Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/25/34352e36372e3232302e302f32342d3234203d3e20323035383134.roa
File:                     34352e36372e3232302e302f32342d3234203d3e20323035383134.roa (raw, json)
Hash identifier:          gfl21as/wHi/oBPlphb+SoQwu3s7dPvL4LyPrGBTYjQ=
Subject key identifier:   6F:00:84:F0:CB:8E:59:AF:A4:C6:17:A8:8B:A8:87:ED:F5:FD:68:70
Certificate issuer:       /CN=852a307c4e0a2a4e7e38aa5164d4bc5cdb7cca49
Certificate serial:       2EA0E9501C0C4CED401566E7A447784847FC0534
Authority key identifier: 85:2A:30:7C:4E:0A:2A:4E:7E:38:AA:51:64:D4:BC:5C:DB:7C:CA:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hSowfE4KKk5-OKpRZNS8XNt8ykk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/25/34352e36372e3232302e302f32342d3234203d3e20323035383134.roa
Signing time:             Mon 30 Nov 2020 18:20:01 +0000
ROA not before:           Mon 30 Nov 2020 18:15:01 +0000
ROA not after:            Mon 29 Nov 2021 18:20:01 +0000
asID:                     205814
IP address blocks:        45.67.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:a0:e9:50:1c:0c:4c:ed:40:15:66:e7:a4:47:78:48:47:fc:05:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=852a307c4e0a2a4e7e38aa5164d4bc5cdb7cca49
        Validity
            Not Before: Nov 30 18:15:01 2020 GMT
            Not After : Nov 29 18:20:01 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:48:1e:4a:1e:a5:67:e7:a0:6a:27:10:70:12:
                    c4:88:b4:c0:f6:4a:dd:d4:d0:d9:75:03:92:2f:10:
                    9d:79:81:a7:a1:71:f4:47:d4:81:03:0d:b5:0c:e2:
                    eb:97:c7:7e:52:cb:d9:cb:26:b7:7b:e1:39:1a:7b:
                    47:c0:47:14:7b:f4:cb:86:de:0e:43:02:3b:00:f4:
                    e8:58:61:31:26:65:b6:2e:e5:54:7e:32:6b:3a:d9:
                    b7:ce:cf:dc:03:1c:f4:f3:72:fb:2c:9c:96:50:8b:
                    49:e9:4d:a6:09:75:35:f2:f4:07:ca:3a:c4:a3:f5:
                    2c:dc:f4:c3:d3:8b:4d:c4:2c:4c:5b:fe:4c:ba:3b:
                    ba:74:89:e8:0c:d5:0b:95:af:df:75:7d:f2:8a:5d:
                    78:02:f7:d3:bd:e0:eb:e4:a7:c7:bf:f0:ec:d8:64:
                    f0:84:fd:f1:29:b8:41:76:3b:a3:39:66:18:9b:a6:
                    6d:e6:4a:37:a9:b6:6b:0a:1f:aa:95:e5:e5:9f:c4:
                    96:e1:32:b6:f5:4f:a0:0e:d1:c5:5d:24:fe:ab:6b:
                    ee:32:7c:71:ca:4d:fb:c7:93:55:28:46:2a:2f:72:
                    8a:11:a6:c4:5c:ee:5e:7f:5e:8b:24:86:75:2b:64:
                    1a:2b:54:12:de:40:93:81:7d:35:ce:55:34:25:63:
                    b7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:00:84:F0:CB:8E:59:AF:A4:C6:17:A8:8B:A8:87:ED:F5:FD:68:70
            X509v3 Authority Key Identifier:
                keyid:85:2A:30:7C:4E:0A:2A:4E:7E:38:AA:51:64:D4:BC:5C:DB:7C:CA:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/25/852A307C4E0A2A4E7E38AA5164D4BC5CDB7CCA49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSowfE4KKk5-OKpRZNS8XNt8ykk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/25/34352e36372e3232302e302f32342d3234203d3e20323035383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.67.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:ba:1f:60:6f:42:35:3c:9f:49:11:17:68:30:8c:db:a8:85:
         34:46:20:7d:fa:6f:d5:4d:99:87:5e:59:b1:67:20:57:83:85:
