Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e3133372e3139342e302f32342d3332203d3e203531313637.roa
File:                     34352e3133372e3139342e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          wg3g4rvyCKJox8A0pM9z5cqkwo5BHR3EmPcyMShfR/g=
Subject key identifier:   85:05:19:49:38:F6:EA:70:C3:4A:BB:A9:FE:BA:8D:E5:2C:65:97:B8
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       1F2BDBDFB41F77D9442351074AA81BBECF8A82F7
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3133372e3139342e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:32 +0000
ROA not before:           Sat 22 Oct 2022 04:28:32 +0000
ROA not after:            Sat 21 Oct 2023 04:33:32 +0000
asID:                     51167
IP address blocks:        45.137.194.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:2b:db:df:b4:1f:77:d9:44:23:51:07:4a:a8:1b:be:cf:8a:82:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:32 2022 GMT
            Not After : Oct 21 04:33:32 2023 GMT
        Subject: CN=8505194938F6EA70C34ABBA9FEBA8DE52C6597B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0d:83:1a:b0:d0:3b:2c:e7:dc:a9:f6:89:41:
                    b1:fc:d9:40:07:35:8e:0e:e3:96:29:41:82:4d:00:
                    a3:01:32:e4:d6:45:b2:79:ad:5c:fb:2f:63:47:75:
                    8e:8c:75:49:fe:78:ae:76:91:22:0a:93:ee:39:a4:
                    99:08:da:97:86:13:6b:d6:f4:c3:72:6c:0e:78:37:
                    78:f3:97:d8:07:61:e2:49:ad:06:8e:a5:84:a9:a6:
                    97:82:c4:9b:2b:99:bb:1b:91:96:c8:fb:8a:2c:17:
                    52:d3:e4:9f:0a:34:d7:37:d2:18:4e:8d:c2:32:bc:
                    0c:65:5d:28:a7:ff:92:0b:8d:76:78:19:18:5d:45:
                    1a:ab:38:e0:d3:b8:76:a0:5a:b5:37:16:0e:43:3a:
                    98:7b:d8:92:54:fc:93:7f:3f:ee:cb:c4:db:b4:03:
                    d2:48:19:46:1d:0e:77:0a:86:79:51:34:d4:34:ff:
                    9d:e1:a2:73:36:f6:90:f4:bc:8f:bd:8e:53:81:9c:
                    d3:ce:cf:22:e3:38:8a:f2:51:28:e9:68:03:4b:f6:
                    90:25:fc:be:ae:6e:c4:7e:2e:42:f6:0a:5c:b3:10:
                    f5:98:d3:0e:29:04:95:7d:05:6d:52:0c:0e:d3:d4:
                    e8:68:6d:7e:bb:b3:51:d8:1f:16:15:ae:5e:61:64:
                    fd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:05:19:49:38:F6:EA:70:C3:4A:BB:A9:FE:BA:8D:E5:2C:65:97:B8
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3133372e3139342e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:81:d5:74:de:2f:68:a1:d8:19:c3:63:9f:26:18:07:ac:af:
         f1:56:a2:c4:f6:03:01:c4:53:ae:50:9e:8e:f3:1e:03:08:e1:
         f0:a5:30:10:60:6f:8b:78:9e:dc:76:2a:58:fc:2d:29:9e:c3:
         42:fa:b1:40:ee:6a:7f:84:ee:0f:2f:b5:18:a9:ff:47:7c:3b:
         e9:cd:de:70:c5:38:d8:5e:86:c0:f9:49:0e:a6:eb:25:4e:e4:
         f4:c3:e6:22:c9:a7:44:0d:9b:23:d6:cf:bf:8d:75:3c:21:5b:
         85:e3:86:be:ae:96:17:ff:d2:2c:39:83:9a:2d:75:2a:79:8b:
         3d:1f:fc:6a:66:c9:84:f3:c6:a2:ea:02:55:e8:15:b1:3f:e7:
         e1:8f:41:9e:0a:36:f4:13:78:84:54:ba:66:66:a7:c3:de:68:
         f0:f9:17:85:34:98:ba:66:9d:4c:1c:20:3f:0d:d0:6e:95:5d:
         85:84:20:8f:81:69:19:b8:12:b0:7b:77:de:73:0a:cb:0a:3d:
         1d:0f:47:d7:25:72:13:cb:34:3f:f9:90:3c:04:5c:ec:32:af:
         f8:2c:bd:d5:e5:0b:16:03:8c:99:f8:10:18:82:e9:87:0a:82:
         df:58:03:91:ce:27:87:d6:1c:9a:d9:48:cc:f9:34:81:0a:93:
         05:30:4e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----