ff:
                    e0:73:57:c5:5f:96:50:0f:b2:2e:48:7a:4a:4c:2a:
                    6c:2a:35:e1:3a:a7:21:7e:0f:b4:c6:f2:e2:35:6f:
                    ca:3b:38:11:9a:6d:63:61:a9:b0:1d:bf:56:3b:15:
                    fe:cc:53:f7:9a:50:ba:9b:7b:d2:7c:d5:63:67:69:
                    41:c0:68:fd:94:96:8d:3e:3e:8b:69:0a:0f:71:13:
                    07:89:2e:35:4a:e4:4a:f5:11:64:4c:ef:9b:94:3f:
                    28:a7:96:45:96:14:7d:8b:d7:47:6d:ad:07:7f:74:
                    1e:64:f2:0f:a1:50:c8:5b:5d:0d:d2:34:9e:d0:c6:
                    36:af:2f:02:52:17:f4:f8:56:49:7e:cd:93:bf:b5:
                    69:0c:33:2d:24:1a:89:d2:87:2a:34:46:80:3b:9b:
                    70:2f:4d:89:69:db:4b:02:53:26:5d:a6:bf:c3:6d:
                    e5:c4:26:4b:c3:b5:ce:e2:83:83:63:77:51:68:36:
                    01:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E0:A1:06:1D:CE:0D:D2:91:FD:E0:CB:06:10:5B:16:D8:FC:82:D0
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e38312e342e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.81.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:13:aa:57:6d:5e:5f:d6:f3:39:cf:79:18:42:de:87:64:51:
         5b:31:ef:a7:87:64:f4:78:af:7a:b7:5b:8a:bc:53:8b:7f:02:
         cd:7d:a8:33:cd:a7:80:1e:28:81:a8:f5:68:0e:61:b7:0a:d3:
         44:9d:fa:51:b5:fa:10:fb:4a:1f:8f:ac:2e:d7:a3:ad:20:c7:
         29:e9:12:b4:30:59:4b:7c:3d:d9:77:8a:90:39:72:e0:6d:1b:
         8b:cc:ed:99:6b:f5:56:b2:d6:a4:ed:4a:1e:90:59:6e:8d:74:
         1e:e7:39:4d:87:6b:92:b1:6c:28:d1:ce:b8:71:51:74:7b:d3:
         85:bc:63:3f:84:ff:2f:41:7e:22:4e:27:e7:91:93:04:87:2e:
         e4:bb:65:fc:07:66:df:e9:22:33:b2:ac:0f:34:41:8d:bb:8c:
         01:19:a1:bd:dc:d4:48:a8:bb:2c:12:49:2e:2c:9b:c0:25:70:
         52:5a:c9:a7:12:b3:df:cb:3f:07:6b:50:2c:9f:e0:58:b3:96:
         90:10:67:dd:f9:d3:14:45:4c:a6:d7:27:16:d8:75:85:75:85:
         b0:0e:23:c2:de:01:14:79:1b:93:10:af:4e:ea:13:1f:cf:d4:
         cc:2c:02:79:b0:ee:e3:74:ba:41:40:54:9c:bc:f9:e3:63:ee:
         f9:d8:21:52
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgIULcwq/qNc99UFJ9FiweEV7vwlEwUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdhOGFmMmI1ZmU4MzFmZjU4OWViMzhhZTNjMDI1Y2U4
NzFmMjNlNzAeFw0yMzAzMDMxNTQ3NTlaFw0yNDAzMDExNTUyNTlaMDMxMTAvBgNV
BAMTKEEyRTBBMTA2MURDRTBERDI5MUZERTBDQjA2MTA1QjE2RDhGQzgyRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+1s/Iqab/ltmg8BEHEL60srcd
wD3tuTJvkXPRrBss6o6k5lTPKJ81Sf8REYZKSOFkPi2+xA8Vn7ECkI0mrtT/Tn9l
UhdhNWRT/+BzV8VfllAPsi5IekpMKmwqNeE6pyF+D7TG8uI1b8o7OBGabWNhqbAd
v1Y7Ff7MU/eaULqbe9J81WNnaUHAaP2Ulo0+PotpCg9xEweJLjVK5Er1EWRM75uU
PyinlkWWFH2L10dtrQd/dB5k8g+hUMhbXQ3SNJ7QxjavLwJSF/T4Vkl+zZO/tWkM
My0kGonShyo0RoA7m3AvTYlp20sCUyZdpr/DbeXEJkvDtc7ig4Njd1FoNgHFAgMB
AAGjggHiMIIB3jAdBgNVHQ4EFgQUouChBh3ODdKR/eDLBhBbFtj8gtAwHwYDVR0j
BBgwFoAUB6ivK1/oMf9YnrOK48AlzocfI+cwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzIvMDdBOEFGMkI1RkU4MzFGRjU4OUVCMzhBRTNDMDI1Q0U4
NzFGMjNFNy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0I2aXZLMV9vTWY5WW5y
T0s0OEFsem9jZkktYy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5y
c3luYzovL3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8y
LzM0MzUyZTM4MzEyZTM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzAucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAItUQQwDQYJKoZIhvcNAQELBQADggEBAJoTqldtXl/W8znPeRhC3odkUVsx
76eHZPR4r3q3W4q8U4t/As19qDPNp4AeKIGo9WgOYbcK00Sd+lG1+hD7Sh+PrC7X
o60gxynpErQwWUt8Pdl3ipA5cuBtG4vM7Zlr9Vay1qTtSh6QWW6NdB7nOU2Ha5Kx
bCjRzrhxUXR704W8Yz+E/y9BfiJOJ+eRkwSHLuS7ZfwHZt/pIjOyrA80QY27jAEZ
ob3c1EiouywSSS4sm8AlcFJayacSs9/LPwdrUCyf4FizlpAQZ9350xRFTKbXJxbY
dYV1hbAOI8LeARR5G5MQr07qEx/P1MwsAnmw7uN0ukFAVJy8+eNj7vnYIVI=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:48 2023 by rpki-client on console-fra.rpki-client.org