         ff:24:4f:13:2e:33:b9:e3:30:59:0b:f0:35:e8:da:22:54:fb:
         f7:32:66:f3:38:8f:d2:bb:bd:4c:13:99:d4:ab:b0:d2:7c:c1:
         78:50:68:b8:e0:7a:c7:14:a6:20:b2:16:38:e3:60:3a:2f:6f:
         7a:09:22:c9:cd:ff:45:30:36:e7:38:9f:ef:da:b9:71:83:af:
         8b:f4:7b:a4:0b:62:fb:09:9e:7c:36:73:86:cb:48:46:f7:ac:
         ee:e5:75:9f:d7:9a:db:f5:64:c6:5d:8f:97:b3:79:1f:ad:a1:
         df:51:1f:0a:2a:ce:07:5e:34:65:70:1a:d5:0f:c0:32:3d:b2:
         74:4e:50:8f:08:55:5b:52:6c:14:09:e9:44:1f:f2:9e:59:0e:
         f3:86:1d:75:65:4a:ee:6a:11:f2:fe:68:5a:a8:06:9d:48:12:
         4e:f2:23:11:8e:33:ea:aa:54:3e:96:da:39:89:b7:94:6b:a5:
         d0:bc:e1:92:0e:2f:7b:12:d3:b8:98:07:6a:12:b1:59:7d:ab:
         e5:fb:c9:79:d9:57:f5:85:2b:ff:e8:32:2c:ad:dc:75:76:f9:
         08:2c:04:55
-----BEGIN CERTIFICATE-----
MIIG5TCCBc2gAwIBAgIULqDpUBwMTO1AFWbnpEd4SEf8BTQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODUyYTMwN2M0ZTBhMmE0ZTdlMzhhYTUxNjRkNGJjNWNk
YjdjY2E0OTAeFw0yMDExMzAxODE1MDFaFw0yMTExMjkxODIwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUY0ODFFNEExRUE1NjdFN0Ew
NkEyNzEwNzAxMkM0ODhCNEMwRjY0QURERDREMEQ5NzUwMzkyMkYxMDlENzk4MUE3
QTE3MUY0NDdENDgxMDMwREI1MENFMkVCOTdDNzdFNTJDQkQ5Q0IyNkI3N0JFMTM5
MUE3QjQ3QzA0NzE0N0JGNENCODZERTBFNDMwMjNCMDBGNEU4NTg2MTMxMjY2NUI2
MkVFNTU0N0UzMjZCM0FEOUI3Q0VDRkRDMDMxQ0Y0RjM3MkZCMkM5Qzk2NTA4QjQ5
RTk0REE2MDk3NTM1RjJGNDA3Q0EzQUM0QTNGNTJDRENGNEMzRDM4QjREQzQyQzRD
NUJGRTRDQkEzQkJBNzQ4OUU4MENENTBCOTVBRkRGNzU3REYyOEE1RDc4MDJGN0Qz
QkRFMEVCRTRBN0M3QkZGMEVDRDg2NEYwODRGREYxMjlCODQxNzYzQkEzMzk2NjE4
OUJBNjZERTY0QTM3QTlCNjZCMEExRkFBOTVFNUU1OUZDNDk2RTEzMkI2RjU0RkEw
MEVEMUM1NUQyNEZFQUI2QkVFMzI3QzcxQ0E0REZCQzc5MzU1Mjg0NjJBMkY3MjhB
MTFBNkM0NUNFRTVFN0Y1RThCMjQ4Njc1MkI2NDFBMkI1NDEyREU0MDkzODE3RDM1
Q0U1NTM0MjU2M0I3ODkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAr0geSh6lZ+egaicQcBLEiLTA9krd1NDZdQOSLxCdeYGnoXH0R9SB
Aw21DOLrl8d+UsvZyya3e+E5GntHwEcUe/TLht4OQwI7APToWGExJmW2LuVUfjJr
Otm3zs/cAxz083L7LJyWUItJ6U2mCXU18vQHyjrEo/Us3PTD04tNxCxMW/5Muju6
dInoDNULla/fdX3yil14AvfTveDr5KfHv/Ds2GTwhP3xKbhBdjujOWYYm6Zt5ko3
qbZrCh+qleXln8SW4TK29U+gDtHFXST+q2vuMnxxyk37x5NVKEYqL3KKEabEXO5e
f16LJIZ1K2QaK1QS3kCTgX01zlU0JWO3iQIDAQABo4IB8zCCAe8wHQYDVR0OBBYE
FG8AhPDLjlmvpMYXqIuoh+31/WhwMB8GA1UdIwQYMBaAFIUqMHxOCipOfjiqUWTU
vFzbfMpJMA4GA1UdDwEB/wQEAwIHgDBwBgNVHR8EaTBnMGWgY6Bhhl9yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8yNS84NTJB
MzA3QzRFMEEyQTRFN0UzOEFBNTE2NEQ0QkM1Q0RCN0NDQTQ5LmNybDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFNvd2ZFNEtLazUtT0twUlpOUzhYTnQ4eWtrLmNlcjCB
iQYIKwYBBQUHAQsEfTB7MHkGCCsGAQUFBzALhm1yc3luYzovL3Jwa2kxLnRlcnJh
dHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8yNS8zNDM1MmUzNjM3MmUzMjMy
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzUzODMxMzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAAtQ9wwDQYJKoZIhvcNAQELBQADggEBAJu6H2BvQjU8n0kRF2gwjNuohTRGIH36
b9VNmYdeWbFnIFeDhf8kTxMuM7njMFkL8DXo2iJU+/cyZvM4j9K7vUwTmdSrsNJ8
wXhQaLjgescUpiCyFjjjYDovb3oJIsnN/0UwNuc4n+/auXGDr4v0e6QLYvsJnnw2
c4bLSEb3rO7ldZ/Xmtv1ZMZdj5ezeR+tod9RHwoqzgdeNGVwGtUPwDI9snROUI8I
VVtSbBQJ6UQf8p5ZDvOGHXVlSu5qEfL+aFqoBp1IEk7yIxGOM+qqVD6W2jmJt5Rr
pdC84ZIOL3sS07iYB2oSsVl9q+X7yXnZV/WFK//oMiyt3HV2+QgsBFU=
-----END CERTIFICATE-----