Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/110/34352e38352e3235302e302f32342d3234203d3e203134363138.roa
File:                     34352e38352e3235302e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          lbm+Yca6J/irY2+u/93iW7FwKBXPVkaov7DYoLjFsv8=
Subject key identifier:   5D:6A:C7:45:29:37:D0:2B:50:D1:1D:12:E2:CB:71:76:D2:92:E0:B6
Certificate issuer:       /CN=ec0ff27c66f3730ecc006c25e94d0a070b8707df
Certificate serial:       0968BE13D60E3FCA5B2E2E19D82FF2F5B295C1F6
Authority key identifier: EC:0F:F2:7C:66:F3:73:0E:CC:00:6C:25:E9:4D:0A:07:0B:87:07:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7A_yfGbzcw7MAGwl6U0KBwuHB98.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/110/34352e38352e3235302e302f32342d3234203d3e203134363138.roa
Signing time:             Fri 19 Feb 2021 12:46:20 +0000
ROA not before:           Fri 19 Feb 2021 12:41:20 +0000
ROA not after:            Fri 18 Feb 2022 12:46:20 +0000
asID:                     14618
IP address blocks:        45.85.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:68:be:13:d6:0e:3f:ca:5b:2e:2e:19:d8:2f:f2:f5:b2:95:c1:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec0ff27c66f3730ecc006c25e94d0a070b8707df
        Validity
            Not Before: Feb 19 12:41:20 2021 GMT
            Not After : Feb 18 12:46:20 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:10:71:ac:c9:8b:7f:73:6c:ff:78:f4:20:42:
                    4e:bd:2c:04:d7:76:b2:69:97:6f:bd:9b:95:ff:a6:
                    3b:17:28:90:25:df:8e:5a:22:c2:e2:c8:d9:50:60:
                    1b:c8:6f:9c:a8:a8:18:25:49:2c:8b:93:7a:16:d2:
                    0e:41:b0:ba:e1:da:e5:ec:40:e7:b5:44:19:4d:4c:
                    bb:40:4f:30:8e:49:6b:48:f3:cc:df:6c:7b:3a:c5:
                    32:33:0e:35:5b:02:95:6e:20:4b:82:70:e1:4a:80:
                    f3:93:6b:62:91:48:fa:e6:e2:0b:8b:65:39:c0:a6:
                    fa:2c:9c:4a:0b:38:19:5d:f2:4b:fa:32:11:35:ac:
                    e8:91:8d:3b:d7:9a:66:4a:d8:c4:04:1f:e6:e1:7c:
                    cf:68:d7:af:9d:a4:f4:2c:ff:7e:d4:24:8c:f3:a3:
                    ce:35:d2:2a:57:61:32:7f:65:49:b5:e1:2c:1a:23:
                    fb:0c:3e:45:1b:19:cd:56:4f:b4:de:a1:b9:4b:a8:
                    75:e0:b0:06:fd:8d:b6:c0:83:b5:a1:33:85:7f:51:
                    b6:c4:ab:c4:c3:bb:e9:a4:ce:27:ab:67:98:ee:29:
                    b5:8c:10:dd:98:c6:0f:2e:e1:83:d4:1c:46:78:1f:
                    f7:29:d1:cb:15:1b:8a:7d:73:0f:02:f9:a2:b6:af:
                    92:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6A:C7:45:29:37:D0:2B:50:D1:1D:12:E2:CB:71:76:D2:92:E0:B6
            X509v3 Authority Key Identifier:
                keyid:EC:0F:F2:7C:66:F3:73:0E:CC:00:6C:25:E9:4D:0A:07:0B:87:07:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/110/EC0FF27C66F3730ECC006C25E94D0A070B8707DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7A_yfGbzcw7MAGwl6U0KBwuHB98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/110/34352e38352e3235302e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.85.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:6d:db:44:85:30:07:ba:20:59:ee:51:a1:4c:d5:d7:67:65:
         56:9d:3b:1a:11:83:00:5f:71:03:6f:4a:eb:d2:8e:1e:04:87:
