Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/95/34352e3134332e38332e302f32342d3234203d3e20323132323239.roa
File:                     34352e3134332e38332e302f32342d3234203d3e20323132323239.roa (raw, json)
Hash identifier:          dMWL30eWLf+tFt0EZHHcMujCE+wa16ymncADnPrxysI=
Subject key identifier:   44:1C:07:DA:91:2C:8A:23:30:B0:D5:91:43:99:A1:54:52:1B:93:4A
Certificate issuer:       /CN=3bc02841ee05535614927daa2cd69e043e5a6286
Certificate serial:       105BAA88B87704E28C5850C97FD20A8DA41CF06B
Authority key identifier: 3B:C0:28:41:EE:05:53:56:14:92:7D:AA:2C:D6:9E:04:3E:5A:62:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O8AoQe4FU1YUkn2qLNaeBD5aYoY.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/95/34352e3134332e38332e302f32342d3234203d3e20323132323239.roa
Signing time:             Wed 13 Jan 2021 19:31:32 +0000
ROA not before:           Wed 13 Jan 2021 19:26:32 +0000
ROA not after:            Wed 12 Jan 2022 19:31:32 +0000
asID:                     212229
IP address blocks:        45.143.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:5b:aa:88:b8:77:04:e2:8c:58:50:c9:7f:d2:0a:8d:a4:1c:f0:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bc02841ee05535614927daa2cd69e043e5a6286
        Validity
            Not Before: Jan 13 19:26:32 2021 GMT
            Not After : Jan 12 19:31:32 2022 GMT
        Subject: CN=3082010A0282010100E7A0BCD168BACE2B096C140DE65CAF9BB487D7F2CED7D6193E14E2BACEFDC17573A2C6D1438129C977290591393FD60245949C3A227F5F08A1E7C64BBDB717E5824E7D1CDC1428E8AA48A6AC30462F744631013D3C2375A5AB0F647A5FC2FAB317B5C756E92F9C9975E18391CE0632B0600AFAFF43083510E5415014DCD16452C481DDA02396857443E4194C7F333145ADC9246BA2849E4F26437CD7E1EBA86DBA7D69E62ECBDA53B6B81555D364513BBA478804D332D1EC40D9A1A548FF392A370BDEBF29EA2FF1848528FB4B5CB3934CEA485E60D371684259CA24D5ADCDD5EBFB33D7186C60C8C3E9004D4E2B267F079D51A5CC62212AC6119E7FE4CE44B90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a0:bc:d1:68:ba:ce:2b:09:6c:14:0d:e6:5c:
                    af:9b:b4:87:d7:f2:ce:d7:d6:19:3e:14:e2:ba:ce:
                    fd:c1:75:73:a2:c6:d1:43:81:29:c9:77:29:05:91:
                    39:3f:d6:02:45:94:9c:3a:22:7f:5f:08:a1:e7:c6:
                    4b:bd:b7:17:e5:82:4e:7d:1c:dc:14:28:e8:aa:48:
                    a6:ac:30:46:2f:74:46:31:01:3d:3c:23:75:a5:ab:
                    0f:64:7a:5f:c2:fa:b3:17:b5:c7:56:e9:2f:9c:99:
                    75:e1:83:91:ce:06:32:b0:60:0a:fa:ff:43:08:35:
                    10:e5:41:50:14:dc:d1:64:52:c4:81:dd:a0:23:96:
                    85:74:43:e4:19:4c:7f:33:31:45:ad:c9:24:6b:a2:
                    84:9e:4f:26:43:7c:d7:e1:eb:a8:6d:ba:7d:69:e6:
                    2e:cb:da:53:b6:b8:15:55:d3:64:51:3b:ba:47:88:
                    04:d3:32:d1:ec:40:d9:a1:a5:48:ff:39:2a:37:0b:
                    de:bf:29:ea:2f:f1:84:85:28:fb:4b:5c:b3:93:4c:
                    ea:48:5e:60:d3:71:68:42:59:ca:24:d5:ad:cd:d5:
                    eb:fb:33:d7:18:6c:60:c8:c3:e9:00:4d:4e:2b:26:
                    7f:07:9d:51:a5:cc:62:21:2a:c6:11:9e:7f:e4:ce:
                    44:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:1C:07:DA:91:2C:8A:23:30:B0:D5:91:43:99:A1:54:52:1B:93:4A
            X509v3 Authority Key Identifier:
                keyid:3B:C0:28:41:EE:05:53:56:14:92:7D:AA:2C:D6:9E:04:3E:5A:62:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/95/3BC02841EE05535614927DAA2CD69E043E5A6286.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8AoQe4FU1YUkn2qLNaeBD5aYoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/95/34352e3134332e38332e302f32342d3234203d3e20323132323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.143.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:61:54:bb:2a:3a:0d:e9:bc:01:db:e6:80:8d:4d:71:bf:4b:
         84:7c:47:17:7a:76:0f:6d:60:af:28:f7:eb:e8:4a:25:36:a7:
         f1:1d:61:3c:0b:65:e5:c3:c9:de:ef:c2:94:7f:0a:89:3d:73:
         31:0c:71:b1:80:4d:18:cc:06:b5:e4:ba:32:a9:9e:aa:24:82:
         c5:1e:14:93:5e:62:9c:74:72:50:c2:63:ad:61:d2:8b:17:4f:
         8e:fe:db:d3:8b:a5:f9:40:a0:e6:e3:3d:8e:b2:4d:7d:4a:fe:
         52:aa:b4:2a:4a:ff:5e:92:07:b5:63:42:7a:82:2f:26:04:99:
         ab:36:45:e6:39:ac:d1:0d:2f:95:72:ff:e9:ca:7f:88:d2:5f:
         37:f5:42:5f:f4:2f:87:87:ba:16:38:bb:dc:2c:f0:66:77:9c:
         a2:25:45:4f:74:48:8c:91:56:fe:0f:00:9f:97:a5:3d:28:51:
         18:e3:16:c1:56:bd:c0:ee:1d:8e:4f:ba:d4:60:96:72:18:d8:
         5d:96:19:b7:86:f1:1c:7a:3c:84:fc:d5:27:37:cd:d6:c3:c0:
         ad:39:c1:2e:4f:72:01:2f:61:b2:80:34:f2:8f:bf:29:de:31:
         97:7a:db:8c:89:f9:bf:db:21:48:0f:f9:9f:f8:fd:cf:5b:00:
         ef:62:fa:5d
-----BEGIN CERTIFICATE-----
MIIG5TCCBc2gAwIBAgIUEFuqiLh3BOKMWFDJf9IKjaQc8GswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2JjMDI4NDFlZTA1NTM1NjE0OTI3ZGFhMmNkNjllMDQz
ZTVhNjI4NjAeFw0yMTAxMTMxOTI2MzJaFw0yMjAxMTIxOTMxMzJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTdBMEJDRDE2OEJBQ0UyQjA5
NkMxNDBERTY1Q0FGOUJCNDg3RDdGMkNFRDdENjE5M0UxNEUyQkFDRUZEQzE3NTcz
QTJDNkQxNDM4MTI5Qzk3NzI5MDU5MTM5M0ZENjAyNDU5NDlDM0EyMjdGNUYwOEEx
RTdDNjRCQkRCNzE3RTU4MjRFN0QxQ0RDMTQyOEU4QUE0OEE2QUMzMDQ2MkY3NDQ2
MzEwMTNEM0MyMzc1QTVBQjBGNjQ3QTVGQzJGQUIzMTdCNUM3NTZFOTJGOUM5OTc1
RTE4MzkxQ0UwNjMyQjA2MDBBRkFGRjQzMDgzNTEwRTU0MTUwMTREQ0QxNjQ1MkM0
ODFEREEwMjM5Njg1NzQ0M0U0MTk0QzdGMzMzMTQ1QURDOTI0NkJBMjg0OUU0RjI2
NDM3Q0Q3RTFFQkE4NkRCQTdENjlFNjJFQ0JEQTUzQjZCODE1NTVEMzY0NTEzQkJB
NDc4ODA0RDMzMkQxRUM0MEQ5QTFBNTQ4RkYzOTJBMzcwQkRFQkYyOUVBMkZGMTg0
ODUyOEZCNEI1Q0IzOTM0Q0VBNDg1RTYwRDM3MTY4NDI1OUNBMjRENUFEQ0RENUVC
RkIzM0Q3MTg2QzYwQzhDM0U5MDA0RDRFMkIyNjdGMDc5RDUxQTVDQzYyMjEyQUM2
MTE5RTdGRTRDRTQ0QjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA56C80Wi6zisJbBQN5lyvm7SH1/LO19YZPhTius79wXVzosbRQ4Ep
yXcpBZE5P9YCRZScOiJ/Xwih58ZLvbcX5YJOfRzcFCjoqkimrDBGL3RGMQE9PCN1
pasPZHpfwvqzF7XHVukvnJl14YORzgYysGAK+v9DCDUQ5UFQFNzRZFLEgd2gI5aF
dEPkGUx/MzFFrckka6KEnk8mQ3zX4euobbp9aeYuy9pTtrgVVdNkUTu6R4gE0zLR
7EDZoaVI/zkqNwvevynqL/GEhSj7S1yzk0zqSF5g03FoQlnKJNWtzdXr+zPXGGxg
yMPpAE1OKyZ/B51RpcxiISrGEZ5/5M5EuQIDAQABo4IB8zCCAe8wHQYDVR0OBBYE
FEQcB9qRLIojMLDVkUOZoVRSG5NKMB8GA1UdIwQYMBaAFDvAKEHuBVNWFJJ9qizW
ngQ+WmKGMA4GA1UdDwEB/wQEAwIHgDBwBgNVHR8EaTBnMGWgY6Bhhl9yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC85NS8zQkMw
Mjg0MUVFMDU1MzU2MTQ5MjdEQUEyQ0Q2OUUwNDNFNUE2Mjg2LmNybDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzhBb1FlNEZVMVlVa24ycUxOYWVCRDVhWW9ZLmNlcjCB
iQYIKwYBBQUHAQsEfTB7MHkGCCsGAQUFBzALhm1yc3luYzovL3Jwa2kxLnRlcnJh
dHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC85NS8zNDM1MmUzMTM0MzMyZTM4
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzMjMyMzkucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAAtj1MwDQYJKoZIhvcNAQELBQADggEBAKhhVLsqOg3pvAHb5oCNTXG/S4R8Rxd6
dg9tYK8o9+voSiU2p/EdYTwLZeXDyd7vwpR/Cok9czEMcbGATRjMBrXkujKpnqok
gsUeFJNeYpx0clDCY61h0osXT47+29OLpflAoObjPY6yTX1K/lKqtCpK/16SB7Vj
QnqCLyYEmas2ReY5rNENL5Vy/+nKf4jSXzf1Ql/0L4eHuhY4u9ws8GZ3nKIlRU90
SIyRVv4PAJ+XpT0oURjjFsFWvcDuHY5PutRglnIY2F2WGbeG8Rx6PIT81Sc3zdbD
wK05wS5PcgEvYbKANPKPvyneMZd624yJ+b/bIUgP+Z/4/c9bAO9i+l0=
-----END CERTIFICATE-----