Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/25/34352e36372e3232322e302f32342d3234203d3e203631333137.roa
File:                     34352e36372e3232322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          kJDPuYJo9X8y3JtSzkaHJECmTp/LMGcm6benPv6uFXI=
Subject key identifier:   1B:F3:74:D9:F6:BB:14:C0:1A:07:80:40:41:9B:C9:50:2D:99:B4:0E
Certificate issuer:       /CN=852a307c4e0a2a4e7e38aa5164d4bc5cdb7cca49
Certificate serial:       75014955BAC5E6EE064474A8326F97B7D3B114C5
Authority key identifier: 85:2A:30:7C:4E:0A:2A:4E:7E:38:AA:51:64:D4:BC:5C:DB:7C:CA:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hSowfE4KKk5-OKpRZNS8XNt8ykk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/25/34352e36372e3232322e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 30 Nov 2020 18:20:03 +0000
ROA not before:           Mon 30 Nov 2020 18:15:03 +0000
ROA not after:            Mon 29 Nov 2021 18:20:03 +0000
asID:                     61317
IP address blocks:        45.67.222.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:01:49:55:ba:c5:e6:ee:06:44:74:a8:32:6f:97:b7:d3:b1:14:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=852a307c4e0a2a4e7e38aa5164d4bc5cdb7cca49
        Validity
            Not Before: Nov 30 18:15:03 2020 GMT
            Not After : Nov 29 18:20:03 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5c:4c:c3:d2:53:e5:5a:ff:af:6d:a4:41:cd:
                    99:5a:b9:1d:ac:96:a7:08:49:de:a5:fa:94:bf:9a:
                    ed:2a:ba:5c:56:67:81:f5:fe:22:54:c8:84:74:a3:
                    b4:ed:68:64:0e:3a:6a:79:84:89:31:d6:1f:54:a1:
                    a8:03:76:06:99:bc:a8:4f:f6:1b:a5:02:d1:6b:6b:
                    97:30:eb:d3:80:ab:c8:bb:a5:f3:54:df:0b:0f:6a:
                    30:29:a1:69:69:97:48:ab:d5:1c:70:b8:a8:25:f3:
                    92:e4:d5:4a:ae:f6:36:d2:6e:e0:08:2a:ed:be:6c:
                    25:dd:4a:e7:80:88:7f:ec:e3:83:55:5c:07:23:b0:
                    93:95:22:b6:00:cd:97:46:96:9c:56:a6:be:4c:b1:
                    db:4f:89:2a:6b:69:91:f3:78:7a:2a:09:36:1f:85:
                    41:1a:38:7d:fc:77:b3:a3:4b:07:9f:69:9e:f6:cb:
                    9e:cf:3d:c4:33:e4:39:f2:33:f5:f1:68:bf:1c:0c:
                    a3:64:49:e9:9a:c6:12:b6:5f:09:50:4c:11:29:d0:
                    18:22:39:56:e4:6a:da:0c:7f:30:86:e4:05:8b:ad:
                    e3:3e:bc:db:18:ed:05:f1:d3:84:94:13:17:7d:48:
                    a2:4a:67:7f:80:80:ca:e5:1e:a8:ea:fd:34:51:c5:
                    df:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F3:74:D9:F6:BB:14:C0:1A:07:80:40:41:9B:C9:50:2D:99:B4:0E
            X509v3 Authority Key Identifier:
                keyid:85:2A:30:7C:4E:0A:2A:4E:7E:38:AA:51:64:D4:BC:5C:DB:7C:CA:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/25/852A307C4E0A2A4E7E38AA5164D4BC5CDB7CCA49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSowfE4KKk5-OKpRZNS8XNt8ykk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/25/34352e36372e3232322e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.67.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:ca:a0:e6:9d:0b:50:b8:37:92:87:82:39:93:37:4a:e9:f6:
         da:32:aa:dd:b5:86:0a:e1:42:df:03:eb:3e:da:ff:1f:eb:98:
         ed:0f:b7:9f:0c:21:52:b0:af:f0:18:ce:e4:d0:f9:3f:53:65:
         2f:e6:62:bf:ff:9a:95:68:af:a5:c6:cf:6d:4d:ee:3b:62:e9:
         d7:9b:88:3f:64:65:ee:8c:69:99:56:be:76:01:86:42:68:ba:
         b6:60:bf:62:e5:7a:b9:05:a0:37:2c:8c:1a:87:0b:ec:3a:c4:
         ed:79:75:61:08:eb:d0:0e:90:78:e6:0e:79:49:59:4b:56:ef:
         b1:ce:c3:9c:03:a4:90:b8:5e:42:36:0e:4f:e2:28:6f:3d:88:
         b7:55:c5:26:31:57:20:e3:bf:28:4b:79:1a:b8:74:72:89:c3:
         25:d5:5b:d2:76:11:74:a2:f4:23:f2:eb:c4:63:eb:53:68:c4:
         48:b5:8a:f1:da:bb:1a:f3:46:39:af:d8:4b:22:28:68:c5:ac:
         1f:a9:58:31:18:a5:1a:7a:64:a1:8a:5e:fa:c3:6d:4b:32:25:
         d6:5f:9d:57:0c:62:13:23:6a:8f:9d:15:02:9c:cf:70:13:20:
         8a:3f:f9:0f:f8:08:c8:d5:ef:b3:c6:40:8b:d3:a0:42:d9:60:
         e6:81:2c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----