Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e38352e3134362e302f32332d3234203d3e203631333137.roa
File:                     34352e38352e3134362e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          ySA5H3slWPT+6La/6CEhqXA/v2lvWtBPIFcNvl0fOUE=
Subject key identifier:   0B:F3:A1:5F:10:5A:D0:91:0C:8F:83:60:56:15:5E:B2:A6:A4:87:C5
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       1E0531B274B492E75E31DEA1FFA2DB7ADC8DFE2E
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e38352e3134362e302f32332d3234203d3e203631333137.roa
Signing time:             Wed 17 Nov 2021 18:57:07 +0000
ROA not before:           Wed 17 Nov 2021 18:52:07 +0000
ROA not after:            Wed 16 Nov 2022 18:57:07 +0000
asID:                     61317
IP address blocks:        45.85.146.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:05:31:b2:74:b4:92:e7:5e:31:de:a1:ff:a2:db:7a:dc:8d:fe:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Nov 17 18:52:07 2021 GMT
            Not After : Nov 16 18:57:07 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:53:36:b7:70:47:98:53:5c:4c:cd:a8:03:d2:
                    2e:e2:0c:21:63:9a:e6:10:0c:1b:62:23:f1:f9:1a:
                    08:55:45:82:ae:00:f5:69:64:25:cb:88:9e:3b:4f:
                    82:52:e4:ff:b5:9c:6f:09:90:4b:4e:51:d0:8c:90:
                    68:13:73:d0:b6:fb:5f:a3:8f:0b:a5:94:4b:be:36:
                    7c:99:c6:5d:19:bb:f9:ee:b7:c4:bd:ea:f7:59:08:
                    30:f5:e6:ba:8a:76:62:42:44:52:cf:45:c3:97:5d:
                    81:a5:de:79:49:26:4c:86:f0:78:c6:3a:b6:2d:05:
                    aa:d4:a7:35:23:1e:be:1c:b2:18:2a:38:8f:41:b2:
                    78:f4:06:7a:f5:08:5b:d7:e3:a5:9e:d4:f6:8d:67:
                    97:23:a0:c6:69:93:61:94:c3:00:b5:31:da:1b:a1:
                    57:cf:75:36:e6:3d:af:a9:40:01:66:23:d1:47:fa:
                    d4:1e:c6:3b:ec:42:63:da:9f:ce:2f:d5:8b:b1:94:
                    b1:64:3c:c7:55:ae:2c:aa:fd:38:bc:9a:ee:e6:eb:
                    40:aa:a7:42:0f:69:bc:84:d6:35:63:61:03:22:13:
                    19:f4:d4:cd:3a:63:09:af:34:67:8b:b0:09:98:59:
                    84:f4:d4:66:c9:8d:83:48:91:ca:0e:73:31:54:9e:
                    9e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F3:A1:5F:10:5A:D0:91:0C:8F:83:60:56:15:5E:B2:A6:A4:87:C5
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e38352e3134362e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.85.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:4e:ca:9a:9c:4a:4e:e6:26:17:15:71:f7:22:19:8c:3d:15:
         b8:3e:74:fb:03:8c:21:06:f8:5a:23:87:a9:9b:4a:03:61:72:
         2e:df:54:f2:7f:36:3f:a1:1f:5b:e7:6f:34:c1:02:ac:77:07:
         7a:76:8c:f1:ec:85:03:fa:b8:aa:6c:5b:65:77:53:68:86:e6:
         77:f3:c4:b4:16:26:7b:a0:a3:44:59:b8:1f:20:d0:92:a2:02:
         f5:ba:57:2a:ba:f1:6d:92:a5:e5:95:71:1b:4b:c1:af:bf:da:
