Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/25/34352e36372e3232322e302f32342d3234203d3e20323035383134.roa
File:                     34352e36372e3232322e302f32342d3234203d3e20323035383134.roa (raw, json)
Hash identifier:          Dk6z0ViFQhxgscNTYttJPRwHIS7S5er9/DoCPa2zi3o=
Subject key identifier:   48:7B:5B:7B:EE:71:1A:95:10:FC:65:6B:43:DD:F3:A9:54:D1:17:18
Certificate issuer:       /CN=852a307c4e0a2a4e7e38aa5164d4bc5cdb7cca49
Certificate serial:       2A34B667A5727B9F05E38FF683833FF471138E87
Authority key identifier: 85:2A:30:7C:4E:0A:2A:4E:7E:38:AA:51:64:D4:BC:5C:DB:7C:CA:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hSowfE4KKk5-OKpRZNS8XNt8ykk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/25/34352e36372e3232322e302f32342d3234203d3e20323035383134.roa
Signing time:             Mon 30 Nov 2020 18:20:02 +0000
ROA not before:           Mon 30 Nov 2020 18:15:02 +0000
ROA not after:            Mon 29 Nov 2021 18:20:02 +0000
asID:                     205814
IP address blocks:        45.67.222.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:34:b6:67:a5:72:7b:9f:05:e3:8f:f6:83:83:3f:f4:71:13:8e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=852a307c4e0a2a4e7e38aa5164d4bc5cdb7cca49
        Validity
            Not Before: Nov 30 18:15:02 2020 GMT
            Not After : Nov 29 18:20:02 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:87:d8:ba:17:d2:52:52:88:ee:2d:48:bc:2e:
                    e3:9f:b4:e7:56:ba:17:63:cc:cb:0e:e1:4d:6f:a7:
                    68:37:1f:53:c7:4e:9c:ed:ab:c1:52:87:c4:fa:cd:
                    5f:ec:96:be:7b:d1:8a:e9:93:b0:0b:c9:a2:8d:b5:
                    c2:a8:58:22:de:60:b0:d7:65:63:88:17:81:b1:33:
                    5d:66:7b:fe:49:59:86:84:34:35:2e:a8:ef:97:f1:
                    40:dd:4a:93:bb:1c:27:66:5b:ef:22:02:71:19:d6:
                    fd:09:03:c3:d2:f1:ac:6b:a0:80:2b:a5:da:c3:8b:
                    d2:d3:17:a1:aa:24:98:e3:0d:ec:01:6c:cc:d5:b2:
                    17:f9:45:a7:15:a2:ed:b8:92:a0:35:de:dd:41:8d:
                    a9:a4:a1:49:20:09:8c:b6:8a:a8:cd:80:74:f4:8c:
                    cf:60:8c:e4:bb:af:fe:26:25:73:cb:9b:3d:d9:e6:
                    e7:de:37:5b:75:57:c8:2d:f6:0a:3b:df:a8:cb:a0:
                    c9:29:96:13:96:77:4d:3d:d6:cf:60:9e:da:56:bd:
                    0d:e1:eb:9b:af:b1:f0:af:61:8f:5e:54:a0:04:e8:
                    68:0a:36:14:7f:7f:e6:dd:89:dd:de:7b:db:34:a6:
                    92:78:1b:bc:91:30:81:0f:a5:f3:63:05:08:b0:f8:
                    8b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:7B:5B:7B:EE:71:1A:95:10:FC:65:6B:43:DD:F3:A9:54:D1:17:18
            X509v3 Authority Key Identifier:
                keyid:85:2A:30:7C:4E:0A:2A:4E:7E:38:AA:51:64:D4:BC:5C:DB:7C:CA:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/25/852A307C4E0A2A4E7E38AA5164D4BC5CDB7CCA49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSowfE4KKk5-OKpRZNS8XNt8ykk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/25/34352e36372e3232322e302f32342d3234203d3e20323035383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.67.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:15:d3:7e:3f:76:1c:ca:44:44:e8:00:46:49:6b:a1:0a:79:
         a2:ec:a0:4c:05:3d:9a:9c:d8:4c:a7:4c:dc:5b:83:c9:7d:f5:
