Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/34352e3135322e3138382e302f32342d3234203d3e2031323339.roa
File:                     34352e3135322e3138382e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier:          JlBPOYDC2fh3xDZl3QZts+X4cEx+jmf1HJrSqFAyIxs=
Subject key identifier:   6B:53:AE:FB:DC:E1:97:F4:E7:6B:1B:DC:5F:0B:F3:BD:C0:3D:22:69
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       44ADA7C2918CC32F0B8D6940FADCAC4C5D884CDC
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/34352e3135322e3138382e302f32342d3234203d3e2031323339.roa
Signing time:             Thu 26 Jan 2023 11:48:40 +0000
ROA not before:           Thu 26 Jan 2023 11:43:40 +0000
ROA not after:            Thu 25 Jan 2024 11:48:40 +0000
asID:                     1239
IP address blocks:        45.152.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ad:a7:c2:91:8c:c3:2f:0b:8d:69:40:fa:dc:ac:4c:5d:88:4c:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jan 26 11:43:40 2023 GMT
            Not After : Jan 25 11:48:40 2024 GMT
        Subject: CN=6B53AEFBDCE197F4E76B1BDC5F0BF3BDC03D2269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5b:77:67:a7:35:54:9b:d6:0b:7e:db:f1:57:
                    2f:01:92:36:0a:6c:20:9c:13:6f:57:05:d3:28:89:
                    a2:b9:ab:fe:47:fa:19:0b:32:96:91:68:90:fc:60:
                    3a:4b:60:19:08:1d:62:36:26:7e:62:fc:90:1b:9e:
                    30:dc:5c:19:d7:dc:7a:4a:17:98:48:ed:18:d2:23:
                    eb:1e:ef:46:ee:0c:0c:fa:b3:0f:2b:9f:8f:8e:95:
                    08:d5:80:21:06:10:6a:d9:60:24:16:c4:a9:d3:95:
                    9e:4b:bf:18:34:d5:d9:f0:08:87:52:95:c9:29:e9:
                    81:4c:35:2d:87:29:59:da:63:fc:7c:15:c3:71:95:
                    ca:22:01:e0:22:0f:46:25:7e:67:05:81:d6:78:23:
                    f6:dd:0f:0f:db:c6:c6:64:bc:6a:0a:eb:72:ad:72:
                    17:f7:66:74:5d:67:14:a5:ba:8f:be:00:ae:4a:a2:
                    69:a4:03:6a:ab:32:eb:df:c9:31:74:2c:9b:5b:d2:
                    a4:20:7d:23:ca:0d:6f:0d:48:0a:0b:8b:7f:78:53:
                    1e:53:a7:b1:e5:45:58:88:85:2d:28:f8:6d:c1:f0:
                    9e:30:d7:26:d6:93:39:aa:b3:b5:96:f3:03:b9:60:
                    20:fb:b3:5b:64:73:aa:85:35:84:a3:43:48:63:24:
                    17:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:53:AE:FB:DC:E1:97:F4:E7:6B:1B:DC:5F:0B:F3:BD:C0:3D:22:69
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/34352e3135322e3138382e302f32342d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.152.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:86:a6:71:89:6a:e1:19:03:58:31:ba:5e:a5:62:8f:56:6b:
         3c:cb:05:fb:34:14:cb:88:1a:65:e9:63:35:94:4c:ea:fb:b4:
         37:53:f4:bc:18:62:5e:4b:3c:f4:99:ab:aa:27:0e:98:6c:16:
         df:aa:15:6a:22:43:b4:01:53:0c:0c:a5:e2:ae:f6:f1:d0:a4:
         1a:78:91:94:a8:b4:0e:10:6c:db:9a:36:78:66:90:40:f6:56:
         84:13:e4:31:af:f0:6b:71:72:3e:77:8e:f7:68:87:c7:bf:0f:
         d6:8b:db:b2:4b:7c:ce:47:ae:08:bd:0c:4b:86:40:bb:20:44:
         3b:e7:75:c1:ba:b6:1c:c9:15:ad:24:11:59:b3:e4:3a:17:a0:
         cd:13:f7:b5:b1:11:1b:66:da:f0:15:81:cf:c6:af:f9:7f:bb:
         da:81:96:71:ac:fa:d4:4d:02:42:ed:37:cd:28:bd:cc:30:92:
         ac:d3:1d:ad:0b:9e:c1:8b:9f:60:3f:f2:29:b1:89:0d:fa:f9:
         df:e3:9d:72:a4:00:44:e0:66:1f:c5:8b:e9:83:81:f7:f1:fb:
         a5:67:78:6c:cf:f5:12:25:2f:32:15:d0:91:12:68:99:f3:d7:
         5e:a7:c3:1f:df:5b:19:7b:e7:f1:5e:67:20:53:f0:19:1e:a1:
         2a:a5:2b:85
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIURK2nwpGMwy8LjWlA+tysTF2ITNwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMzAxMjYxMTQzNDBaFw0yNDAxMjUxMTQ4NDBaMDMxMTAvBgNV
BAMTKDZCNTNBRUZCRENFMTk3RjRFNzZCMUJEQzVGMEJGM0JEQzAzRDIyNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVW3dnpzVUm9YLftvxVy8BkjYK
bCCcE29XBdMoiaK5q/5H+hkLMpaRaJD8YDpLYBkIHWI2Jn5i/JAbnjDcXBnX3HpK
F5hI7RjSI+se70buDAz6sw8rn4+OlQjVgCEGEGrZYCQWxKnTlZ5Lvxg01dnwCIdS
lckp6YFMNS2HKVnaY/x8FcNxlcoiAeAiD0YlfmcFgdZ4I/bdDw/bxsZkvGoK63Kt
chf3ZnRdZxSluo++AK5KommkA2qrMuvfyTF0LJtb0qQgfSPKDW8NSAoLi394Ux5T
p7HlRViIhS0o+G3B8J4w1ybWkzmqs7WW8wO5YCD7s1tkc6qFNYSjQ0hjJBeLAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUa1Ou+9zhl/TnaxvcXwvzvcA9ImkwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4Zq
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zNDM1MmUzMTM1MzIyZTMxMzgzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMx
MzIzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALZi8MA0GCSqGSIb3DQEBCwUAA4IBAQDDhqZxiWrh
GQNYMbpepWKPVms8ywX7NBTLiBpl6WM1lEzq+7Q3U/S8GGJeSzz0mauqJw6YbBbf
qhVqIkO0AVMMDKXirvbx0KQaeJGUqLQOEGzbmjZ4ZpBA9laEE+Qxr/BrcXI+d473
aIfHvw/Wi9uyS3zOR64IvQxLhkC7IEQ753XBurYcyRWtJBFZs+Q6F6DNE/e1sREb
ZtrwFYHPxq/5f7vagZZxrPrUTQJC7TfNKL3MMJKs0x2tC57Bi59gP/IpsYkN+vnf
451ypABE4GYfxYvpg4H38fulZ3hsz/USJS8yFdCREmiZ89dep8Mf31sZe+fxXmcg
U/AZHqEqpSuF
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:50 2023 by rpki-client on console-fra.rpki-client.org