Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/11/34352e3134312e32332e302f32342d3234203d3e20323031313036.roa
File:                     34352e3134312e32332e302f32342d3234203d3e20323031313036.roa (raw, json)
Hash identifier:          B0S8uaOFedX8LAemBlCgx6/cCwFmYm+/Q/MwXixoH5c=
Subject key identifier:   4C:65:1D:2D:70:BD:54:5F:05:F7:60:EC:B6:54:76:C3:BE:F2:CF:A6
Certificate issuer:       /CN=54ed4605385d5edb0dd5c3ea049c52a5159b7cf2
Certificate serial:       5225DFA827CEF50891615598FF180D7AFC236A72
Authority key identifier: 54:ED:46:05:38:5D:5E:DB:0D:D5:C3:EA:04:9C:52:A5:15:9B:7C:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VO1GBThdXtsN1cPqBJxSpRWbfPI.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/11/34352e3134312e32332e302f32342d3234203d3e20323031313036.roa
Signing time:             Fri 18 Dec 2020 12:24:05 +0000
ROA not before:           Fri 18 Dec 2020 12:19:05 +0000
ROA not after:            Fri 17 Dec 2021 12:24:05 +0000
asID:                     201106
IP address blocks:        45.141.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:25:df:a8:27:ce:f5:08:91:61:55:98:ff:18:0d:7a:fc:23:6a:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54ed4605385d5edb0dd5c3ea049c52a5159b7cf2
        Validity
            Not Before: Dec 18 12:19:05 2020 GMT
            Not After : Dec 17 12:24:05 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:34:04:e4:69:b9:c4:3b:97:d8:a1:fd:ed:30:
                    1e:e6:c9:7c:05:1a:01:18:55:40:64:6d:f9:81:16:
                    7f:ca:92:c8:03:14:a2:69:1f:6c:a1:2d:d3:a7:8a:
                    b0:48:f8:6e:d8:4e:63:3d:c0:1c:5b:9a:dc:ae:eb:
                    6a:8a:b6:87:e4:c2:d2:1a:8d:f6:12:65:d3:1e:2a:
                    23:4a:67:7a:ce:82:b5:1b:2d:78:88:2f:0e:63:c3:
                    ee:00:a0:f5:38:e3:82:d5:93:ee:e1:44:1b:b9:68:
                    a8:a8:ea:cf:57:e4:49:f2:5a:04:d5:f7:f3:8a:a5:
                    5f:16:23:8a:7b:6a:98:29:58:49:8e:7d:18:5a:bf:
                    a2:fd:c7:3c:ec:6a:7a:a9:1e:68:ce:9b:62:fe:c3:
                    8f:4c:8c:de:f1:6d:bf:3b:6f:09:16:9a:e1:e3:d3:
                    1c:ec:a2:b1:6b:c9:bd:aa:f0:2a:c6:c5:a6:bb:12:
                    88:af:99:4d:bf:18:9b:12:03:19:dc:b3:fe:13:32:
                    d5:f4:79:e5:14:7a:eb:88:09:a8:60:95:10:76:9f:
                    b8:04:d2:80:a6:eb:8d:99:10:8d:09:9d:8e:91:cb:
                    c0:26:e5:f3:36:b6:a4:e4:7e:5c:8c:37:6b:68:69:
                    ce:0c:05:85:e9:14:43:1f:1b:88:fa:36:93:33:f4:
                    72:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:65:1D:2D:70:BD:54:5F:05:F7:60:EC:B6:54:76:C3:BE:F2:CF:A6
            X509v3 Authority Key Identifier:
                keyid:54:ED:46:05:38:5D:5E:DB:0D:D5:C3:EA:04:9C:52:A5:15:9B:7C:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/11/54ED4605385D5EDB0DD5C3EA049C52A5159B7CF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VO1GBThdXtsN1cPqBJxSpRWbfPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/11/34352e3134312e32332e302f32342d3234203d3e20323031313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.141.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:83:54:a7:65:b2:bf:2a:4a:ef:d9:51:95:b9:ed:47:f0:3b:
         8b:08:e0:e5:27:14:28:b0:88:2a:02:37:e0:56:96:78:75:31:
