Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/34352e382e3133322e302f32332d3332203d3e203531313637.roa
File:                     34352e382e3133322e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier:          s7Hf1xkJSvRcG4r3iTdgvuNDxZLb5Sch2SZRhzaH5wY=
Subject key identifier:   10:7B:48:C3:36:90:29:CC:E6:B5:E8:BE:FF:EE:23:91:62:25:E2:50
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       28C9ECD98F1E654AE92CB3D7C8D23EE8874F22D2
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/34352e382e3133322e302f32332d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:52 +0000
ROA not before:           Sat 22 Oct 2022 04:28:52 +0000
ROA not after:            Sat 21 Oct 2023 04:33:52 +0000
asID:                     51167
IP address blocks:        45.8.132.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:c9:ec:d9:8f:1e:65:4a:e9:2c:b3:d7:c8:d2:3e:e8:87:4f:22:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Oct 22 04:28:52 2022 GMT
            Not After : Oct 21 04:33:52 2023 GMT
        Subject: CN=107B48C3369029CCE6B5E8BEFFEE23916225E250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ba:fa:6f:8b:19:a0:ec:47:d1:a9:97:23:ce:
                    e6:f4:10:f5:77:8a:e1:59:07:47:4a:b6:c9:3e:96:
                    98:99:db:2b:3f:70:d8:da:c4:87:66:72:f4:af:fd:
                    87:fa:12:bb:1b:ac:fe:1c:76:af:07:84:f2:d1:6c:
                    55:33:bb:0b:2d:27:54:8c:b9:7c:b5:04:b3:36:27:
                    66:4d:ce:f2:49:dc:99:72:b6:63:dc:bf:b8:ba:da:
                    d9:a1:30:12:3d:42:60:fb:c3:72:a6:dd:58:0f:4f:
                    d3:0a:3c:ee:32:e1:3e:d6:6b:cc:23:7a:f7:31:8c:
                    56:01:2c:fc:ef:20:fa:aa:9e:f3:23:43:c3:e5:5a:
                    ac:ee:27:1e:6f:31:f0:df:79:32:64:fb:36:da:4f:
                    65:b0:3d:f2:22:30:08:6d:72:01:71:30:f4:9c:07:
                    be:65:97:4c:2f:3b:81:f4:25:d5:4c:93:13:eb:a9:
                    49:6b:4f:a5:cb:83:05:b4:a4:53:ff:53:5f:d8:27:
                    f8:da:ab:cd:53:f1:96:74:3f:e8:bb:4a:c0:43:cd:
                    65:c4:76:5f:94:22:59:db:2b:e2:28:43:0a:46:70:
                    e1:d5:2a:77:70:ee:16:53:68:dd:c1:6c:9e:c9:fc:
                    8a:f3:92:52:71:0f:05:8a:8b:d4:52:e5:de:16:89:
                    19:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7B:48:C3:36:90:29:CC:E6:B5:E8:BE:FF:EE:23:91:62:25:E2:50
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/34352e382e3133322e302f32332d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:fc:dc:57:89:71:4a:dd:14:35:78:0f:de:1d:63:bf:3a:7d:
         b8:4e:cb:0d:77:40:79:d6:4b:60:e0:71:2a:e2:48:2c:97:98:
         5d:e1:c8:20:6b:92:3e:ad:54:d6:eb:3a:8c:e6:16:be:11:a9:
         ab:77:bb:15:04:e4:07:e0:be:8c:f5:06:d2:47:81:07:9a:1e:
         6c:10:fc:1b:06:e8:34:08:19:e1:7e:84:66:67:6b:b6:5a:26:
         f6:99:50:10:7a:37:9a:84:db:57:b2:0b:8e:68:f2:b2:26:f5:
         30:8b:00:43:68:e3:cb:52:98:29:67:d1:98:55:af:6b:51:17:
         a7:55:80:c4:91:78:97:dc:e6:c1:e1:a6:2d:fd:5a:80:e1:a7:
         39:90:e0:ed:8f:9e:b5:8c:84:2a:0d:e4:90:e7:27:ff:7a:a1:
         a4:dd:ca:12:43:88:be:62:27:a5:41:15:83:62:01:02:b9:da:
         3a:ff:42:df:ef:cc:0a:d1:ea:f4:60:53:bf:10:4c:0b:55:cb:
         e6:d7:dc:03:3d:3b:c0:a6:e4:a4:8a:42:20:c5:cb:95:1a:0b:
         64:df:cc:0e:e1:27:98:e7:aa:f6:27:31:0b:b9:f2:6d:68:54:
         35:86:8b:2d:68:ec:b4:41:aa:81:e0:37:d4:2c:15:da:e3:bd:
         1d:68:c9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----