Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e38352e3134342e302f32332d3234203d3e20323132383738.roa
File:                     34352e38352e3134342e302f32332d3234203d3e20323132383738.roa (raw, json)
Hash identifier:          qU8WqdbauBLptUzRUz0Sg/vOmGpZWhhbZJYz9CcazXs=
Subject key identifier:   26:E6:82:D8:85:9C:1B:BB:EF:59:49:AB:8D:EF:F8:43:1E:FA:EC:09
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       540B39B7EB75269478983F849D853D1701D68A11
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e38352e3134342e302f32332d3234203d3e20323132383738.roa
Signing time:             Tue 28 Jun 2022 04:41:09 +0000
ROA not before:           Tue 28 Jun 2022 04:36:09 +0000
ROA not after:            Tue 27 Jun 2023 04:41:09 +0000
asID:                     212878
IP address blocks:        45.85.144.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:0b:39:b7:eb:75:26:94:78:98:3f:84:9d:85:3d:17:01:d6:8a:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Jun 28 04:36:09 2022 GMT
            Not After : Jun 27 04:41:09 2023 GMT
        Subject: CN=26E682D8859C1BBBEF5949AB8DEFF8431EFAEC09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:42:3f:fb:30:b7:d1:ad:b1:ac:33:85:db:5a:
                    d9:57:23:e5:d5:78:79:0c:ea:22:de:82:ae:a0:52:
                    b3:30:c2:21:06:48:c9:d4:f5:c1:b6:b2:75:68:99:
                    78:58:ee:a2:80:ae:03:ee:a3:8c:66:14:72:b4:db:
                    0c:aa:7d:a5:52:0c:e6:2e:57:7f:e5:c6:70:27:26:
                    04:7a:56:29:26:66:5a:1b:21:f9:ff:36:07:dd:9e:
                    db:9a:f9:1b:8c:93:de:45:18:22:e7:29:3d:bb:27:
                    1c:34:18:de:08:81:c7:13:f6:42:b6:e8:45:dd:85:
                    fe:5c:1c:b4:1a:13:7d:d0:44:3f:67:ef:d9:04:6b:
                    0d:20:7c:57:2e:01:f4:69:74:f9:9a:73:16:b6:b6:
                    5d:20:25:fa:a3:9b:af:0d:e9:7f:79:58:c5:e3:b4:
                    cf:75:da:5b:a2:66:b4:31:7b:e0:ba:bf:c0:b5:a5:
                    f6:58:76:0f:46:e8:7a:a5:02:f0:a3:d3:4b:40:e4:
                    9a:36:06:d0:f6:35:73:fe:71:a3:5c:ec:68:96:44:
                    53:11:21:fe:bb:2b:9f:c2:71:be:7e:84:a0:04:52:
                    8a:7f:44:2e:9b:e2:61:fc:73:d3:f6:ae:0e:ff:de:
                    8a:95:51:3e:2f:98:b1:3a:d7:13:68:eb:a5:d5:d1:
                    a1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E6:82:D8:85:9C:1B:BB:EF:59:49:AB:8D:EF:F8:43:1E:FA:EC:09
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e38352e3134342e302f32332d3234203d3e20323132383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.85.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:65:77:1d:fd:41:f5:e6:43:f0:13:22:d2:df:24:5d:75:cf:
         d8:d7:56:8e:53:89:63:4e:d6:ae:d3:f4:c4:83:55:7b:dd:7c:
         4a:16:3d:1c:17:fa:cd:37:0e:69:6f:4c:3a:62:ce:51:1a:86:
         1e:10:8f:22:87:95:2b:74:bf:b0:80:dc:ac:3b:fd:39:27:b4:
         15:bd:33:a1:4e:74:1a:0d:60:97:e3:1c:59:11:9c:ae:f1:44:
         91:c9:e6:40:b6:a6:97:36:0b:fc:f2:4e:9d:f7:8e:c9:3c:86:
         d0:2a:ed:fa:b7:8e:a9:d0:74:99:9b:33:2a:c8:bd:62:d6:a7:
         85:33:10:98:f9:dd:3b:4f:b5:96:56:62:88:39:44:54:8b:d8:
         b1:f0:64:e2:a4:9c:49:97:64:3c:2e:73:d8:e5:8f:d8:71:df:
         1b:89:6a:6f:79:55:6a:90:53:1f:ec:a7:f7:f1:b5:0b:f4:10:
         0b:f5:91:9c:c6:34:02:42:ed:45:9b:04:1c:11:03:c3:76:b7:
         ad:1a:e9:2f:6d:cf:1b:49:ac:49:73:eb:e6:14:ab:bc:df:3e:
         fc:2b:cc:43:84:a8:cb:aa:b8:7a:c2:df:17:c6:05:b7:53:26:
         e9:f3:56:3a:64:2d:e4:23:98:95:29:1c:2f:49:bd:eb:10:75:
         6b:5a:6c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----