Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e3133322e3135362e302f32342d3234203d3e20323037373837.roa
File:                     34352e3133322e3135362e302f32342d3234203d3e20323037373837.roa (raw, json)
Hash identifier:          kd0+3JC+B3+oO7SrYn9rYJ3eS8pWbVadJzUqw6GWUW0=
Subject key identifier:   A4:F5:5B:0E:A3:5C:6A:00:31:F3:FF:B0:36:9E:E6:B0:64:AF:7B:DC
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       5FBC1EB408D60A0A78AF88B606F51348015AB0EF
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3133322e3135362e302f32342d3234203d3e20323037373837.roa
Signing time:             Wed 17 Nov 2021 18:57:00 +0000
ROA not before:           Wed 17 Nov 2021 18:52:00 +0000
ROA not after:            Wed 16 Nov 2022 18:57:00 +0000
asID:                     207787
IP address blocks:        45.132.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:bc:1e:b4:08:d6:0a:0a:78:af:88:b6:06:f5:13:48:01:5a:b0:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Nov 17 18:52:00 2021 GMT
            Not After : Nov 16 18:57:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:53:ab:45:4a:f6:1e:64:d7:6a:1f:2d:72:7f:
                    a3:06:11:6d:74:98:26:88:b1:e8:72:a5:a8:4c:76:
                    41:93:96:25:38:62:56:20:1e:e5:0b:bd:2c:af:3e:
                    23:20:d3:ba:61:7f:2a:f6:eb:76:c0:29:e5:34:7a:
                    61:fa:1f:ac:5d:8b:db:c1:19:4e:42:ca:1e:e8:9d:
                    d8:d3:4f:c6:5f:01:b4:72:3e:9c:b6:14:5c:01:e0:
                    ae:8c:b9:06:85:47:db:6d:4d:79:61:e5:73:3d:62:
                    64:75:a4:78:3c:a0:5d:f0:08:1c:94:77:5d:a2:02:
                    9a:e3:f1:c5:25:42:90:74:7e:c5:b4:5a:6c:c5:cd:
                    9c:c8:9d:ce:ad:e7:73:25:57:30:9e:3e:a6:78:e3:
                    40:25:d8:d4:8d:e1:a4:fd:5f:5d:6b:28:ce:24:c7:
                    31:d2:77:7e:22:74:8b:2a:e5:3b:59:09:af:0f:af:
                    e4:e4:8e:a9:62:a4:62:d0:ad:45:fe:af:15:82:68:
                    f9:91:17:29:36:6e:d4:5b:91:d2:52:bd:b2:90:22:
                    10:a1:c9:cd:56:6e:b0:b7:d6:34:b8:1a:b2:4a:28:
                    93:09:68:1f:16:3e:fe:95:2f:d3:bc:61:e0:b7:2f:
                    92:e3:89:8d:67:15:5a:8a:91:e5:6a:5e:06:28:b7:
                    11:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F5:5B:0E:A3:5C:6A:00:31:F3:FF:B0:36:9E:E6:B0:64:AF:7B:DC
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3133322e3135362e302f32342d3234203d3e20323037373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:fb:a4:9d:5d:17:a3:66:ab:87:11:89:16:15:ed:33:55:32:
         f4:aa:6c:b4:d6:e2:79:5e:36:38:95:86:e3:a1:a6:b9:c3:42:
         3d:c0:99:23:68:78:bf:a0:ce:bb:8b:7e:88:21:12:ea:1b:31:
         35:47:b1:2f:0f:30:96:a7:06:e8:3f:68:a0:65:e1:80:36:73:
         d2:47:a8:a3:3e:ab:0a:26:93:01:c8:dd:7b:a3:f4:42:0e:78:
         b5:7c:3d:fc:72:59:e2:99:16:f2:e0:64:f1:ca:98:d4:22:27:
         ac:93:58:39:fe:97:bf:c6:9a:64:a6:27:53:ef:aa:ee:7d:ce:
         16:1f:9a:06:06:32:96:cf:c3:b0:1c:93:15:ee:16:9c:59:54:
         9c:4d:70:67:88:f7:b3:f3:00:fc:63:4b:6f:e5:c7:54:d8:79:
         65:23:3d:db:13:f5:4e:4b:8b:02:64:25:53:85:ad:0e:39:f5:
         ae:6c:63:47:68:e4:b7:d0:df:91:08:bd:12:1c:9c:05:8b:4c:
         d7:f5:fa:48:48:47:8f:6b:6e:69:5a:41:0d:40:d5:3a:e5:42:
         d4:61:17:27:76:5d:c5:24:8d:c2:ba:82:52:5d:5f:0a:37:b0:
         bc:72:9b:3a:55:e2:19:0e:36:24:81:72:18:a4:8a:33:3a:77:
         8a:1c:c0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----