Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/108/34352e31342e3139342e302f32342d3332203d3e203531313637.roa
File:                     34352e31342e3139342e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          rVIdOQw4OFnA/bU7paxQXQDwonr8jJdkZUL0FY5+tPE=
Subject key identifier:   A0:E7:59:D0:26:7F:14:11:D2:AB:02:7D:F5:18:91:45:D5:39:43:F2
Certificate issuer:       /CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
Certificate serial:       556B6489939C4324A357E57543D0F60B286B5A33
Authority key identifier: 79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/108/34352e31342e3139342e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:39 +0000
ROA not before:           Sat 22 Oct 2022 04:28:39 +0000
ROA not after:            Sat 21 Oct 2023 04:33:39 +0000
asID:                     51167
IP address blocks:        45.14.194.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:6b:64:89:93:9c:43:24:a3:57:e5:75:43:d0:f6:0b:28:6b:5a:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
        Validity
            Not Before: Oct 22 04:28:39 2022 GMT
            Not After : Oct 21 04:33:39 2023 GMT
        Subject: CN=A0E759D0267F1411D2AB027DF5189145D53943F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:13:51:9c:94:e8:d4:44:4b:75:f8:2b:cb:4d:
                    8c:ee:4a:0a:0a:6e:a7:86:3d:9c:c3:ad:82:29:5b:
                    f0:bb:a0:96:8f:c3:28:e2:0b:5a:56:e6:7b:ce:c9:
                    b0:ad:c1:a2:9c:cb:a9:57:c9:93:b5:4d:45:33:bf:
                    76:43:6c:3c:cc:93:c7:25:4e:31:60:7a:b8:aa:7d:
                    e3:63:52:8b:1b:31:1e:47:0a:9b:4f:a2:1b:0a:9c:
                    c4:0f:c3:8f:c9:d5:00:96:6b:8d:03:58:cb:e6:06:
                    17:14:43:69:f7:a4:51:84:f0:28:fe:b1:0d:89:ed:
                    0b:5f:17:81:b8:ae:07:0d:e8:b2:e1:9d:15:2d:82:
                    f2:e7:dc:98:47:fd:64:bf:b5:c6:fd:54:55:ac:01:
                    d5:42:85:ad:44:3c:05:3b:e1:30:51:60:0a:cc:d3:
                    00:b0:78:cd:3c:25:bf:26:c4:fb:68:29:91:b1:7b:
                    f3:93:ac:ca:3d:e0:17:23:d9:81:d1:4b:b9:10:44:
                    8f:d9:ae:99:ee:2b:6f:0b:c7:6f:a6:12:c6:e9:95:
                    04:80:a4:1b:59:84:22:14:26:cc:e7:6f:69:aa:88:
                    6b:f6:45:7d:c2:62:82:32:8b:8f:d3:ef:fb:d5:e4:
                    82:24:22:a0:45:4b:98:ca:5b:37:23:d7:3e:39:6f:
                    e8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E7:59:D0:26:7F:14:11:D2:AB:02:7D:F5:18:91:45:D5:39:43:F2
            X509v3 Authority Key Identifier:
                keyid:79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/79131A4E3CC0851C2ED1363D6982E7436D3DF9F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/34352e31342e3139342e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.14.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:a0:aa:2c:5f:d6:24:4d:54:45:61:63:8f:7f:8e:c2:5e:bf:
         14:73:08:51:32:63:7b:19:e9:76:6a:18:6a:82:46:67:ae:db:
         d0:9a:ee:64:f2:01:60:b3:36:f1:7b:c9:c8:52:d0:70:09:67:
         29:a5:fa:26:67:f6:28:b2:ff:bc:5a:49:20:ba:9f:7a:0b:53:
         a3:36:69:8a:b8:95:88:cf:ce:41:8d:f8:19:90:a3:47:16:8e:
         bc:66:e2:a9:00:b5:9d:fb:2e:ca:2a:9b:f1:c5:77:3c:83:a4:
         aa:f4:f7:44:94:e0:25:b3:54:48:dc:1a:de:21:1b:14:a4:4d:
         06:f1:2d:0d:b5:be:45:06:3b:35:1f:aa:05:10:d4:e4:c0:55:
         c9:15:f4:d8:6c:e0:f5:c5:56:04:d9:aa:54:b6:97:7a:10:6f:
         86:65:50:28:86:2c:c5:46:5a:fe:da:de:f7:6b:d2:72:37:72:
         67:ec:0a:ac:97:8b:e9:48:5c:7f:06:00:22:ab:a7:07:08:37:
         86:7e:d8:31:a7:b9:b2:17:95:f2:18:2a:66:95:fe:d8:1f:dc:
         fe:8c:ea:1f:2f:94:97:0e:50:ef:1e:38:88:f6:b6:07:c2:4f:
         c7:63:b8:37:ed:1e:7b:e4:02:06:dc:a1:bc:ec:f1:d9:ff:2d:
         e3:29:cd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----