Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/13/34352e31332e35362e302f32332d3234203d3e203631333137.roa
File:                     34352e31332e35362e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          pG3EqLWP0oy5YxE4lCnwZPK5fZf+6o0gguiN/TikpVY=
Subject key identifier:   6D:73:F6:3D:71:DB:31:9C:E5:49:BD:C8:48:2A:96:CF:57:8D:9D:2E
Certificate issuer:       /CN=8000e2f09d2bdd9bee9d4694e4779bca485a6067
Certificate serial:       5DB0CE0CB8D8E0154EE2F9AE4EACEC327DAEEC61
Authority key identifier: 80:00:E2:F0:9D:2B:DD:9B:EE:9D:46:94:E4:77:9B:CA:48:5A:60:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gADi8J0r3ZvunUaU5HebykhaYGc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/13/34352e31332e35362e302f32332d3234203d3e203631333137.roa
Signing time:             Sat 28 Nov 2020 12:46:35 +0000
ROA not before:           Sat 28 Nov 2020 12:41:35 +0000
ROA not after:            Sat 27 Nov 2021 12:46:35 +0000
asID:                     61317
IP address blocks:        45.13.56.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:b0:ce:0c:b8:d8:e0:15:4e:e2:f9:ae:4e:ac:ec:32:7d:ae:ec:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8000e2f09d2bdd9bee9d4694e4779bca485a6067
        Validity
            Not Before: Nov 28 12:41:35 2020 GMT
            Not After : Nov 27 12:46:35 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:db:21:47:da:93:6c:2e:d3:48:ef:4b:82:d8:
                    90:45:ff:00:65:7e:e7:d3:92:27:68:cb:01:50:56:
                    98:e9:fe:da:02:b0:2e:5f:fd:12:98:da:b7:94:8d:
                    37:aa:35:f4:14:f6:76:e0:10:1a:af:d3:51:ec:af:
                    93:83:c1:cf:cc:1a:9f:5d:e1:1a:f8:23:51:25:f7:
                    c5:89:f2:d2:9f:4d:1a:50:f8:08:78:3d:88:fc:6f:
                    e0:9d:5c:66:9c:f3:f3:71:92:d7:21:be:b7:05:26:
                    77:62:62:4d:f9:67:06:19:89:8e:03:ae:02:8c:18:
                    2e:7d:50:35:4c:cd:98:6c:ac:19:76:6a:15:fe:e7:
                    6b:db:29:c2:45:f2:dc:7b:3d:2f:28:e1:6c:aa:ce:
                    a3:a8:4b:68:c0:0e:ab:16:74:0c:cd:0c:31:fc:5d:
                    4c:a3:5a:72:a0:48:59:7d:83:62:34:02:70:b4:b9:
                    73:2b:8f:04:98:f8:c8:64:02:19:5d:12:d5:32:89:
                    e1:ac:da:e4:f8:fa:4f:02:b9:b4:86:56:11:7f:f2:
                    0c:0e:c9:54:af:6b:61:5b:2a:50:4e:6d:66:30:d0:
                    e5:16:21:e9:58:ae:98:97:30:87:7c:ac:9c:3a:b5:
                    05:9f:3c:e1:7c:11:e3:ae:29:60:ba:2b:66:42:93:
                    d9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:73:F6:3D:71:DB:31:9C:E5:49:BD:C8:48:2A:96:CF:57:8D:9D:2E
            X509v3 Authority Key Identifier:
                keyid:80:00:E2:F0:9D:2B:DD:9B:EE:9D:46:94:E4:77:9B:CA:48:5A:60:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/13/8000E2F09D2BDD9BEE9D4694E4779BCA485A6067.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gADi8J0r3ZvunUaU5HebykhaYGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/13/34352e31332e35362e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:f6:6f:a7:06:87:90:b3:13:81:0d:47:eb:df:ec:d8:b1:d0:
         2e:9b:4e:c2:21:0a:97:bc:06:67:45:04:3c:9a:aa:f6:9b:ca:
