Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e3133322e3135362e302f32342d3234203d3e2037373234.roa
File:                     34352e3133322e3135362e302f32342d3234203d3e2037373234.roa (raw, json)
Hash identifier:          RpBpL5YQ+bemL5sdtk9999XQMhpk0rOG8zX/E+HCp7k=
Subject key identifier:   5B:F2:7D:39:33:5A:73:73:7A:E6:DE:A0:1C:4D:15:C9:ED:22:57:A3
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       757D8FC8284DC283581AD901159EAD2A4FF50658
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3133322e3135362e302f32342d3234203d3e2037373234.roa
Signing time:             Wed 17 Nov 2021 18:57:01 +0000
ROA not before:           Wed 17 Nov 2021 18:52:01 +0000
ROA not after:            Wed 16 Nov 2022 18:57:01 +0000
asID:                     7724
IP address blocks:        45.132.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:7d:8f:c8:28:4d:c2:83:58:1a:d9:01:15:9e:ad:2a:4f:f5:06:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Nov 17 18:52:01 2021 GMT
            Not After : Nov 16 18:57:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d3:d5:46:24:54:09:88:a8:e5:cd:1e:ab:6b:
                    ab:f3:a9:42:df:80:40:a0:18:8d:93:73:b0:39:8b:
                    d5:5b:1e:90:d5:7b:07:49:70:b4:a1:5b:15:7d:f7:
                    31:07:03:72:cc:ea:ad:71:25:43:46:7e:f8:17:6c:
                    f9:b7:bc:01:5a:a1:89:29:1a:9b:eb:69:4b:a0:2c:
                    66:83:41:43:d7:7b:c3:fc:cc:b3:e0:78:57:e3:4f:
                    16:1b:77:1b:c1:04:4d:db:6b:6d:3a:1c:f6:1d:9a:
                    0e:15:31:74:2b:89:1d:80:e4:1d:8a:b0:01:a3:2c:
                    48:24:2c:b4:b0:d8:a1:5b:80:f0:11:46:aa:cb:1e:
                    3d:a6:91:90:c1:74:4f:17:9b:e4:d5:76:d4:79:72:
                    29:4d:c0:63:f5:4b:f0:3e:c3:1b:02:90:9b:12:a2:
                    7e:86:8b:5f:82:d3:e7:06:c6:6d:64:04:07:83:0c:
                    17:6d:30:41:46:c4:89:f3:53:12:88:aa:9f:cb:21:
                    e3:79:33:62:d6:4f:56:5b:83:a9:7f:59:0f:d0:24:
                    97:c6:52:ed:c8:3c:a0:fd:43:0b:5b:f5:4f:b3:fe:
                    e0:cc:a4:21:b9:a3:ef:c8:1d:c6:55:92:29:82:9f:
                    93:b7:c0:84:df:ac:1f:f0:62:2d:6b:f3:f5:8c:d3:
                    d4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F2:7D:39:33:5A:73:73:7A:E6:DE:A0:1C:4D:15:C9:ED:22:57:A3
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3133322e3135362e302f32342d3234203d3e2037373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:bd:47:ce:f7:e7:c1:dd:d8:18:57:9f:77:7a:5b:39:84:f0:
         e1:c9:8e:96:24:0a:3a:ef:ac:29:3b:97:60:cb:b4:52:f2:24:
         48:ea:25:30:ea:2d:9b:7a:39:67:64:c1:c4:ea:e5:2b:15:17:
         33:b4:cc:ae:d4:8a:99:5f:be:f9:80:11:8d:cc:cd:33:eb:66:
         17:b9:7c:91:98:a8:29:c8:5c:b6:4c:25:f0:3f:11:8e:b4:9a:
         41:39:63:57:73:c1:fa:64:a9:fa:6a:09:c5:aa:da:53:f4:83:
