Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/180/34352e3135322e34352e302f32342d3234203d3e20313336373837.roa
File:                     34352e3135322e34352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          h76z4udvmu/xlffYwyGkCNB47wkJ/biPE631APsYKHM=
Subject key identifier:   33:8B:3F:24:85:A5:6C:9D:37:26:90:0E:47:36:39:79:FF:7F:DA:6D
Certificate issuer:       /CN=dfe89bf7daa0f8aa7d022df984e6ea37e6f60a3d
Certificate serial:       019CEA44F38828D9833F8537EADCBB2982E550C3
Authority key identifier: DF:E8:9B:F7:DA:A0:F8:AA:7D:02:2D:F9:84:E6:EA:37:E6:F6:0A:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3-ib99qg-Kp9Ai35hObqN-b2Cj0.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/180/34352e3135322e34352e302f32342d3234203d3e20313336373837.roa
Signing time:             Sat 22 Oct 2022 04:33:49 +0000
ROA not before:           Sat 22 Oct 2022 04:28:49 +0000
ROA not after:            Sat 21 Oct 2023 04:33:49 +0000
asID:                     136787
IP address blocks:        45.152.45.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ea:44:f3:88:28:d9:83:3f:85:37:ea:dc:bb:29:82:e5:50:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe89bf7daa0f8aa7d022df984e6ea37e6f60a3d
        Validity
            Not Before: Oct 22 04:28:49 2022 GMT
            Not After : Oct 21 04:33:49 2023 GMT
        Subject: CN=338B3F2485A56C9D3726900E47363979FF7FDA6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:60:e8:0b:0c:b4:1d:6d:2c:66:7e:87:0f:2b:
                    79:46:a3:26:0a:9e:3a:34:c4:59:05:1a:ae:79:2c:
                    b9:6c:31:f3:04:cf:14:83:4e:d0:7d:08:86:ec:58:
                    38:52:7e:4d:70:96:48:5a:80:c2:94:b9:cc:a8:95:
                    84:0e:2b:d6:c1:b9:6c:11:c6:72:83:fc:22:60:a1:
                    19:9d:f4:fb:23:0e:b8:0a:13:a5:7f:5e:a6:80:46:
                    e7:b7:10:b2:d2:eb:5a:93:26:69:22:6f:37:64:d8:
                    42:0e:9a:b6:10:18:c3:0c:2c:ce:62:6d:f3:57:d5:
                    39:8b:8e:03:cf:67:16:6c:c8:df:47:32:83:e5:70:
                    03:30:c8:75:9d:fb:6f:23:e4:67:d2:f3:4a:bc:e4:
                    e4:60:1e:ef:a6:a5:8c:36:31:ab:dc:9c:1b:02:35:
                    93:e4:36:ad:1d:0e:7e:45:ca:1b:2f:75:a8:c2:b4:
                    79:e8:92:48:32:81:7e:4a:12:f8:9a:46:a7:2a:65:
                    40:73:29:43:02:13:8b:ec:7c:6f:12:a6:0e:1e:32:
                    b3:aa:54:ab:97:cd:7e:a9:5b:fa:e9:8c:8c:df:c0:
                    14:7d:24:a0:ac:65:06:0e:f8:86:99:94:94:3d:23:
                    a1:2c:1a:dd:b6:12:c0:13:ef:6e:fd:75:cc:60:3c:
                    ff:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:8B:3F:24:85:A5:6C:9D:37:26:90:0E:47:36:39:79:FF:7F:DA:6D
            X509v3 Authority Key Identifier:
                keyid:DF:E8:9B:F7:DA:A0:F8:AA:7D:02:2D:F9:84:E6:EA:37:E6:F6:0A:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/180/DFE89BF7DAA0F8AA7D022DF984E6EA37E6F60A3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-ib99qg-Kp9Ai35hObqN-b2Cj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/180/34352e3135322e34352e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.152.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:6d:ba:8c:1e:5f:a6:ec:62:ba:82:4c:c6:de:2d:b1:a5:26:
         98:bd:61:c8:fa:5f:28:91:43:ff:d3:7d:8c:3e:3c:13:ad:1f:
         ea:10:ea:98:cb:e2:ef:77:16:27:e9:a6:ad:b4:b7:ea:91:fd:
         c1:21:4e:40:42:42:84:4f:9c:8e:5b:66:3a:bb:f4:66:1e:0c:
         82:1d:b0:69:33:be:1b:7b:c3:26:19:f6:94:1a:15:3c:8d:d4:
         eb:40:19:6b:04:48:30:62:be:9e:c8:b2:e6:84:bc:4f:ea:66:
         30:e4:09:66:0f:a1:fc:30:aa:83:3e:8f:3a:fe:aa:35:00:ba:
         f1:47:95:2a:ce:7b:73:ef:37:64:e7:34:3a:51:87:43:0f:b4:
         4d:3c:3a:25:9d:06:e3:0c:50:23:21:49:3b:29:12:7a:ec:f1:
         e2:7d:c3:82:53:a5:15:23:56:37:a0:c7:00:c4:0b:c4:2f:e8:
         3d:b0:82:48:81:56:5b:1e:c6:ff:dd:b6:ed:e9:12:8b:aa:0d:
         34:42:09:a6:b6:a1:b2:f6:15:4a:73:d1:40:29:bc:b8:50:33:
         0b:13:d3:af:1a:a8:93:f5:f1:20:43:b0:47:70:d9:a8:ca:56:
         10:16:c8:5f:ba:ee:cd:f0:43:ab:12:d4:54:ac:76:f1:4b:f8:
         71:61:87:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----