         fe:84:91:9a:1c:73:40:fd:fc:71:cf:0c:91:22:17:eb:6c:20:
         61:51:99:f3:d0:d7:74:cc:eb:53:03:d3:35:09:66:12:34:43:
         2e:78:e4:24:08:c8:4a:84:0b:be:a3:c9:03:c8:f8:e2:c7:83:
         3c:2e:1e:1b:e5:63:b0:d4:58:de:9d:3b:61:98:a9:88:97:62:
         d0:48:eb:10:76:66:b1:75:98:dc:af:00:30:ff:1e:a1:ed:34:
         68:cc:fb:c4:f7:2e:37:af:b1:f0:06:cb:57:be:34:00:67:68:
         bb:bb:cf:40:59:40:9f:ae:13:71:55:91:cc:cf:5f:9a:84:cf:
         8f:b8:34:97:5a:ce:20:f2:5c:90:89:18:74:1b:59:03:b5:41:
         3e:f0:f2:31:62:1b:4b:36:cd:85:ab:18:ac:21:89:1d:c5:d2:
         b9:aa:fd:b2:05:5c:43:63:71:c8:a4:5e:7f:fd:fe:87:4d:b4:
         15:96:40:75:d5:79:7e:99:5f:0b:90:b8:6d:90:78:ce:b8:21:
         a6:32:7d:40:e6:c9:25:fb:65:d3:18:8a:9e:2d:8d:bb:c3:4c:
         f6:7b:aa:98
-----BEGIN CERTIFICATE-----
MIIG4TCCBcmgAwIBAgIUXbDODLjY4BVO4vmuTqzsMn2u7GEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODAwMGUyZjA5ZDJiZGQ5YmVlOWQ0Njk0ZTQ3NzliY2E0
ODVhNjA2NzAeFw0yMDExMjgxMjQxMzVaFw0yMTExMjcxMjQ2MzVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDJEQjIxNDdEQTkzNkMyRUQz
NDhFRjRCODJEODkwNDVGRjAwNjU3RUU3RDM5MjI3NjhDQjAxNTA1Njk4RTlGRURB
MDJCMDJFNUZGRDEyOThEQUI3OTQ4RDM3QUEzNUY0MTRGNjc2RTAxMDFBQUZEMzUx
RUNBRjkzODNDMUNGQ0MxQTlGNURFMTFBRjgyMzUxMjVGN0M1ODlGMkQyOUY0RDFB
NTBGODA4NzgzRDg4RkM2RkUwOUQ1QzY2OUNGM0YzNzE5MkQ3MjFCRUI3MDUyNjc3
NjI2MjRERjk2NzA2MTk4OThFMDNBRTAyOEMxODJFN0Q1MDM1NENDRDk4NkNBQzE5
NzY2QTE1RkVFNzZCREIyOUMyNDVGMkRDN0IzRDJGMjhFMTZDQUFDRUEzQTg0QjY4
QzAwRUFCMTY3NDBDQ0QwQzMxRkM1RDRDQTM1QTcyQTA0ODU5N0Q4MzYyMzQwMjcw
QjRCOTczMkI4RjA0OThGOEM4NjQwMjE5NUQxMkQ1MzI4OUUxQUNEQUU0RjhGQTRG
MDJCOUI0ODY1NjExN0ZGMjBDMEVDOTU0QUY2QjYxNUIyQTUwNEU2RDY2MzBEMEU1
MTYyMUU5NThBRTk4OTczMDg3N0NBQzlDM0FCNTA1OUYzQ0UxN0MxMUUzQUUyOTYw
QkEyQjY2NDI5M0Q5OEIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0tshR9qTbC7TSO9LgtiQRf8AZX7n05InaMsBUFaY6f7aArAuX/0S
mNq3lI03qjX0FPZ24BAar9NR7K+Tg8HPzBqfXeEa+CNRJffFifLSn00aUPgIeD2I
/G/gnVxmnPPzcZLXIb63BSZ3YmJN+WcGGYmOA64CjBgufVA1TM2YbKwZdmoV/udr
2ynCRfLcez0vKOFsqs6jqEtowA6rFnQMzQwx/F1Mo1pyoEhZfYNiNAJwtLlzK48E
mPjIZAIZXRLVMonhrNrk+PpPArm0hlYRf/IMDslUr2thWypQTm1mMNDlFiHpWK6Y
lzCHfKycOrUFnzzhfBHjrilguitmQpPZiwIDAQABo4IB7zCCAeswHQYDVR0OBBYE
FG1z9j1x2zGc5Um9yEgqls9XjZ0uMB8GA1UdIwQYMBaAFIAA4vCdK92b7p1GlOR3
m8pIWmBnMA4GA1UdDwEB/wQEAwIHgDBwBgNVHR8EaTBnMGWgY6Bhhl9yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xMy84MDAw
RTJGMDlEMkJERDlCRUU5RDQ2OTRFNDc3OUJDQTQ4NUE2MDY3LmNybDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0FEaThKMHIzWnZ1blVhVTVIZWJ5a2hhWUdjLmNlcjCB
hQYIKwYBBQUHAQsEeTB3MHUGCCsGAQUFBzALhmlyc3luYzovL3Jwa2kxLnRlcnJh
dHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xMy8zNDM1MmUzMTMzMmUzNTM2
MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS0N
ODANBgkqhkiG9w0BAQsFAAOCAQEApfZvpwaHkLMTgQ1H69/s2LHQLptOwiEKl7wG
Z0UEPJqq9pvK/oSRmhxzQP38cc8MkSIX62wgYVGZ89DXdMzrUwPTNQlmEjRDLnjk
JAjISoQLvqPJA8j44seDPC4eG+VjsNRY3p07YZipiJdi0EjrEHZmsXWY3K8AMP8e
oe00aMz7xPcuN6+x8AbLV740AGdou7vPQFlAn64TcVWRzM9fmoTPj7g0l1rOIPJc
kIkYdBtZA7VBPvDyMWIbSzbNhasYrCGJHcXSuar9sgVcQ2NxyKRef/3+h020FZZA
ddV5fplfC5C4bZB4zrghpjJ9QObJJftl0xiKni2Nu8NM9nuqmA==
-----END CERTIFICATE-----