         47:98:46:d5:47:df:28:e7:93:91:e7:27:cb:77:fc:28:9c:58:
         3f:1f:b5:b7:0a:f7:c3:3a:f3:c3:96:fc:cb:17:f6:81:b1:36:
         23:a0:18:45:8e:fd:5a:59:1e:af:85:aa:e2:45:c6:9d:6b:67:
         f7:9b:cc:87:f8:be:3c:87:e7:96:d9:d2:e6:20:03:76:b1:20:
         76:a0:58:7e:db:97:c4:36:61:47:66:a1:0f:b1:4f:a7:f4:0d:
         33:01:19:db:02:1c:0b:7b:8d:2f:22:51:df:c1:f4:c2:db:87:
         9f:e4:20:9f:28:36:fb:92:73:01:f9:ff:6e:70:11:f5:d0:2b:
         8b:4c:1a:dd:26:7c:28:44:6a:65:e1:7b:3b:04:1d:c8:3a:e6:
         36:79:e0:da
-----BEGIN CERTIFICATE-----
MIIG4TCCBcmgAwIBAgIUdX2PyChNwoNYGtkBFZ6tKk/1BlgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdhOGFmMmI1ZmU4MzFmZjU4OWViMzhhZTNjMDI1Y2U4
NzFmMjNlNzAeFw0yMTExMTcxODUyMDFaFw0yMjExMTYxODU3MDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0REM0Q1NDYyNDU0MDk4OEE4
RTVDRDFFQUI2QkFCRjNBOTQyREY4MDQwQTAxODhEOTM3M0IwMzk4QkQ1NUIxRTkw
RDU3QjA3NDk3MEI0QTE1QjE1N0RGNzMxMDcwMzcyQ0NFQUFENzEyNTQzNDY3RUY4
MTc2Q0Y5QjdCQzAxNUFBMTg5MjkxQTlCRUI2OTRCQTAyQzY2ODM0MTQzRDc3QkMz
RkNDQ0IzRTA3ODU3RTM0RjE2MUI3NzFCQzEwNDREREI2QjZEM0ExQ0Y2MUQ5QTBF
MTUzMTc0MkI4OTFEODBFNDFEOEFCMDAxQTMyQzQ4MjQyQ0I0QjBEOEExNUI4MEYw
MTE0NkFBQ0IxRTNEQTY5MTkwQzE3NDRGMTc5QkU0RDU3NkQ0Nzk3MjI5NERDMDYz
RjU0QkYwM0VDMzFCMDI5MDlCMTJBMjdFODY4QjVGODJEM0U3MDZDNjZENjQwNDA3
ODMwQzE3NkQzMDQxNDZDNDg5RjM1MzEyODhBQTlGQ0IyMUUzNzkzMzYyRDY0RjU2
NUI4M0E5N0Y1OTBGRDAyNDk3QzY1MkVEQzgzQ0EwRkQ0MzBCNUJGNTRGQjNGRUUw
Q0NBNDIxQjlBM0VGQzgxREM2NTU5MjI5ODI5RjkzQjdDMDg0REZBQzFGRjA2MjJE
NkJGM0Y1OENEM0Q0QjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzdPVRiRUCYio5c0eq2ur86lC34BAoBiNk3OwOYvVWx6Q1XsHSXC0
oVsVffcxBwNyzOqtcSVDRn74F2z5t7wBWqGJKRqb62lLoCxmg0FD13vD/Myz4HhX
408WG3cbwQRN22ttOhz2HZoOFTF0K4kdgOQdirABoyxIJCy0sNihW4DwEUaqyx49
ppGQwXRPF5vk1XbUeXIpTcBj9UvwPsMbApCbEqJ+hotfgtPnBsZtZAQHgwwXbTBB
RsSJ81MSiKqfyyHjeTNi1k9WW4Opf1kP0CSXxlLtyDyg/UMLW/VPs/7gzKQhuaPv
yB3GVZIpgp+Tt8CE36wf8GIta/P1jNPUtQIDAQABo4IB7zCCAeswHQYDVR0OBBYE
FFvyfTkzWnNzeubeoBxNFcntIlejMB8GA1UdIwQYMBaAFAeorytf6DH/WJ6ziuPA
Jc6HHyPnMA4GA1UdDwEB/wQEAwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8yLzA3QThB
RjJCNUZFODMxRkY1ODlFQjM4QUUzQzAyNUNFODcxRjIzRTcuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9CNml2SzFfb01mOVluck9LNDhBbHpvY2ZJLWMuY2VyMIGG
BggrBgEFBQcBCwR6MHgwdgYIKwYBBQUHMAuGanJzeW5jOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0LzIvMzQzNTJlMzEzMzMyMmUzMTM1
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNzM3MzIzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2E
nDANBgkqhkiG9w0BAQsFAAOCAQEASb1Hzvfnwd3YGFefd3pbOYTw4cmOliQKOu+s
KTuXYMu0UvIkSOolMOotm3o5Z2TBxOrlKxUXM7TMrtSKmV+++YARjczNM+tmF7l8
kZioKchctkwl8D8RjrSaQTljV3PB+mSp+moJxaraU/SDR5hG1UffKOeTkecny3f8
KJxYPx+1twr3wzrzw5b8yxf2gbE2I6AYRY79Wlker4Wq4kXGnWtn95vMh/i+PIfn
ltnS5iADdrEgdqBYftuXxDZhR2ahD7FPp/QNMwEZ2wIcC3uNLyJR38H0wtuHn+Qg
nyg2+5JzAfn/bnAR9dAri0wa3SZ8KERqZeF7OwQdyDrmNnng2g==
-----END CERTIFICATE-----