Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/166/34352e39342e35372e302f32342d3234203d3e203233343730.roa
File:                     34352e39342e35372e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          YR1BxkHDxyPeUl3mYt9FuA6YG2vyobVQUwe8V/ltJvw=
Subject key identifier:   92:2D:F7:E8:CB:18:A0:D5:A1:74:1E:36:96:F8:5F:C2:A6:A4:49:C0
Certificate issuer:       /CN=37e4374c116e3e8adf1985a19577cbca011a9695
Certificate serial:       56BF120D90AD09302EB4041E044C9C629394A50C
Authority key identifier: 37:E4:37:4C:11:6E:3E:8A:DF:19:85:A1:95:77:CB:CA:01:1A:96:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N-Q3TBFuPorfGYWhlXfLygEalpU.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/166/34352e39342e35372e302f32342d3234203d3e203233343730.roa
Signing time:             Sun 17 Jan 2021 18:43:10 +0000
ROA not before:           Sun 17 Jan 2021 18:38:10 +0000
ROA not after:            Sun 16 Jan 2022 18:43:10 +0000
asID:                     23470
IP address blocks:        45.94.57.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:bf:12:0d:90:ad:09:30:2e:b4:04:1e:04:4c:9c:62:93:94:a5:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37e4374c116e3e8adf1985a19577cbca011a9695
        Validity
            Not Before: Jan 17 18:38:10 2021 GMT
            Not After : Jan 16 18:43:10 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c6:77:6c:19:51:1e:97:d5:05:f2:26:30:f1:
                    4e:d9:ba:ca:ba:58:87:66:eb:8e:e7:1d:1b:f4:b7:
                    1e:60:7b:6d:69:7c:fb:ff:7c:bb:3d:1a:8b:76:b2:
                    fb:0d:5a:14:7f:0f:f9:01:3b:a8:a9:ac:46:37:7a:
                    66:24:39:8e:0f:53:5f:30:bd:eb:bf:18:3b:09:70:
                    6a:21:b7:c4:d2:2f:62:27:da:1d:e0:1f:01:b5:b6:
                    7b:aa:af:20:45:23:66:98:50:d1:19:fc:4a:0e:32:
                    39:43:de:7c:1a:f7:5b:f0:b0:eb:89:11:a6:7e:9c:
                    b8:61:9d:d0:f5:81:88:7c:50:25:8d:ec:5e:44:ee:
                    ea:1d:11:01:15:6c:0e:ea:50:e9:12:15:86:de:00:
                    c1:81:83:ab:39:ad:88:b0:90:ca:99:77:3a:2b:b7:
                    40:ba:37:41:53:12:a0:77:ae:70:e3:6e:31:64:be:
                    1f:33:64:3a:5f:01:13:24:c0:e0:a1:37:35:24:ff:
                    af:0c:ae:8a:bb:fb:99:cc:31:36:58:aa:1c:10:bf:
                    2c:ca:36:fb:03:fb:c3:99:27:92:28:fc:46:ea:b2:
                    04:1d:5d:92:bc:6c:ae:62:8a:89:12:55:5e:9e:18:
                    e8:67:86:34:92:82:cd:ef:e0:03:74:07:a6:22:b2:
                    e1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:2D:F7:E8:CB:18:A0:D5:A1:74:1E:36:96:F8:5F:C2:A6:A4:49:C0
            X509v3 Authority Key Identifier:
                keyid:37:E4:37:4C:11:6E:3E:8A:DF:19:85:A1:95:77:CB:CA:01:1A:96:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/166/37E4374C116E3E8ADF1985A19577CBCA011A9695.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-Q3TBFuPorfGYWhlXfLygEalpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/166/34352e39342e35372e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.94.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:51:cc:78:51:f1:a0:d3:29:21:ff:a1:eb:a3:dd:65:19:f1:
         5a:fd:e5:49:63:2d:3f:df:0e:b7:83:26:28:27:5f:1b:bd:22:
         0a:c7:a5:87:27:cb:71:e9:60:d2:e9:83:6f:6d:93:ee:92:b5:
         d3:81:5c:f9:5a:bb:11:67:bf:3c:4b:8b:9c:ed:ed:ee:ae:ef:
         76:93:80:10:fd:5d:3d:58:82:52:a3:81:23:f2:d9:f2:e7:71:
         89:a9:82:f8:fc:22:28:d1:c2:c3:f0:6e:97:4f:6b:65:af:0d:
         3c:6a:c2:ad:94:3d:70:49:6d:06:09:8c:fa:1e:31:58:d6:a7:
         2d:6b:61:05:6f:1b:90:f1:33:aa:19:8a:fe:78:64:d1:20:a9:
         9e:48:27:e0:e3:44:1c:d0:f1:72:05:15:0d:5f:60:7b:d8:d5:
         d7:79:66:d0:33:d3:fe:6d:c2:d0:f3:d5:03:70:a7:85:92:c9:
         88:78:44:91:f6:15:9c:4a:72:c6:a7:24:c1:fc:65:3a:2f:80:
         78:d0:6f:f1:07:6a:f2:43:26:ba:15:3f:82:6e:62:0a:a9:52:
         7f:c4:78:4c:d0:7b:ee:60:57:9c:08:cc:e2:22:87:6c:cc:6b:
         0b:04:bb:78:da:09:6e:10:93:14:1e:33:ae:88:48:88:1b:27:
         3d:8c:48:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----