Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/135/34352e3133362e31372e302f32342d3234203d3e20323133303335.roa
File:                     34352e3133362e31372e302f32342d3234203d3e20323133303335.roa (raw, json)
Hash identifier:          CUvW7s0HQeSjsr/lNvbErPjVpfYGsRrwUF31bNmzBGE=
Subject key identifier:   51:38:17:5C:56:06:B9:7D:F2:69:A0:E3:6F:27:F1:68:E5:51:C9:81
Certificate issuer:       /CN=3e980f91cc95086fb049172616de25c8f6353255
Certificate serial:       04F334DBA99C3E5D82A64EB626BA5E93AB266CE6
Authority key identifier: 3E:98:0F:91:CC:95:08:6F:B0:49:17:26:16:DE:25:C8:F6:35:32:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PpgPkcyVCG-wSRcmFt4lyPY1MlU.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/135/34352e3133362e31372e302f32342d3234203d3e20323133303335.roa
Signing time:             Thu 07 Jan 2021 21:06:03 +0000
ROA not before:           Thu 07 Jan 2021 21:01:03 +0000
ROA not after:            Thu 06 Jan 2022 21:06:03 +0000
asID:                     213035
IP address blocks:        45.136.17.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:f3:34:db:a9:9c:3e:5d:82:a6:4e:b6:26:ba:5e:93:ab:26:6c:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e980f91cc95086fb049172616de25c8f6353255
        Validity
            Not Before: Jan  7 21:01:03 2021 GMT
            Not After : Jan  6 21:06:03 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:32:5c:b5:25:c7:a3:98:a5:c6:d0:38:0c:0c:
                    0e:26:21:46:53:6a:2f:46:b4:42:6c:7a:2b:08:ab:
                    a1:3e:8f:14:28:47:c4:67:08:be:0a:29:80:e0:69:
                    5b:08:57:ca:d1:b4:45:00:be:4d:60:6b:d3:9d:fe:
                    5c:88:92:8c:6d:ae:b3:06:7f:ee:5a:26:7c:5d:45:
                    4f:dc:9a:49:46:1f:7e:54:8d:30:a6:d7:e7:81:75:
                    9a:cd:2f:cb:99:75:20:a6:84:17:a0:e5:8e:df:88:
                    ce:34:9c:51:57:9f:3c:a9:e4:5e:be:0d:a4:3d:96:
                    5a:27:33:0b:2f:67:14:26:5a:5b:a3:5d:b1:dc:b3:
                    1c:de:35:02:ab:0b:25:a9:73:58:5e:f0:6b:0d:b0:
                    b8:b5:4e:86:c3:81:dc:cb:cb:04:28:40:26:41:3d:
                    62:13:a5:c9:16:98:69:37:b9:02:68:f2:da:49:3a:
                    a4:ea:07:d2:3f:b1:cc:63:1c:8a:01:05:44:86:c9:
                    dd:f4:83:6c:57:28:c3:70:56:03:73:7b:9c:7e:6b:
                    51:59:5c:d5:cf:ea:a5:6f:a0:ec:9c:06:9c:f2:4c:
                    c7:41:de:98:2a:92:5f:1d:00:36:5b:93:29:95:a5:
                    5d:88:47:87:95:4b:b5:37:38:c0:93:64:a0:2f:95:
                    d2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:38:17:5C:56:06:B9:7D:F2:69:A0:E3:6F:27:F1:68:E5:51:C9:81
            X509v3 Authority Key Identifier:
                keyid:3E:98:0F:91:CC:95:08:6F:B0:49:17:26:16:DE:25:C8:F6:35:32:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/135/3E980F91CC95086FB049172616DE25C8F6353255.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PpgPkcyVCG-wSRcmFt4lyPY1MlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/135/34352e3133362e31372e302f32342d3234203d3e20323133303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.136.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e5:c2:81:bc:dd:f1:d3:1c:db:35:a5:36:16:08:89:0b:b7:ed:
         71:9b:95:02:59:a8:c0:6f:72:64:ae:c9:42:ac:54:99:7a:b9:
         f1:c9:e8:ae:24:33:30:2c:22:1a:a3:4d:1b:1d:a2:9c:17:be:
         64:6f:f6:a5:b3:4e:1f:7e:49:de:fd:0c:3e:fe:ac:e1:30:b8:
         62:3a:22:a1:aa:a8:4d:7f:f8:b3:05:a6:c5:d1:1a:67:fb:3b:
         80:7f:86:b0:c1:03:2f:b7:36:40:83:0c:12:5e:51:c6:d9:1b:
         eb:8e:67:8c:de:a9:16:ee:b4:04:20:a9:17:0b:1a:ff:f4:9e:
         3a:22:76:37:0e:07:bf:65:41:8a:af:02:4a:4a:ac:d1:92:e2:
         5b:67:b7:71:7d:10:de:e6:f0:05:b6:99:bd:e9:21:71:af:ee:
         32:78:46:9a:9a:73:bc:7b:19:43:de:59:bf:66:35:19:b6:7f:
         fc:cf:af:d0:9e:2b:ae:69:ab:2c:a4:19:b3:55:d8:50:56:68:
         fd:3a:06:21:ce:0c:5e:d5:17:9c:87:9c:b2:9f:03:30:1f:ca:
         e5:f4:f9:f0:a0:8f:dd:2e:05:c7:cf:6f:2c:46:d2:e3:61:cf:
         1f:81:09:c4:dd:fd:d0:23:0b:41:f0:41:83:6f:21:09:48:66:
         86:2e:d3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----