Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/11/34352e3134312e32312e302f32342d3234203d3e20323132323938.roa
File:                     34352e3134312e32312e302f32342d3234203d3e20323132323938.roa (raw, json)
Hash identifier:          v+34udE5ncrH74pRqNMxluHYobjSQaMVImp2kigqHfU=
Subject key identifier:   60:63:D2:E5:9E:6C:97:B8:CF:C1:11:93:F4:81:F9:7D:A8:18:39:4D
Certificate issuer:       /CN=54ed4605385d5edb0dd5c3ea049c52a5159b7cf2
Certificate serial:       6273FE82263A5F64D144F3EFE90EC3DE461833B9
Authority key identifier: 54:ED:46:05:38:5D:5E:DB:0D:D5:C3:EA:04:9C:52:A5:15:9B:7C:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VO1GBThdXtsN1cPqBJxSpRWbfPI.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/11/34352e3134312e32312e302f32342d3234203d3e20323132323938.roa
Signing time:             Fri 27 Nov 2020 15:10:09 +0000
ROA not before:           Fri 27 Nov 2020 15:05:09 +0000
ROA not after:            Fri 26 Nov 2021 15:10:09 +0000
asID:                     212298
IP address blocks:        45.141.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:73:fe:82:26:3a:5f:64:d1:44:f3:ef:e9:0e:c3:de:46:18:33:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54ed4605385d5edb0dd5c3ea049c52a5159b7cf2
        Validity
            Not Before: Nov 27 15:05:09 2020 GMT
            Not After : Nov 26 15:10:09 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c2:37:59:52:82:75:a4:c5:88:97:37:d5:80:
                    50:28:3a:58:64:f6:f8:f4:52:de:2e:41:26:e3:c4:
                    50:7e:b8:61:45:3d:31:d1:bf:d9:75:5a:18:fe:69:
                    93:26:36:b3:96:f1:c7:35:2a:e9:bf:59:6d:56:29:
                    9f:7c:78:f5:c8:a2:f6:b5:1b:38:37:47:09:40:d8:
                    85:66:96:d8:cb:08:12:ed:bd:52:f5:4f:70:cd:ed:
                    9a:e1:b3:e7:a7:92:31:89:1c:50:fa:b2:4a:b4:e3:
                    9e:e4:50:cd:3c:0c:d5:75:0f:2a:e6:d6:4e:5e:72:
                    b8:ab:08:58:f6:b6:17:fd:56:21:6b:c5:75:e6:fb:
                    7c:35:be:a1:b6:bc:fa:d6:e5:38:4e:fb:b6:4a:e9:
                    50:fb:95:8f:9f:c0:38:cc:e0:3d:a1:11:65:00:82:
                    ad:06:54:f3:07:1f:62:1f:f3:f1:7b:7f:f1:14:24:
                    48:7d:4f:19:9f:98:37:9f:d8:b2:54:44:f5:97:98:
                    3f:da:29:32:28:f1:ff:81:a3:c1:a1:14:e8:00:4a:
                    86:28:e9:82:ec:65:f1:77:4a:48:f4:ba:e3:93:0e:
                    35:f2:8f:1d:fd:d8:03:09:5b:b8:21:d1:23:2e:ef:
                    db:87:68:c8:08:a6:40:2b:46:89:cb:bc:78:98:c7:
                    24:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:63:D2:E5:9E:6C:97:B8:CF:C1:11:93:F4:81:F9:7D:A8:18:39:4D
            X509v3 Authority Key Identifier:
                keyid:54:ED:46:05:38:5D:5E:DB:0D:D5:C3:EA:04:9C:52:A5:15:9B:7C:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/11/54ED4605385D5EDB0DD5C3EA049C52A5159B7CF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VO1GBThdXtsN1cPqBJxSpRWbfPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/11/34352e3134312e32312e302f32342d3234203d3e20323132323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.141.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:73:6b:a8:4e:5b:87:f6:d9:13:2a:a0:c7:66:2f:94:76:16:
