Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e39302e3232322e302f32332d3234203d3e203631333137.roa
File:                     34352e39302e3232322e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          IfVmCl65zDbTPomZSpzYH2wS9UPv73GLqdiEfcGUiE0=
Subject key identifier:   0F:E6:24:40:52:3A:62:A6:10:09:7A:D9:2A:7F:F9:74:61:55:76:79
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       4AAD5BCECC51428FBC3E987D3691BECD4617F628
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e39302e3232322e302f32332d3234203d3e203631333137.roa
Signing time:             Wed 17 Nov 2021 18:57:02 +0000
ROA not before:           Wed 17 Nov 2021 18:52:02 +0000
ROA not after:            Wed 16 Nov 2022 18:57:02 +0000
asID:                     61317
IP address blocks:        45.90.222.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ad:5b:ce:cc:51:42:8f:bc:3e:98:7d:36:91:be:cd:46:17:f6:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Nov 17 18:52:02 2021 GMT
            Not After : Nov 16 18:57:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6e:5a:8c:c1:8f:b0:ce:14:61:1d:80:56:fe:
                    1b:82:1e:9f:2e:02:4b:01:5c:93:6b:12:3e:5c:9f:
                    b2:35:b3:2a:01:7c:98:52:4a:34:ec:84:44:46:a3:
                    70:2e:c9:74:07:d0:dc:72:e8:0e:3d:10:57:34:11:
                    7c:5b:96:97:84:f1:2b:b3:b9:32:34:e6:b2:f9:c7:
                    e9:9f:94:19:4d:91:10:5d:fc:fb:b6:da:ff:44:2f:
                    bc:ce:14:43:f7:87:f5:06:c4:91:f3:26:d1:25:1b:
                    d0:3e:79:8b:f0:b7:55:a0:00:e5:69:2b:2c:d1:43:
                    94:d0:49:87:dc:22:14:01:1c:d7:ac:31:61:96:1b:
                    9f:6e:8e:4c:24:38:72:ef:15:63:42:b8:81:00:55:
                    98:4b:dc:00:17:f1:db:4a:23:d7:6f:66:96:18:1c:
                    f2:97:b1:3a:f5:f2:3b:e1:ee:43:94:03:74:8f:a0:
                    70:23:b6:d5:58:1f:a2:e9:32:54:e1:53:73:8c:3e:
                    69:91:69:e8:a3:f8:76:5a:1b:0f:a3:9f:b2:06:99:
                    78:33:5f:80:84:19:40:a4:3a:e4:83:36:4d:1e:ff:
                    06:1d:69:45:a3:8e:f7:85:79:d2:d7:ea:8d:11:c0:
                    f9:31:c0:d1:69:89:7c:df:3b:c3:19:21:06:d4:fa:
                    87:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E6:24:40:52:3A:62:A6:10:09:7A:D9:2A:7F:F9:74:61:55:76:79
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e39302e3232322e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.90.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:9e:53:c6:72:55:3b:09:9a:4f:b7:73:26:7d:d3:8a:43:67:
         9c:5a:b1:6d:08:b7:d1:9d:6c:f7:4c:f1:3c:34:45:7e:d2:62:
         a1:7d:2f:d4:69:9a:79:bf:e7:73:7a:bd:4c:3e:6b:fb:59:ff:
         2e:2d:ce:1e:65:e0:ca:09:1d:9a:a7:c1:bd:75:40:92:51:b8:
         28:e2:55:f3:59:18:5c:59:5a:13:38:e7:50:24:14:bc:35:d6:
         63:4a:37:76:a4:79:0c:2e:3b:f4:8a:57:b8:43:c0:36:69:c0:
         b6:d6:a7:36:66:a8:8f:00:ed:37:76:b8:6f:97:71:7f:1c:60:
         e6:fe:f8:c5:7b:e6:5b:2c:52:1b:01:3a:35:d4:1c:2e:92:96:
         55:af:d7:93:08:89:c2:69:d2:03:f9:6b:c1:79:62:b5:59:bd:
         d2:e3:44:db:5f:cf:e7:2c:44:e9:50:b1:6c:bc:07:ce:d6:ab:
         cc:85:b6:4a:3f:c6:1f:c1:09:cf:10:d7:d4:41:18:c9:21:8a:
         ab:ac:56:36:f2:c0:9f:d0:89:99:c8:13:c5:8a:99:e7:b1:79:
         5b:02:2f:3b:c0:2b:68:36:60:8d:e9:42:b9:5e:7c:d4:9b:b0:
         0a:ca:52:83:94:47:2f:2d:f6:5c:84:22:fe:55:d5:dd:7d:54:
         ee:b8:7f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----