         86:f9:4b:89:7c:c2:17:6e:19:7e:71:8a:e6:ee:9f:fe:76:65:
         72:9f:04:d4:31:fc:f6:a8:0a:d3:d2:58:65:bb:e6:ed:c7:d2:
         2b:7e:a9:00:10:86:42:21:5b:90:48:e4:82:e8:8e:f8:09:d5:
         ed:3c:21:b6:89:0a:39:d3:92:bb:1f:49:4a:3c:14:b6:d9:c9:
         ff:71:f1:55:4c:1b:bf:02:8b:f9:ba:57:f3:2d:aa:dd:28:79:
         fb:7f:fb:2a:e3:6c:24:bd:1e:8f:55:cb:49:31:c2:3d:57:37:
         8f:ec:43:56:e8:ca:b5:9d:75:5d:14:10:a2:df:06:d5:8d:92:
         7c:76:b3:ea:a3:89:3f:30:98:1c:8f:19:15:44:e3:bb:4d:4b:
         33:25:b4:b0
-----BEGIN CERTIFICATE-----
MIIG4TCCBcmgAwIBAgIUHgUxsnS0kudeMd6h/6LbetyN/i4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdhOGFmMmI1ZmU4MzFmZjU4OWViMzhhZTNjMDI1Y2U4
NzFmMjNlNzAeFw0yMTExMTcxODUyMDdaFw0yMjExMTYxODU3MDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREQ1MzM2Qjc3MDQ3OTg1MzVD
NENDREE4MDNEMjJFRTIwQzIxNjM5QUU2MTAwQzFCNjIyM0YxRjkxQTA4NTU0NTgy
QUUwMEY1Njk2NDI1Q0I4ODlFM0I0RjgyNTJFNEZGQjU5QzZGMDk5MDRCNEU1MUQw
OEM5MDY4MTM3M0QwQjZGQjVGQTM4RjBCQTU5NDRCQkUzNjdDOTlDNjVEMTlCQkY5
RUVCN0M0QkRFQUY3NTkwODMwRjVFNkJBOEE3NjYyNDI0NDUyQ0Y0NUMzOTc1RDgx
QTVERTc5NDkyNjRDODZGMDc4QzYzQUI2MkQwNUFBRDRBNzM1MjMxRUJFMUNCMjE4
MkEzODhGNDFCMjc4RjQwNjdBRjUwODVCRDdFM0E1OUVENEY2OEQ2Nzk3MjNBMEM2
Njk5MzYxOTRDMzAwQjUzMURBMUJBMTU3Q0Y3NTM2RTYzREFGQTk0MDAxNjYyM0Qx
NDdGQUQ0MUVDNjNCRUM0MjYzREE5RkNFMkZENThCQjE5NEIxNjQzQ0M3NTVBRTJD
QUFGRDM4QkM5QUVFRTZFQjQwQUFBNzQyMEY2OUJDODRENjM1NjM2MTAzMjIxMzE5
RjRENENEM0E2MzA5QUYzNDY3OEJCMDA5OTg1OTg0RjRENDY2Qzk4RDgzNDg5MUNB
MEU3MzMxNTQ5RTlFNUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA3VM2t3BHmFNcTM2oA9Iu4gwhY5rmEAwbYiPx+RoIVUWCrgD1aWQl
y4ieO0+CUuT/tZxvCZBLTlHQjJBoE3PQtvtfo48LpZRLvjZ8mcZdGbv57rfEver3
WQgw9ea6inZiQkRSz0XDl12Bpd55SSZMhvB4xjq2LQWq1Kc1Ix6+HLIYKjiPQbJ4
9AZ69Qhb1+OlntT2jWeXI6DGaZNhlMMAtTHaG6FXz3U25j2vqUABZiPRR/rUHsY7
7EJj2p/OL9WLsZSxZDzHVa4sqv04vJru5utAqqdCD2m8hNY1Y2EDIhMZ9NTNOmMJ
rzRni7AJmFmE9NRmyY2DSJHKDnMxVJ6eXQIDAQABo4IB7zCCAeswHQYDVR0OBBYE
FAvzoV8QWtCRDI+DYFYVXrKmpIfFMB8GA1UdIwQYMBaAFAeorytf6DH/WJ6ziuPA
Jc6HHyPnMA4GA1UdDwEB/wQEAwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8yLzA3QThB
RjJCNUZFODMxRkY1ODlFQjM4QUUzQzAyNUNFODcxRjIzRTcuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9CNml2SzFfb01mOVluck9LNDhBbHpvY2ZJLWMuY2VyMIGG
BggrBgEFBQcBCwR6MHgwdgYIKwYBBQUHMAuGanJzeW5jOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0LzIvMzQzNTJlMzgzNTJlMzEzNDM2
MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS1V
kjANBgkqhkiG9w0BAQsFAAOCAQEAPE7KmpxKTuYmFxVx9yIZjD0VuD50+wOMIQb4
WiOHqZtKA2FyLt9U8n82P6EfW+dvNMECrHcHenaM8eyFA/q4qmxbZXdTaIbmd/PE
tBYme6CjRFm4HyDQkqIC9bpXKrrxbZKl5ZVxG0vBr7/ahvlLiXzCF24ZfnGK5u6f
/nZlcp8E1DH89qgK09JYZbvm7cfSK36pABCGQiFbkEjkguiO+AnV7TwhtokKOdOS
ux9JSjwUttnJ/3HxVUwbvwKL+bpX8y2q3Sh5+3/7KuNsJL0ej1XLSTHCPVc3j+xD
VujKtZ11XRQQot8G1Y2SfHaz6qOJPzCYHI8ZFUTju01LMyW0sA==
-----END CERTIFICATE-----