Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/180/34352e31342e38382e302f32332d3234203d3e203437353833.roa
File:                     34352e31342e38382e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier:          u6kWfMlTR/s/8OFpOea22ZcZjsvj+1JRRdwNIptWP74=
Subject key identifier:   88:B7:E1:B8:57:DE:7D:EC:50:53:0C:F3:E1:9E:1D:D4:F4:32:73:62
Certificate issuer:       /CN=dfe89bf7daa0f8aa7d022df984e6ea37e6f60a3d
Certificate serial:       53FDBCF78C1822B44B4651A1AC2B84585CFA970D
Authority key identifier: DF:E8:9B:F7:DA:A0:F8:AA:7D:02:2D:F9:84:E6:EA:37:E6:F6:0A:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3-ib99qg-Kp9Ai35hObqN-b2Cj0.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/180/34352e31342e38382e302f32332d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:33:48 +0000
ROA not before:           Sat 22 Oct 2022 04:28:48 +0000
ROA not after:            Sat 21 Oct 2023 04:33:48 +0000
asID:                     47583
IP address blocks:        45.14.88.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:fd:bc:f7:8c:18:22:b4:4b:46:51:a1:ac:2b:84:58:5c:fa:97:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe89bf7daa0f8aa7d022df984e6ea37e6f60a3d
        Validity
            Not Before: Oct 22 04:28:48 2022 GMT
            Not After : Oct 21 04:33:48 2023 GMT
        Subject: CN=88B7E1B857DE7DEC50530CF3E19E1DD4F4327362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ef:ff:4f:d0:0b:57:bc:d1:52:45:7a:f9:ee:
                    8a:78:56:bc:8f:eb:ac:ea:42:71:92:23:aa:07:6b:
                    69:df:0d:75:72:e8:42:24:d9:df:9f:be:a4:cb:71:
                    25:05:72:4d:bd:5a:c4:a2:24:fa:19:f1:0e:24:38:
                    af:68:a9:49:5b:3e:20:7b:76:9c:b1:7b:ca:bc:97:
                    b5:eb:60:c1:9d:1e:62:3f:4d:85:79:65:8a:85:a5:
                    2c:a6:c9:af:b9:d1:73:26:2a:74:5a:26:13:08:c9:
                    84:fb:73:06:bb:a3:82:dd:1e:30:89:11:6f:6c:46:
                    53:75:71:2c:cf:89:98:c9:a8:a9:4d:28:6e:e3:cf:
                    7f:60:62:20:95:bf:2f:54:bf:b1:85:33:a9:d5:a3:
                    bd:35:00:bf:cd:f7:ef:99:9a:e8:11:44:65:3a:ed:
                    e6:25:03:0d:9a:91:c8:fd:2a:8a:ac:ef:0b:8e:83:
                    f6:fd:42:e3:0a:b8:02:27:df:4d:e2:55:02:fb:46:
                    9d:64:b0:12:46:d1:a4:90:3c:04:29:77:16:92:84:
                    01:c9:41:8e:5b:36:57:fa:a0:ea:d4:8f:e2:71:07:
                    98:b5:00:45:00:6a:81:bb:82:19:e7:14:e5:2b:c6:
                    cb:3f:1e:2e:f6:04:80:5b:78:da:cc:32:6f:72:49:
                    c7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B7:E1:B8:57:DE:7D:EC:50:53:0C:F3:E1:9E:1D:D4:F4:32:73:62
            X509v3 Authority Key Identifier:
                keyid:DF:E8:9B:F7:DA:A0:F8:AA:7D:02:2D:F9:84:E6:EA:37:E6:F6:0A:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/180/DFE89BF7DAA0F8AA7D022DF984E6EA37E6F60A3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-ib99qg-Kp9Ai35hObqN-b2Cj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/180/34352e31342e38382e302f32332d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.14.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:f4:4a:74:89:85:07:e3:1e:d9:8f:1b:c2:7f:18:25:65:32:
         76:14:e5:03:4f:47:15:66:c1:b5:bf:74:99:46:b9:2d:f1:cc:
         3b:08:dd:10:d9:e7:21:9d:a7:c3:83:90:d8:fe:7d:c1:89:0c:
         d3:b7:7d:e1:7a:87:4d:5f:6f:d2:7f:18:3c:72:2a:2b:80:5a:
         e0:a6:d1:36:59:54:ac:43:5a:be:93:a9:1d:f5:a9:8e:66:3e:
         ad:92:01:66:ac:0c:d2:e7:16:11:6f:6b:cd:e3:8f:3a:e6:36:
         78:59:dc:bf:59:b4:dc:6a:02:4b:35:b6:54:dc:1d:0f:9a:be:
         c8:d1:b6:b7:8d:d4:e5:40:e1:ef:71:3e:5e:69:07:78:03:12:
         a7:0a:b3:18:91:f9:9d:55:3e:3a:fb:d5:17:ea:e0:b6:32:6a:
         6c:c1:e3:58:6d:03:1e:a6:0d:b2:d1:67:68:2f:23:b3:44:32:
         80:3c:8c:cd:78:b6:0c:36:69:a7:3d:92:21:0f:78:c6:03:4c:
         4d:1e:b3:e7:f7:50:01:d3:38:23:b3:1a:e1:e2:b4:8e:1e:35:
         b5:9a:6d:81:35:e0:68:3f:48:13:52:b9:c2:0e:97:f0:72:8d:
         6e:4a:73:e0:fa:5d:12:d1:8b:09:d8:2d:71:a7:54:20:7d:17:
         7a:1d:be:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----