Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/25/34352e36372e3232312e302f32342d3234203d3e20323132373836.roa
File:                     34352e36372e3232312e302f32342d3234203d3e20323132373836.roa (raw, json)
Hash identifier:          ufqb+t0DDwVXJUUt2ltF17vEpoHx997xoyEi9oXVfPY=
Subject key identifier:   57:51:E1:0E:51:69:A6:B0:1E:5D:D9:C7:D4:3F:7D:BC:52:57:35:88
Certificate issuer:       /CN=852a307c4e0a2a4e7e38aa5164d4bc5cdb7cca49
Certificate serial:       1C400F6C303E365720C456385A9A42FCF8969F11
Authority key identifier: 85:2A:30:7C:4E:0A:2A:4E:7E:38:AA:51:64:D4:BC:5C:DB:7C:CA:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hSowfE4KKk5-OKpRZNS8XNt8ykk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/25/34352e36372e3232312e302f32342d3234203d3e20323132373836.roa
Signing time:             Tue 23 Feb 2021 09:41:25 +0000
ROA not before:           Tue 23 Feb 2021 09:36:25 +0000
ROA not after:            Tue 22 Feb 2022 09:41:25 +0000
asID:                     212786
IP address blocks:        45.67.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:40:0f:6c:30:3e:36:57:20:c4:56:38:5a:9a:42:fc:f8:96:9f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=852a307c4e0a2a4e7e38aa5164d4bc5cdb7cca49
        Validity
            Not Before: Feb 23 09:36:25 2021 GMT
            Not After : Feb 22 09:41:25 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c7:3f:71:3a:15:3a:90:e9:d0:a5:14:ff:aa:
                    45:74:20:e7:11:c9:b9:4f:f8:dd:ac:81:d5:81:9e:
                    aa:77:a8:a4:91:b7:1b:ff:70:5c:9d:67:93:ab:94:
                    0a:23:b0:66:c8:b9:38:f6:89:67:0e:2f:69:2d:f6:
                    9a:5b:45:f2:f8:9d:8e:3b:fa:b2:d0:ea:34:83:3b:
                    3a:17:d8:8d:c7:1b:a8:af:8b:c9:ae:83:db:ac:8a:
                    9a:11:2a:fc:ac:2b:61:5e:fb:04:36:23:cc:8e:f8:
                    16:60:4d:b1:65:10:5c:44:b2:27:b0:51:70:97:36:
                    cf:e0:66:49:2d:41:9f:42:e2:57:52:61:a1:f0:f6:
                    4a:36:af:e5:d2:a2:59:59:6e:62:5f:69:43:30:e1:
                    83:09:ac:ca:49:bf:6c:57:b4:42:0b:15:01:c1:28:
                    3d:58:54:ca:44:42:d4:8e:5b:22:8a:09:28:22:44:
                    ae:5a:cf:b6:5a:64:3c:b6:bd:6d:f4:68:e8:f4:e5:
                    7f:de:91:06:31:74:0d:65:1e:a9:fc:a1:86:39:2d:
                    1f:ba:aa:24:2c:f7:fc:1c:c1:7c:09:fd:40:fa:83:
                    81:18:8d:6d:74:7d:5e:8b:48:62:da:c8:83:1f:1b:
                    f7:a2:6b:bf:92:7d:cd:bc:5f:99:18:ec:d7:0b:2e:
                    95:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:51:E1:0E:51:69:A6:B0:1E:5D:D9:C7:D4:3F:7D:BC:52:57:35:88
            X509v3 Authority Key Identifier:
                keyid:85:2A:30:7C:4E:0A:2A:4E:7E:38:AA:51:64:D4:BC:5C:DB:7C:CA:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/25/852A307C4E0A2A4E7E38AA5164D4BC5CDB7CCA49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSowfE4KKk5-OKpRZNS8XNt8ykk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/25/34352e36372e3232312e302f32342d3234203d3e20323132373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.67.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:0b:38:87:be:27:ff:39:f9:6a:73:6e:5b:5b:a0:73:4b:a5:
         00:7d:d4:bc:73:4d:a4:28:9b:92:f4:41:3d:4e:71:c7:89:b7:
         9a:f4:31:43:63:9d:f7:42:e2:83:d8:24:5e:11:d5:68:7f:d2:
         0a:31:fe:82:d8:6a:21:3e:08:ba:19:3f:cf:e2:e7:77:87:a9:
         30:fc:c5:48:4d:69:ce:62:74:e8:65:3e:87:38:07:03:bc:25:
         7f:fd:9d:0f:e7:5e:ee:b4:4a:e6:ed:1e:75:4e:83:d6:d5:c0:
         ee:ac:35:78:6b:7f:5c:4e:6d:e0:2d:06:4c:8d:b0:f6:25:ef:
         e4:fb:81:14:c1:14:fb:96:48:72:da:6f:f5:d7:bd:59:60:73:
         e5:ec:29:a4:8c:0a:b5:2f:f9:88:77:b0:39:5c:88:8d:3b:d2:
         86:d0:9f:10:f0:02:60:cd:48:a3:c2:23:b7:c4:2f:16:9f:38:
         59:ff:9d:c8:c0:bf:6e:61:d3:ad:14:9b:c2:97:84:0e:12:62:
         fe:ba:a9:5a:b0:3a:da:b0:af:d7:53:41:42:9b:7f:4b:82:14:
         6c:e9:a6:f2:c5:55:14:27:d8:88:b3:8a:c5:f6:d0:ea:b4:f7:
         fc:a4:63:cb:9d:53:7f:7e:e5:20:a9:51:b2:4a:b6:d6:42:6f:
         55:5f:b9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----