Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/33/34352e39302e3232332e302f32342d3234203d3e20323132353630.roa
File:                     34352e39302e3232332e302f32342d3234203d3e20323132353630.roa (raw, json)
Hash identifier:          DeRMwmfhFufNfscTn0Kc+0mJKdjNOklxuqVcZcfyji0=
Subject key identifier:   08:A1:DD:99:6C:14:8D:08:C3:57:6F:5E:D2:8B:DB:65:B7:71:62:FA
Certificate issuer:       /CN=67596b6a4cd6bfe459e1a9c589b881ff37abda27
Certificate serial:       241CD43DE8FC311194F90E63599574BF38E48849
Authority key identifier: 67:59:6B:6A:4C:D6:BF:E4:59:E1:A9:C5:89:B8:81:FF:37:AB:DA:27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z1lrakzWv-RZ4anFibiB_zer2ic.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/33/34352e39302e3232332e302f32342d3234203d3e20323132353630.roa
Signing time:             Mon 30 Nov 2020 19:12:30 +0000
ROA not before:           Mon 30 Nov 2020 19:07:30 +0000
ROA not after:            Mon 29 Nov 2021 19:12:30 +0000
asID:                     212560
IP address blocks:        45.90.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:1c:d4:3d:e8:fc:31:11:94:f9:0e:63:59:95:74:bf:38:e4:88:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67596b6a4cd6bfe459e1a9c589b881ff37abda27
        Validity
            Not Before: Nov 30 19:07:30 2020 GMT
            Not After : Nov 29 19:12:30 2021 GMT
        Subject: CN=3082010A0282010100D3755C122609F1DDE1C234A6F7AF0B668BF190C72962DF78F6671FDC3DE8FE8C06A269C4CB4A0F017DCB82204A2F7C90512C1A7DA2A3BBC171A4ADCDBB256C12C417FA19F244F0D2C1140A3F961434FBFF9BBAD5516E53772AB425F66361A2B9A2D75E58DB367916F989483DB5F55DB5CAE8E3B3596AB1933587979D2868A29D155567C584FF6E4B1A1FF21B680C642A2F690633B9D647D8B80CD903D89668ADFD69A4BAC2AD38E87DC0A98460779699EBAFA34FDDE3D6598C4F48CF44CD327B58B996728EB3E71BCA2FCCF486AB451DCF54001F98F0E604DFBF46C26739E6B162FF213EA0F4D058C205F2D29DE7F1DB23CF6FCFD94A0A834B01B1BC0C2A69170203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:75:5c:12:26:09:f1:dd:e1:c2:34:a6:f7:af:
                    0b:66:8b:f1:90:c7:29:62:df:78:f6:67:1f:dc:3d:
                    e8:fe:8c:06:a2:69:c4:cb:4a:0f:01:7d:cb:82:20:
                    4a:2f:7c:90:51:2c:1a:7d:a2:a3:bb:c1:71:a4:ad:
                    cd:bb:25:6c:12:c4:17:fa:19:f2:44:f0:d2:c1:14:
                    0a:3f:96:14:34:fb:ff:9b:ba:d5:51:6e:53:77:2a:
                    b4:25:f6:63:61:a2:b9:a2:d7:5e:58:db:36:79:16:
                    f9:89:48:3d:b5:f5:5d:b5:ca:e8:e3:b3:59:6a:b1:
                    93:35:87:97:9d:28:68:a2:9d:15:55:67:c5:84:ff:
                    6e:4b:1a:1f:f2:1b:68:0c:64:2a:2f:69:06:33:b9:
                    d6:47:d8:b8:0c:d9:03:d8:96:68:ad:fd:69:a4:ba:
                    c2:ad:38:e8:7d:c0:a9:84:60:77:96:99:eb:af:a3:
                    4f:dd:e3:d6:59:8c:4f:48:cf:44:cd:32:7b:58:b9:
                    96:72:8e:b3:e7:1b:ca:2f:cc:f4:86:ab:45:1d:cf:
                    54:00:1f:98:f0:e6:04:df:bf:46:c2:67:39:e6:b1:
                    62:ff:21:3e:a0:f4:d0:58:c2:05:f2:d2:9d:e7:f1:
                    db:23:cf:6f:cf:d9:4a:0a:83:4b:01:b1:bc:0c:2a:
                    69:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A1:DD:99:6C:14:8D:08:C3:57:6F:5E:D2:8B:DB:65:B7:71:62:FA
            X509v3 Authority Key Identifier:
                keyid:67:59:6B:6A:4C:D6:BF:E4:59:E1:A9:C5:89:B8:81:FF:37:AB:DA:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/33/67596B6A4CD6BFE459E1A9C589B881FF37ABDA27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1lrakzWv-RZ4anFibiB_zer2ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/33/34352e39302e3232332e302f32342d3234203d3e20323132353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.90.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:92:4c:09:ea:b0:fe:95:89:76:78:8a:f0:5c:31:cb:b6:b8:
         c0:22:c0:d6:b4:3a:c3:6e:ce:27:7c:c1:c0:c6:53:d0:35:af:
         67:d2:ae:87:e4:2e:5c:27:e1:b0:af:34:8f:fb:2d:c3:52:d4:
         9b:e6:53:68:3c:0c:11:53:2c:bb:30:f5:40:6c:21:ea:13:17:
         60:ab:9f:27:39:57:e4:26:b2:7a:88:7a:d8:d3:9d:63:47:75:
         45:ac:e6:7c:10:7d:33:35:a9:f2:68:53:8f:2e:3e:ee:a6:8a:
         59:73:69:7e:82:fd:56:5d:46:4f:b0:ce:cb:73:f1:c8:a1:2d:
         d5:00:05:d4:a8:6d:40:42:01:5b:be:1d:5b:75:26:8a:ee:87:
         d8:6c:37:2c:42:14:a4:36:80:78:51:f4:38:02:7e:83:0c:42:
         03:ee:c2:10:35:00:5e:cc:73:7a:b1:f7:8e:76:a9:7f:80:92:
         e8:18:f7:ea:26:14:8c:91:7a:50:af:94:ca:ac:22:1a:25:a2:
         19:62:ce:32:9d:96:04:f0:12:de:f5:ea:92:60:0b:de:0b:69:
         9f:fa:4b:5e:3a:f5:a0:e6:02:ae:45:f5:02:9b:44:0b:4d:0a:
         4c:fb:bb:65:db:64:6b:ff:5e:25:28:db:75:a7:7b:36:0a:5b:
         71:04:19:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----