Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e39302e3232312e302f32342d3234203d3e20323034313730.roa
File:                     34352e39302e3232312e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier:          ruXLhZPNb5zxusRI9IEVdp6SFSUgGgS6jmdEryxRCnE=
Subject key identifier:   3B:C8:D8:A1:C7:D6:1D:A8:96:1D:B5:48:E2:12:62:B6:69:C3:AE:48
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       1561F2B7D99026CDFB6D574D117D94DF558A5B0F
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e39302e3232312e302f32342d3234203d3e20323034313730.roa
Signing time:             Sat 22 Oct 2022 04:33:27 +0000
ROA not before:           Sat 22 Oct 2022 04:28:27 +0000
ROA not after:            Sat 21 Oct 2023 04:33:27 +0000
asID:                     204170
IP address blocks:        45.90.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:61:f2:b7:d9:90:26:cd:fb:6d:57:4d:11:7d:94:df:55:8a:5b:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:27 2022 GMT
            Not After : Oct 21 04:33:27 2023 GMT
        Subject: CN=3BC8D8A1C7D61DA8961DB548E21262B669C3AE48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4c:48:ce:a9:ed:61:19:c3:94:2c:3b:82:5c:
                    d2:6f:c0:b5:af:1c:47:73:9c:6c:b8:d5:73:e8:57:
                    08:4b:52:49:31:d9:73:13:00:49:8e:48:95:b3:8e:
                    8c:ce:51:25:3d:16:16:d1:de:45:46:0d:eb:cc:e2:
                    16:16:76:ca:a0:94:ee:de:ae:4f:5e:a6:8a:bc:8d:
                    fd:2e:39:fd:bb:24:68:c2:6b:06:9f:4b:6d:ca:78:
                    90:0d:a3:7d:f7:13:dd:cf:09:c8:26:37:15:e1:7a:
                    a5:61:b9:ba:22:f9:43:47:b9:e6:7d:e4:5e:fa:01:
                    93:e1:0a:99:68:2d:f4:d9:7b:54:a2:74:27:55:76:
                    16:fc:29:06:21:b5:02:af:3d:4c:0a:a9:f8:6a:f6:
                    97:1a:fe:c0:2f:fa:05:bb:2f:41:a3:3e:c5:40:0a:
                    d9:b2:62:e0:27:ec:21:73:dc:f1:0d:56:e4:23:c5:
                    0f:28:8f:95:3c:6f:56:51:14:6f:33:5b:6c:0f:73:
                    1e:d5:a6:c2:ca:ed:59:6d:c7:d7:7f:d4:5a:ec:33:
                    17:10:b6:f6:8c:d8:09:76:1e:12:d0:65:49:f6:27:
                    33:bb:98:46:84:c2:a1:90:b1:76:a6:44:67:96:35:
                    32:0b:26:42:f9:3e:d1:42:21:8d:6b:00:ed:84:4d:
                    44:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C8:D8:A1:C7:D6:1D:A8:96:1D:B5:48:E2:12:62:B6:69:C3:AE:48
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e39302e3232312e302f32342d3234203d3e20323034313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.90.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:31:84:ad:15:93:ea:37:5b:3e:4c:f0:1d:15:ee:ef:65:ca:
         b6:69:2c:b5:5a:e9:f0:9d:f1:c8:a1:8f:e4:7e:e3:1d:8c:70:
         ff:e3:31:a2:0a:6e:e9:ab:e0:34:87:ff:0b:bb:04:73:79:30:
         7d:f2:db:84:ad:0e:db:9c:d7:fc:3f:d9:e4:c5:da:44:61:d3:
         09:4d:fa:f6:8a:b7:6f:03:92:e4:75:76:6b:0d:4b:c8:2f:81:
         87:be:c9:1b:2b:26:7b:7e:15:3f:6a:44:01:65:59:04:e3:bd:
         65:73:03:d5:23:34:3c:50:af:e6:3a:f1:30:7c:fb:4f:04:a6:
         b7:4e:90:ec:b2:11:aa:29:15:5b:72:c3:f0:6b:3c:89:77:20:
         51:aa:29:75:3b:8a:66:0b:ee:ae:aa:60:59:64:f9:bd:f4:7a:
         fd:1e:5e:f8:b6:54:3f:7f:fd:31:90:a3:d3:ab:ab:b3:27:05:
         21:6a:51:56:99:e7:88:dc:77:1c:5b:ca:09:3f:ce:2f:e6:b7:
         da:3a:8f:b6:d2:be:de:c7:1b:6c:73:68:bb:a4:97:b1:08:b1:
         3f:ac:2e:8f:4f:1c:e3:08:f5:b0:0b:a7:cb:f8:c8:40:c6:f0:
         01:7e:5c:5d:9a:ea:a2:21:71:45:e3:eb:01:7e:16:b6:eb:d7:
         36:cc:13:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:48 2023 by rpki-client on console-fra.rpki-client.org