         bb:47:f0:52:74:ad:26:60:77:07:93:66:87:e2:b3:7e:24:a3:
         e4:b1:99:ee:70:c2:5a:6e:ab:e8:50:fd:8a:25:f1:87:e8:6c:
         3b:eb:80:01:e0:37:e5:4f:4b:52:b4:93:db:16:bb:78:89:41:
         ed:89:e1:eb:56:fc:3c:cc:84:86:b5:62:d2:a0:0d:30:98:5e:
         f1:66:c8:06:69:a3:61:9e:5f:8f:c5:3f:0a:2c:8b:51:c1:f4:
         9b:b8:1a:03:4c:e6:ef:ae:28:06:fb:91:3b:48:10:74:03:3c:
         d5:d8:56:67:a1:6d:ea:1f:ae:98:49:45:a5:35:b4:54:3b:33:
         78:ff:3c:f4:bb:7e:52:12:b4:03:09:d7:3a:05:57:82:f4:5c:
         64:37:e0:24:d5:e9:c4:d8:01:4e:c5:55:29:0c:d3:de:c7:0b:
         fb:d3:19:50:3c:07:fa:3b:cd:80:e8:ef:c3:b8:40:c5:cd:87:
         e5:87:61:86:78:5d:5f:62:49:42:fe:19:8e:0b:e6:f2:cf:69:
         37:12:89:75:cb:9d:23:da:2d:60:91:ec:85:bd:3b:f7:24:12:
         1f:c1:12:6c
-----BEGIN CERTIFICATE-----
MIIG5TCCBc2gAwIBAgIUUiXfqCfO9QiRYVWY/xgNevwjanIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRlZDQ2MDUzODVkNWVkYjBkZDVjM2VhMDQ5YzUyYTUx
NTliN2NmMjAeFw0yMDEyMTgxMjE5MDVaFw0yMTEyMTcxMjI0MDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREUzNDA0RTQ2OUI5QzQzQjk3
RDhBMUZERUQzMDFFRTZDOTdDMDUxQTAxMTg1NTQwNjQ2REY5ODExNjdGQ0E5MkM4
MDMxNEEyNjkxRjZDQTEyREQzQTc4QUIwNDhGODZFRDg0RTYzM0RDMDFDNUI5QURD
QUVFQjZBOEFCNjg3RTRDMkQyMUE4REY2MTI2NUQzMUUyQTIzNEE2NzdBQ0U4MkI1
MUIyRDc4ODgyRjBFNjNDM0VFMDBBMEY1MzhFMzgyRDU5M0VFRTE0NDFCQjk2OEE4
QThFQUNGNTdFNDQ5RjI1QTA0RDVGN0YzOEFBNTVGMTYyMzhBN0I2QTk4Mjk1ODQ5
OEU3RDE4NUFCRkEyRkRDNzNDRUM2QTdBQTkxRTY4Q0U5QjYyRkVDMzhGNEM4Q0RF
RjE2REJGM0I2RjA5MTY5QUUxRTNEMzFDRUNBMkIxNkJDOUJEQUFGMDJBQzZDNUE2
QkIxMjg4QUY5OTREQkYxODlCMTIwMzE5RENCM0ZFMTMzMkQ1RjQ3OUU1MTQ3QUVC
ODgwOUE4NjA5NTEwNzY5RkI4MDREMjgwQTZFQjhEOTkxMDhEMDk5RDhFOTFDQkMw
MjZFNUYzMzZCNkE0RTQ3RTVDOEMzNzZCNjg2OUNFMEMwNTg1RTkxNDQzMUYxQjg4
RkEzNjkzMzNGNDcyNzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA3jQE5Gm5xDuX2KH97TAe5sl8BRoBGFVAZG35gRZ/ypLIAxSiaR9s
oS3Tp4qwSPhu2E5jPcAcW5rcrutqiraH5MLSGo32EmXTHiojSmd6zoK1Gy14iC8O
Y8PuAKD1OOOC1ZPu4UQbuWioqOrPV+RJ8loE1ffziqVfFiOKe2qYKVhJjn0YWr+i
/cc87Gp6qR5ozpti/sOPTIze8W2/O28JFprh49Mc7KKxa8m9qvAqxsWmuxKIr5lN
vxibEgMZ3LP+EzLV9HnlFHrriAmoYJUQdp+4BNKApuuNmRCNCZ2OkcvAJuXzNrak
5H5cjDdraGnODAWF6RRDHxuI+jaTM/RyeQIDAQABo4IB8zCCAe8wHQYDVR0OBBYE
FExlHS1wvVRfBfdg7LZUdsO+8s+mMB8GA1UdIwQYMBaAFFTtRgU4XV7bDdXD6gSc
UqUVm3zyMA4GA1UdDwEB/wQEAwIHgDBwBgNVHR8EaTBnMGWgY6Bhhl9yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xMS81NEVE
NDYwNTM4NUQ1RURCMERENUMzRUEwNDlDNTJBNTE1OUI3Q0YyLmNybDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk8xR0JUaGRYdHNOMWNQcUJKeFNwUldiZlBJLmNlcjCB
iQYIKwYBBQUHAQsEfTB7MHkGCCsGAQUFBzALhm1yc3luYzovL3Jwa2kxLnRlcnJh
dHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xMS8zNDM1MmUzMTM0MzEyZTMy
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzEzMTMwMzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAAtjRcwDQYJKoZIhvcNAQELBQADggEBAAmDVKdlsr8qSu/ZUZW57UfwO4sI4OUn
FCiwiCoCN+BWlnh1MbtH8FJ0rSZgdweTZofis34ko+Sxme5wwlpuq+hQ/Yol8Yfo
bDvrgAHgN+VPS1K0k9sWu3iJQe2J4etW/DzMhIa1YtKgDTCYXvFmyAZpo2GeX4/F
Pwosi1HB9Ju4GgNM5u+uKAb7kTtIEHQDPNXYVmehbeofrphJRaU1tFQ7M3j/PPS7
flIStAMJ1zoFV4L0XGQ34CTV6cTYAU7FVSkM097HC/vTGVA8B/o7zYDo78O4QMXN
h+WHYYZ4XV9iSUL+GY4L5vLPaTcSiXXLnSPaLWCR7IW9O/ckEh/BEmw=
-----END CERTIFICATE-----