         97:74:5e:68:43:38:8c:a5:9d:13:4e:41:ca:84:0e:c7:7c:ef:
         1a:26:6f:b3:23:ba:6b:04:0e:49:ba:04:6c:ca:a0:1e:1a:be:
         08:49:66:02:39:65:4f:43:dd:c8:63:0e:58:b8:ef:a8:34:82:
         f0:3e:30:eb:46:6a:e8:fd:74:2f:44:98:77:cf:60:10:a3:0e:
         06:89:cc:aa:cd:b0:e5:e4:fc:c9:ba:81:2b:6c:59:d0:da:24:
         c8:3d:63:92:05:65:0f:76:66:5e:4c:7b:5e:0f:93:92:f3:a8:
         cc:48:88:9b:30:41:ef:41:1e:a8:77:c9:62:49:50:e2:cd:a8:
         48:91:74:b6:c8:a8:ae:a0:86:ac:b0:27:49:f6:d1:4b:f2:75:
         a9:cb:20:ff:75:d8:16:ff:c6:a1:01:a1:ed:56:0a:54:db:9c:
         d6:96:e8:97:fd:71:7c:5b:36:e4:15:95:5c:fc:1a:ea:d1:b9:
         05:ac:c4:f9:f0:8e:fd:02:ed:42:89:07:14:e0:f6:18:12:64:
         66:1d:d7:c4:90:51:43:cc:00:c1:52:12:ef:6d:e2:23:7e:f3:
         ce:27:7a:ec
-----BEGIN CERTIFICATE-----
MIIG5TCCBc2gAwIBAgIUCWi+E9YOP8pbLi4Z2C/y9bKVwfYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWMwZmYyN2M2NmYzNzMwZWNjMDA2YzI1ZTk0ZDBhMDcw
Yjg3MDdkZjAeFw0yMTAyMTkxMjQxMjBaFw0yMjAyMTgxMjQ2MjBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDcxMDcxQUNDOThCN0Y3MzZD
RkY3OEY0MjA0MjRFQkQyQzA0RDc3NkIyNjk5NzZGQkQ5Qjk1RkZBNjNCMTcyODkw
MjVERjhFNUEyMkMyRTJDOEQ5NTA2MDFCQzg2RjlDQThBODE4MjU0OTJDOEI5MzdB
MTZEMjBFNDFCMEJBRTFEQUU1RUM0MEU3QjU0NDE5NEQ0Q0JCNDA0RjMwOEU0OTZC
NDhGM0NDREY2QzdCM0FDNTMyMzMwRTM1NUIwMjk1NkUyMDRCODI3MEUxNEE4MEYz
OTM2QjYyOTE0OEZBRTZFMjBCOEI2NTM5QzBBNkZBMkM5QzRBMEIzODE5NURGMjRC
RkEzMjExMzVBQ0U4OTE4RDNCRDc5QTY2NEFEOEM0MDQxRkU2RTE3Q0NGNjhEN0FG
OURBNEY0MkNGRjdFRDQyNDhDRjNBM0NFMzVEMjJBNTc2MTMyN0Y2NTQ5QjVFMTJD
MUEyM0ZCMEMzRTQ1MUIxOUNENTY0RkI0REVBMUI5NEJBODc1RTBCMDA2RkQ4REI2
QzA4M0I1QTEzMzg1N0Y1MUI2QzRBQkM0QzNCQkU5QTRDRTI3QUI2Nzk4RUUyOUI1
OEMxMEREOThDNjBGMkVFMTgzRDQxQzQ2NzgxRkY3MjlEMUNCMTUxQjhBN0Q3MzBG
MDJGOUEyQjZBRjkyRjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1xBxrMmLf3Ns/3j0IEJOvSwE13ayaZdvvZuV/6Y7FyiQJd+OWiLC
4sjZUGAbyG+cqKgYJUksi5N6FtIOQbC64drl7EDntUQZTUy7QE8wjklrSPPM32x7
OsUyMw41WwKVbiBLgnDhSoDzk2tikUj65uILi2U5wKb6LJxKCzgZXfJL+jIRNazo
kY0715pmStjEBB/m4XzPaNevnaT0LP9+1CSM86PONdIqV2Eyf2VJteEsGiP7DD5F
GxnNVk+03qG5S6h14LAG/Y22wIO1oTOFf1G2xKvEw7vppM4nq2eY7im1jBDdmMYP
LuGD1BxGeB/3KdHLFRuKfXMPAvmitq+S9wIDAQABo4IB8zCCAe8wHQYDVR0OBBYE
FF1qx0UpN9ArUNEdEuLLcXbSkuC2MB8GA1UdIwQYMBaAFOwP8nxm83MOzABsJelN
CgcLhwffMA4GA1UdDwEB/wQEAwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xMTAvRUMw
RkYyN0M2NkYzNzMwRUNDMDA2QzI1RTk0RDBBMDcwQjg3MDdERi5jcmwwZAYIKwYB
BQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVw
b3NpdG9yeS9ERUZBVUxULzdBX3lmR2J6Y3c3TUFHd2w2VTBLQnd1SEI5OC5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpMS50ZXJy
YXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQvMTEwLzM0MzUyZTM4MzUyZTMy
MzUzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjMxMzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAAtVfowDQYJKoZIhvcNAQELBQADggEBABZt20SFMAe6IFnuUaFM1ddnZVadOxoR
gwBfcQNvSuvSjh4Eh5d0XmhDOIylnRNOQcqEDsd87xomb7MjumsEDkm6BGzKoB4a
vghJZgI5ZU9D3chjDli476g0gvA+MOtGauj9dC9EmHfPYBCjDgaJzKrNsOXk/Mm6
gStsWdDaJMg9Y5IFZQ92Zl5Me14Pk5LzqMxIiJswQe9BHqh3yWJJUOLNqEiRdLbI
qK6ghqywJ0n20UvydanLIP912Bb/xqEBoe1WClTbnNaW6Jf9cXxbNuQVlVz8GurR
uQWsxPnwjv0C7UKJBxTg9hgSZGYd18SQUUPMAMFSEu9t4iN+884neuw=
-----END CERTIFICATE-----