Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/9/34352e38352e3134352e302f32342d3234203d3e20323132303737.roa
File:                     34352e38352e3134352e302f32342d3234203d3e20323132303737.roa (raw, json)
Hash identifier:          M+GKEHTuv/fmI7uLtf8mUGiJQ0RsNLcIQyPJq50QZSQ=
Subject key identifier:   1A:AC:E0:6B:3C:69:78:91:36:EF:8C:EE:6B:DF:51:7E:5D:0E:1B:F8
Certificate issuer:       /CN=3749575771396070c1eb8ccebffaf75f05dbaf3c
Certificate serial:       7C68519AB6A5D8B4204BD5890DA394C439DFD43A
Authority key identifier: 37:49:57:57:71:39:60:70:C1:EB:8C:CE:BF:FA:F7:5F:05:DB:AF:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0lXV3E5YHDB64zOv_r3XwXbrzw.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/9/34352e38352e3134352e302f32342d3234203d3e20323132303737.roa
Signing time:             Thu 31 Dec 2020 18:51:41 +0000
ROA not before:           Thu 31 Dec 2020 18:46:41 +0000
ROA not after:            Thu 30 Dec 2021 18:51:41 +0000
asID:                     212077
IP address blocks:        45.85.145.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:68:51:9a:b6:a5:d8:b4:20:4b:d5:89:0d:a3:94:c4:39:df:d4:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3749575771396070c1eb8ccebffaf75f05dbaf3c
        Validity
            Not Before: Dec 31 18:46:41 2020 GMT
            Not After : Dec 30 18:51:41 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f0:bc:68:55:00:e7:6a:1e:e3:ae:50:3e:98:
                    ec:2e:56:cf:82:93:96:ac:64:6c:e3:2d:e0:20:92:
                    e2:d3:77:04:3c:27:62:3c:3a:7a:ce:14:64:56:b5:
                    1e:49:e7:7d:16:5b:a4:eb:a8:e0:ae:67:6c:c9:2d:
                    9b:f5:f7:aa:12:28:0b:b9:14:96:05:99:dd:0f:bc:
                    c8:ae:bf:08:c0:76:ef:da:41:fc:cd:85:10:bb:e4:
                    64:c0:42:ac:55:96:5e:55:c0:18:8b:f0:16:85:dc:
                    b2:03:2c:ef:a1:42:29:e6:ea:e5:eb:42:91:6f:f2:
                    d4:64:0f:73:6a:49:b6:58:37:bd:4c:83:73:5a:9c:
                    2f:73:d9:95:27:e1:08:a9:1a:80:11:a9:aa:43:75:
                    f2:a1:f2:27:42:ee:a1:7f:8d:46:8b:3c:19:22:b0:
                    36:1f:71:0d:1b:c5:eb:e4:6c:6b:0f:f6:6f:09:4a:
                    67:e1:08:ce:15:cf:1e:35:6f:10:71:c5:3e:ab:92:
                    57:fe:60:a4:4f:0c:58:97:a6:f0:ea:04:29:e1:15:
                    71:4e:ef:19:c7:90:94:56:97:5f:ac:40:f8:9b:92:
                    a6:fe:0b:7a:cd:8b:06:58:1f:80:e3:f7:5c:67:c9:
                    8b:d1:32:32:04:6c:be:65:2b:87:96:78:50:c1:01:
                    66:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AC:E0:6B:3C:69:78:91:36:EF:8C:EE:6B:DF:51:7E:5D:0E:1B:F8
            X509v3 Authority Key Identifier:
                keyid:37:49:57:57:71:39:60:70:C1:EB:8C:CE:BF:FA:F7:5F:05:DB:AF:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/9/3749575771396070C1EB8CCEBFFAF75F05DBAF3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0lXV3E5YHDB64zOv_r3XwXbrzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/9/34352e38352e3134352e302f32342d3234203d3e20323132303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.85.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:aa:07:01:46:f8:8a:1f:db:5f:51:60:3f:c8:cc:69:df:6f:
         1f:bd:02:ea:d9:b4:aa:fb:ea:65:52:6a:a8:e1:f4:3a:78:c5:
         70:62:cd:a3:29:e2:ba:26:42:49:0e:ec:af:0e:da:60:c0:40:
         b9:ed:cd:32:80:9e:84:fe:65:9c:3b:5a:35:aa:34:a9:15:79:
         da:47:70:fa:30:9e:16:ef:84:d0:30:eb:e6:84:41:95:7d:d6:
         d1:9f:53:dd:ed:9b:1e:f5:e1:39:e9:a9:c4:01:38:9e:ee:54:
         34:7d:7c:cf:56:91:89:e1:aa:94:37:1c:2c:5d:ed:71:4d:4c:
         07:ca:45:62:4d:43:d7:a4:47:57:de:1b:cc:da:bf:d0:72:7a:
         31:9c:41:98:db:1e:9c:a1:ee:0a:66:1b:aa:b5:0b:b9:29:b9:
         5f:96:84:6d:c2:cc:db:0e:58:0c:cd:12:31:5f:92:bd:f5:3f:
         17:60:1b:6d:70:26:61:4c:49:5e:18:d4:56:bc:51:a4:b8:fa:
         fc:b6:96:6a:1d:9d:55:60:08:e8:61:cc:20:6e:dd:ec:86:24:
         e2:43:91:9b:ee:0d:89:4a:80:27:3a:e9:2d:b8:f5:5f:df:1f:
         81:df:6a:a1:d5:c6:8c:6d:2a:f0:37:17:d4:b7:ad:35:a3:68:
         52:91:32:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----