         52:32:c7:77:02:2f:ac:fd:6b:fd:7d:b3:70:9f:84:86:fd:95:
         c4:fb:c7:63:99:a5:38:04:88:e6:f7:be:be:e6:53:c5:c7:72:
         08:bf:78:fa:70:4f:89:87:49:f3:a7:61:77:5c:dc:77:fe:39:
         94:e9:5b:6f:82:9b:eb:65:59:b4:f9:52:5b:76:6f:a6:31:68:
         27:b4:92:e2:da:df:72:7b:51:49:79:be:7b:b9:33:0a:09:af:
         b9:f3:79:3a:bd:82:f4:b6:f7:e2:ff:6d:8b:0e:c2:85:fd:cc:
         ea:e0:26:1e:4c:51:30:78:01:38:9b:6f:b4:e6:0f:05:0e:df:
         7c:84:aa:98:c6:3e:04:cc:43:8f:fa:92:6e:7d:b9:4b:00:c0:
         87:d9:77:d4:1c:8c:26:ea:9a:a0:8c:2e:b3:71:7f:a5:de:79:
         c1:37:e9:73:c7:bd:93:19:9e:a0:21:12:b6:54:2d:e2:7d:28:
         5b:fe:74:a6:b0:5a:55:2b:a8:7e:f0:74:d3:70:81:60:9c:30:
         2b:a4:98:03:9d:23:75:a6:b8:a3:2f:ca:76:6d:8b:ac:96:d3:
         fc:d5:19:39
-----BEGIN CERTIFICATE-----
MIIG5TCCBc2gAwIBAgIUKjS2Z6Vye58F44/2g4M/9HETjocwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODUyYTMwN2M0ZTBhMmE0ZTdlMzhhYTUxNjRkNGJjNWNk
YjdjY2E0OTAeFw0yMDExMzAxODE1MDJaFw0yMTExMjkxODIwMDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjk4N0Q4QkExN0QyNTI1Mjg4
RUUyRDQ4QkMyRUUzOUZCNEU3NTZCQTE3NjNDQ0NCMEVFMTRENkZBNzY4MzcxRjUz
Qzc0RTlDRURBQkMxNTI4N0M0RkFDRDVGRUM5NkJFN0JEMThBRTk5M0IwMEJDOUEy
OERCNUMyQTg1ODIyREU2MEIwRDc2NTYzODgxNzgxQjEzMzVENjY3QkZFNDk1OTg2
ODQzNDM1MkVBOEVGOTdGMTQwREQ0QTkzQkIxQzI3NjY1QkVGMjIwMjcxMTlENkZE
MDkwM0MzRDJGMUFDNkJBMDgwMkJBNURBQzM4QkQyRDMxN0ExQUEyNDk4RTMwREVD
MDE2Q0NDRDVCMjE3Rjk0NUE3MTVBMkVEQjg5MkEwMzVERURENDE4REE5QTRBMTQ5
MjAwOThDQjY4QUE4Q0Q4MDc0RjQ4Q0NGNjA4Q0U0QkJBRkZFMjYyNTczQ0I5QjNE
RDlFNkU3REUzNzVCNzU1N0M4MkRGNjBBM0JERkE4Q0JBMEM5Mjk5NjEzOTY3NzRE
M0RENkNGNjA5RURBNTZCRDBERTFFQjlCQUZCMUYwQUY2MThGNUU1NEEwMDRFODY4
MEEzNjE0N0Y3RkU2REQ4OUREREU3QkRCMzRBNjkyNzgxQkJDOTEzMDgxMEZBNUYz
NjMwNTA4QjBGODhCNkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuYfYuhfSUlKI7i1IvC7jn7TnVroXY8zLDuFNb6doNx9Tx06c7avB
UofE+s1f7Ja+e9GK6ZOwC8mijbXCqFgi3mCw12VjiBeBsTNdZnv+SVmGhDQ1Lqjv
l/FA3UqTuxwnZlvvIgJxGdb9CQPD0vGsa6CAK6Xaw4vS0xehqiSY4w3sAWzM1bIX
+UWnFaLtuJKgNd7dQY2ppKFJIAmMtoqozYB09IzPYIzku6/+JiVzy5s92ebn3jdb
dVfILfYKO9+oy6DJKZYTlndNPdbPYJ7aVr0N4eubr7Hwr2GPXlSgBOhoCjYUf3/m
3Ynd3nvbNKaSeBu8kTCBD6XzYwUIsPiLbQIDAQABo4IB8zCCAe8wHQYDVR0OBBYE
FEh7W3vucRqVEPxla0Pd86lU0RcYMB8GA1UdIwQYMBaAFIUqMHxOCipOfjiqUWTU
vFzbfMpJMA4GA1UdDwEB/wQEAwIHgDBwBgNVHR8EaTBnMGWgY6Bhhl9yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8yNS84NTJB
MzA3QzRFMEEyQTRFN0UzOEFBNTE2NEQ0QkM1Q0RCN0NDQTQ5LmNybDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFNvd2ZFNEtLazUtT0twUlpOUzhYTnQ4eWtrLmNlcjCB
iQYIKwYBBQUHAQsEfTB7MHkGCCsGAQUFBzALhm1yc3luYzovL3Jwa2kxLnRlcnJh
dHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8yNS8zNDM1MmUzNjM3MmUzMjMy
MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzUzODMxMzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAAtQ94wDQYJKoZIhvcNAQELBQADggEBACkV034/dhzKREToAEZJa6EKeaLsoEwF
PZqc2EynTNxbg8l99VIyx3cCL6z9a/19s3CfhIb9lcT7x2OZpTgEiOb3vr7mU8XH
cgi/ePpwT4mHSfOnYXdc3Hf+OZTpW2+Cm+tlWbT5Ult2b6YxaCe0kuLa33J7UUl5
vnu5MwoJr7nzeTq9gvS29+L/bYsOwoX9zOrgJh5MUTB4ATibb7TmDwUO33yEqpjG
PgTMQ4/6km59uUsAwIfZd9QcjCbqmqCMLrNxf6XeecE36XPHvZMZnqAhErZULeJ9
KFv+dKawWlUrqH7wdNNwgWCcMCukmAOdI3WmuKMvynZti6yW0/zVGTk=
-----END CERTIFICATE-----