Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/11/34352e3134312e32302e302f32332d3234203d3e203631333137.roa
File:                     34352e3134312e32302e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          kSBasiQoyza5cprS4cUrBVBH4avgS8XEMyiAnUOoJKY=
Subject key identifier:   9A:81:C9:1B:C2:88:A5:B9:1C:22:76:F9:0E:B5:6E:61:F5:4F:20:81
Certificate issuer:       /CN=54ed4605385d5edb0dd5c3ea049c52a5159b7cf2
Certificate serial:       58975E27227F570650BC53412088CBADF8CD0F82
Authority key identifier: 54:ED:46:05:38:5D:5E:DB:0D:D5:C3:EA:04:9C:52:A5:15:9B:7C:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VO1GBThdXtsN1cPqBJxSpRWbfPI.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/11/34352e3134312e32302e302f32332d3234203d3e203631333137.roa
Signing time:             Fri 27 Nov 2020 15:10:08 +0000
ROA not before:           Fri 27 Nov 2020 15:05:08 +0000
ROA not after:            Fri 26 Nov 2021 15:10:08 +0000
asID:                     61317
IP address blocks:        45.141.20.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:97:5e:27:22:7f:57:06:50:bc:53:41:20:88:cb:ad:f8:cd:0f:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54ed4605385d5edb0dd5c3ea049c52a5159b7cf2
        Validity
            Not Before: Nov 27 15:05:08 2020 GMT
            Not After : Nov 26 15:10:08 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4c:91:35:74:05:7b:40:6a:1a:91:11:42:2e:
                    fa:e7:33:4a:af:b4:b3:27:b4:4f:d9:ea:f2:29:a0:
                    20:b6:88:03:31:9b:97:99:bb:b8:02:ff:54:7e:14:
                    7e:2b:ac:86:73:fc:13:28:f2:4e:64:ac:40:15:3d:
                    70:42:f7:78:42:ad:41:41:5a:c0:13:d2:92:e9:15:
                    f3:bd:16:07:61:e4:4e:f5:f7:fe:77:23:c9:d5:9f:
                    91:35:5e:fa:5f:67:04:c5:26:89:88:95:7c:c4:e1:
                    75:2b:12:c5:d3:8c:3a:c5:fd:26:3c:46:b3:5a:9b:
                    b0:79:02:c1:fc:bf:8e:58:ea:78:70:a1:5f:9e:44:
                    17:d2:e1:c3:e8:db:c3:d6:20:79:09:e1:1e:36:5d:
                    96:7a:35:c5:98:30:a9:c7:9a:5a:99:11:44:5f:30:
                    51:88:72:1a:2d:4f:4e:e6:d5:62:44:e8:10:16:c5:
                    c4:71:c1:6f:bc:ce:5e:09:f3:09:d8:10:b3:69:d7:
                    c4:93:25:19:99:c1:d7:b9:bf:74:44:f1:3e:d7:18:
                    53:97:43:a3:63:06:0d:35:d9:22:f5:c4:5c:a4:19:
                    37:bd:ad:ba:3f:77:04:f9:9e:c4:2d:b0:f3:c0:72:
                    0d:cc:b5:29:95:91:30:5d:e9:f4:3f:76:c9:13:b8:
                    80:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:81:C9:1B:C2:88:A5:B9:1C:22:76:F9:0E:B5:6E:61:F5:4F:20:81
            X509v3 Authority Key Identifier:
                keyid:54:ED:46:05:38:5D:5E:DB:0D:D5:C3:EA:04:9C:52:A5:15:9B:7C:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/11/54ED4605385D5EDB0DD5C3EA049C52A5159B7CF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VO1GBThdXtsN1cPqBJxSpRWbfPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/11/34352e3134312e32302e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.141.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:b7:d4:9f:6d:e2:18:f9:15:52:a6:85:b6:3f:27:68:c6:68:
         ed:c6:f9:99:fa:6a:f3:6b:9e:c3:a4:a5:63:57:ce:64:c9:2e:
         84:0c:f7:f1:22:c4:96:02:66:2c:c6:77:58:92:4c:4f:09:7a:
         03:a6:f9:47:00:af:d3:6b:dc:93:8c:49:2b:be:2e:7c:04:1e:
         1e:75:9e:62:f2:ea:4e:9f:4b:a1:65:23:f3:77:60:90:a7:7f:
         1c:d3:b5:01:ea:23:6a:cc:d6:a5:9b:00:c1:eb:a5:68:f0:e4:
         d2:86:8c:ca:2d:46:4d:e4:4b:46:6c:64:18:e5:e8:86:ba:c1:
         ed:07:75:68:5e:37:99:5f:73:fb:2c:64:9f:7d:57:50:a3:2c:
         00:a4:79:dc:82:12:cb:79:c0:13:81:3b:05:17:73:19:93:e7:
         44:0a:45:10:7d:93:e3:36:3d:83:64:ec:f6:64:01:ad:e1:b0:
         b4:45:b5:97:ae:9d:bd:f0:de:5c:82:ac:49:0a:99:36:24:99:
         ac:2c:fc:2a:a2:86:8d:2f:40:79:26:f7:bf:80:94:c2:24:dc:
         9e:1b:59:27:38:cc:f9:cd:82:bc:d3:cd:0e:10:11:e8:d4:c8:
         b1:4a:38:b1:a5:35:da:ce:45:a5:25:ec:82:a9:a8:c5:65:d3:
         b3:83:87:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----