Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/34352e3134332e38322e302f32342d3234203d3e2033333536.roa
File:                     34352e3134332e38322e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier:          +XZjgMhRJKYO7d892hcd4+sbWBO2MbF15/tSl07Ame0=
Subject key identifier:   E3:76:B2:A4:2F:DC:AE:62:C9:1B:EE:1A:FE:9B:FB:91:2B:F5:47:FA
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       3242F88CFFDB0FC57BBFD2576ADB4AD44F25F033
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/34352e3134332e38322e302f32342d3234203d3e2033333536.roa
Signing time:             Tue 28 Jun 2022 04:40:17 +0000
ROA not before:           Tue 28 Jun 2022 04:35:17 +0000
ROA not after:            Tue 27 Jun 2023 04:40:17 +0000
asID:                     3356
IP address blocks:        45.143.82.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:42:f8:8c:ff:db:0f:c5:7b:bf:d2:57:6a:db:4a:d4:4f:25:f0:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Jun 28 04:35:17 2022 GMT
            Not After : Jun 27 04:40:17 2023 GMT
        Subject: CN=E376B2A42FDCAE62C91BEE1AFE9BFB912BF547FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:84:a4:4d:ad:aa:a1:0a:dd:6f:f7:86:85:c3:
                    cc:82:79:8b:cb:ac:32:26:f0:6b:a8:5b:47:bc:6f:
                    6b:fa:0d:eb:d4:95:59:09:57:79:20:b8:4b:99:a8:
                    c0:7d:a7:1c:a9:2b:af:ef:2d:73:82:b0:f3:7b:b3:
                    22:51:23:59:7d:77:23:6d:48:56:6e:20:37:54:9f:
                    20:22:da:44:96:b3:0f:4c:7a:9c:04:95:b3:98:57:
                    2f:da:7a:1c:b7:b9:90:65:f9:16:27:b0:9a:4f:10:
                    f1:95:a8:65:81:ff:39:88:e9:c3:94:d3:46:24:7d:
                    51:3c:ba:c8:c3:3e:a0:31:71:0b:14:c1:c1:cb:22:
                    c0:d5:da:7a:71:55:66:ee:32:cc:62:d5:39:da:5c:
                    a9:f5:35:7d:fa:e3:8d:99:81:e2:76:e7:5b:0d:f9:
                    95:96:b1:08:7a:ce:13:f1:78:5a:6c:94:58:50:9b:
                    3e:72:78:ef:29:3c:db:ef:91:0c:7a:bd:1e:c8:6e:
                    33:a3:63:1e:7f:9e:a7:26:2f:35:ff:93:62:be:91:
                    e0:ed:5d:72:80:37:1b:28:78:89:30:47:9c:fe:29:
                    55:cf:aa:fc:62:bf:12:51:0e:e9:0f:66:38:3e:fb:
                    3a:4f:83:dd:3a:48:c3:3a:39:03:39:2b:63:03:29:
                    92:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:76:B2:A4:2F:DC:AE:62:C9:1B:EE:1A:FE:9B:FB:91:2B:F5:47:FA
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/34352e3134332e38322e302f32342d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.143.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:fd:57:b5:86:9b:3f:f4:62:84:1e:1f:4b:24:62:b3:ef:c5:
         6c:78:47:73:8f:fa:6f:71:9a:c7:cc:ca:88:4a:b9:ee:3b:06:
         24:13:b6:f7:23:d4:0f:4d:cf:e5:1a:24:bd:1d:a8:41:38:83:
         a5:bd:32:05:e3:93:0b:e0:59:56:8a:c6:26:86:e2:a9:d0:4c:
         54:1c:50:57:44:d8:64:13:1c:8d:cb:d7:40:50:fa:0f:5b:28:
         0e:70:d1:00:bf:b2:21:2d:f9:df:f0:38:15:54:1d:66:29:0c:
         5b:a9:4c:ac:93:2e:5c:93:43:2e:21:01:b2:92:3a:0c:c7:66:
         4a:aa:d8:45:6f:73:68:4a:92:00:55:ae:7d:59:17:e1:72:9d:
         cb:a4:c8:27:86:61:c6:a0:91:c2:7d:ac:50:50:85:e6:18:00:
         49:24:50:92:23:da:7f:f7:fb:dd:fb:d9:0c:c5:f9:84:88:e6:
         cf:e0:53:4e:53:78:35:1b:d1:20:45:b3:5f:77:5f:71:ac:3c:
         84:54:d6:3f:03:ad:53:78:8e:fe:44:48:1c:c8:1b:d3:2a:d2:
         6a:55:a5:ff:71:5e:ff:94:7e:5b:91:06:bf:d8:ad:58:89:5c:
         b7:02:9e:57:6e:d6:47:a3:18:a9:ff:89:9d:4c:05:69:d5:ca:
         cd:6d:e8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:42 2023 by rpki-client on console-ams.rpki-client.org