Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/11/34352e3134312e32332e302f32342d3234203d3e20313332333136.roa
File:                     34352e3134312e32332e302f32342d3234203d3e20313332333136.roa (raw, json)
Hash identifier:          044Y3dUS/2g+K1A+svYrH46W+uvJysFcL0gjA4nCprM=
Subject key identifier:   B3:14:AD:47:49:4A:4D:CB:A0:48:5E:8E:9A:01:84:E1:EF:AD:01:B0
Certificate issuer:       /CN=54ed4605385d5edb0dd5c3ea049c52a5159b7cf2
Certificate serial:       7D841710CF1B3F2ECB5039D6D5CBA87BCF1CA8A9
Authority key identifier: 54:ED:46:05:38:5D:5E:DB:0D:D5:C3:EA:04:9C:52:A5:15:9B:7C:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VO1GBThdXtsN1cPqBJxSpRWbfPI.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/11/34352e3134312e32332e302f32342d3234203d3e20313332333136.roa
Signing time:             Fri 27 Nov 2020 15:10:09 +0000
ROA not before:           Fri 27 Nov 2020 15:05:09 +0000
ROA not after:            Fri 26 Nov 2021 15:10:09 +0000
asID:                     132316
IP address blocks:        45.141.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:84:17:10:cf:1b:3f:2e:cb:50:39:d6:d5:cb:a8:7b:cf:1c:a8:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54ed4605385d5edb0dd5c3ea049c52a5159b7cf2
        Validity
            Not Before: Nov 27 15:05:09 2020 GMT
            Not After : Nov 26 15:10:09 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b4:aa:ff:fd:8f:a0:9c:ac:45:5f:6c:3e:43:
                    97:f5:43:1d:75:62:50:e7:5a:2c:ed:bf:ae:eb:2d:
                    77:30:a5:2e:2f:c9:37:dc:82:03:46:42:34:67:e8:
                    75:1a:d3:3b:1b:2f:67:a4:ce:01:48:eb:66:73:3a:
                    ba:eb:33:8d:ac:fa:aa:75:0d:cb:aa:60:af:fd:c1:
                    90:c9:9e:44:49:e0:34:4f:71:de:6e:cc:70:b7:ec:
                    42:0f:70:73:e0:8a:53:dc:ae:b8:00:ba:c3:5c:12:
                    68:d8:ad:19:df:f8:a8:d6:dd:57:17:94:60:a7:67:
                    b6:bc:eb:dd:18:fc:fe:c6:eb:00:9d:0f:2b:49:9c:
                    0b:e1:16:82:8a:f1:49:b0:d9:45:ed:8e:9d:e0:bc:
                    5f:d1:89:4e:6a:16:ff:4f:4b:cb:60:4c:ec:f6:e1:
                    7e:58:7d:c8:8d:11:2e:a9:aa:09:d7:9a:b2:d8:1d:
                    c9:32:58:c8:03:42:c2:82:33:5b:15:4b:ba:7c:e4:
                    6c:ba:67:40:ec:0d:75:69:bd:f2:66:a4:c7:00:c3:
                    84:d1:5e:ef:38:e8:d5:23:0f:f6:4a:b1:20:c3:e4:
                    ba:fd:c9:56:8e:8d:a5:86:6b:48:14:47:93:c7:19:
                    ea:bd:b0:6b:77:a2:04:cc:48:f0:a8:51:bb:d8:ea:
                    bf:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:14:AD:47:49:4A:4D:CB:A0:48:5E:8E:9A:01:84:E1:EF:AD:01:B0
            X509v3 Authority Key Identifier:
                keyid:54:ED:46:05:38:5D:5E:DB:0D:D5:C3:EA:04:9C:52:A5:15:9B:7C:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/11/54ED4605385D5EDB0DD5C3EA049C52A5159B7CF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VO1GBThdXtsN1cPqBJxSpRWbfPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/11/34352e3134312e32332e302f32342d3234203d3e20313332333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.141.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:f2:0d:7c:1a:d3:70:0f:17:67:99:ea:05:6c:29:e4:cb:d9:
         48:20:87:c5:a9:e2:63:e0:8c:dc:70:32:71:07:1b:f6:50:16:
         2a:fd:cb:0b:53:40:29:8b:12:02:8f:bd:6c:2a:e9:56:80:70:
         ea:9c:66:05:9b:9a:c5:5b:01:8e:d5:4a:f8:90:37:54:45:3d:
         9c:7a:64:8f:f7:49:ee:fb:9a:4d:fb:ef:9c:2e:c3:49:7d:7d:
         5b:73:f8:cf:b8:74:d0:4b:d8:31:56:07:57:17:8c:f2:7a:e2:
         c1:a4:55:20:8c:4e:f2:33:9e:84:8b:1b:ee:f0:f6:c5:dc:0e:
         11:6c:67:a5:50:09:0c:cf:00:ab:b1:5d:3b:e8:b4:ac:51:dd:
         72:10:65:c9:21:3c:62:5b:b0:50:53:f8:3a:44:44:16:03:30:
         d7:7e:25:47:60:41:12:15:5b:78:de:e8:a4:9d:bd:40:fd:49:
         f6:7c:32:d1:9e:ff:71:3d:d7:99:1d:a3:16:f6:e4:99:ab:1e:
         1c:65:74:9f:d1:4d:8f:d3:84:d1:5a:7e:e1:d3:16:55:15:76:
         e7:c5:28:7f:e2:d8:d7:5f:f4:05:6d:8e:52:d3:55:04:62:4e:
         b4:28:9f:21:ac:80:f5:58:f2:3a:4e:ec:b9:d1:f9:31:a4:b1:
         06:5c:55:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----