         c3:55:5a:76:de:c8:e7:88:9f:af:e0:1f:c7:8e:dc:7b:61:7d:
         76:3b:c2:e2:b2:9b:04:0b:31:6e:ac:60:38:59:ae:65:e8:64:
         d2:e4:e7:50:c1:1c:a1:9f:a4:1f:30:b2:4c:07:d6:4b:e2:3e:
         df:7e:2d:13:cb:a8:d6:04:7d:99:e9:51:d7:09:c4:7f:ba:0e:
         09:39:db:52:73:b1:29:f9:bd:a7:a2:4f:c5:8a:68:2d:91:97:
         1e:bb:f7:05:8e:71:54:db:bf:53:d0:02:08:63:ba:95:f0:36:
         42:b8:bc:08:68:ea:0d:de:a5:72:21:6f:ce:85:0d:52:e2:6f:
         9f:e9:24:7a:e5:3f:82:78:01:2e:e6:61:75:7b:04:1d:eb:8b:
         a3:b1:79:81:8d:24:37:ae:c2:08:db:46:47:db:37:6a:d2:f5:
         b0:ed:a2:7e:e9:ff:8e:c8:47:5f:61:42:c4:42:d6:33:61:28:
         ca:3c:70:6b:06:a8:79:6f:dd:74:14:cd:dc:fd:15:f3:c3:c3:
         1e:f1:b0:33:38:62:43:a8:21:c0:97:6f:26:f3:74:e5:45:51:
         bf:ea:4e:57:75:d3:4a:d0:d4:0c:33:79:88:d2:0e:d7:3e:8c:
         1f:b8:e4:d7
-----BEGIN CERTIFICATE-----
MIIG5TCCBc2gAwIBAgIUYnP+giY6X2TRRPPv6Q7D3kYYM7kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRlZDQ2MDUzODVkNWVkYjBkZDVjM2VhMDQ5YzUyYTUx
NTliN2NmMjAeFw0yMDExMjcxNTA1MDlaFw0yMTExMjYxNTEwMDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUFDMjM3NTk1MjgyNzVBNEM1
ODg5NzM3RDU4MDUwMjgzQTU4NjRGNkY4RjQ1MkRFMkU0MTI2RTNDNDUwN0VCODYx
NDUzRDMxRDFCRkQ5NzU1QTE4RkU2OTkzMjYzNkIzOTZGMUM3MzUyQUU5QkY1OTZE
NTYyOTlGN0M3OEY1QzhBMkY2QjUxQjM4Mzc0NzA5NDBEODg1NjY5NkQ4Q0IwODEy
RURCRDUyRjU0RjcwQ0RFRDlBRTFCM0U3QTc5MjMxODkxQzUwRkFCMjRBQjRFMzlF
RTQ1MENEM0MwQ0Q1NzUwRjJBRTZENjRFNUU3MkI4QUIwODU4RjZCNjE3RkQ1NjIx
NkJDNTc1RTZGQjdDMzVCRUExQjZCQ0ZBRDZFNTM4NEVGQkI2NEFFOTUwRkI5NThG
OUZDMDM4Q0NFMDNEQTExMTY1MDA4MkFEMDY1NEYzMDcxRjYyMUZGM0YxN0I3RkYx
MTQyNDQ4N0Q0RjE5OUY5ODM3OUZEOEIyNTQ0NEY1OTc5ODNGREEyOTMyMjhGMUZG
ODFBM0MxQTExNEU4MDA0QTg2MjhFOTgyRUM2NUYxNzc0QTQ4RjRCQUUzOTMwRTM1
RjI4RjFERkREODAzMDk1QkI4MjFEMTIzMkVFRkRCODc2OEM4MDhBNjQwMkI0Njg5
Q0JCQzc4OThDNzI0MTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAmsI3WVKCdaTFiJc31YBQKDpYZPb49FLeLkEm48RQfrhhRT0x0b/Z
dVoY/mmTJjazlvHHNSrpv1ltVimffHj1yKL2tRs4N0cJQNiFZpbYywgS7b1S9U9w
ze2a4bPnp5IxiRxQ+rJKtOOe5FDNPAzVdQ8q5tZOXnK4qwhY9rYX/VYha8V15vt8
Nb6htrz61uU4Tvu2SulQ+5WPn8A4zOA9oRFlAIKtBlTzBx9iH/Pxe3/xFCRIfU8Z
n5g3n9iyVET1l5g/2ikyKPH/gaPBoRToAEqGKOmC7GXxd0pI9Lrjkw418o8d/dgD
CVu4IdEjLu/bh2jICKZAK0aJy7x4mMckFwIDAQABo4IB8zCCAe8wHQYDVR0OBBYE
FGBj0uWebJe4z8ERk/SB+X2oGDlNMB8GA1UdIwQYMBaAFFTtRgU4XV7bDdXD6gSc
UqUVm3zyMA4GA1UdDwEB/wQEAwIHgDBwBgNVHR8EaTBnMGWgY6Bhhl9yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xMS81NEVE
NDYwNTM4NUQ1RURCMERENUMzRUEwNDlDNTJBNTE1OUI3Q0YyLmNybDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk8xR0JUaGRYdHNOMWNQcUJKeFNwUldiZlBJLmNlcjCB
iQYIKwYBBQUHAQsEfTB7MHkGCCsGAQUFBzALhm1yc3luYzovL3Jwa2kxLnRlcnJh
dHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xMS8zNDM1MmUzMTM0MzEyZTMy
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzMjM5Mzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAAtjRUwDQYJKoZIhvcNAQELBQADggEBAGJza6hOW4f22RMqoMdmL5R2FsNVWnbe
yOeIn6/gH8eO3HthfXY7wuKymwQLMW6sYDhZrmXoZNLk51DBHKGfpB8wskwH1kvi
Pt9+LRPLqNYEfZnpUdcJxH+6Dgk521JzsSn5vaeiT8WKaC2Rlx679wWOcVTbv1PQ
AghjupXwNkK4vAho6g3epXIhb86FDVLib5/pJHrlP4J4AS7mYXV7BB3ri6OxeYGN
JDeuwgjbRkfbN2rS9bDton7p/47IR19hQsRC1jNhKMo8cGsGqHlv3XQUzdz9FfPD
wx7xsDM4YkOoIcCXbybzdOVFUb/qTld100rQ1AwzeYjSDtc+jB+45Nc=
-----END CERTIFICATE-----