Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/27/34352e382e3134382e302f32332d3234203d3e203631333137.roa
File:                     34352e382e3134382e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          Aoxypm8n1oy1b0Rqnxj+p9Erto9s7TtAOblXHtKmmU8=
Subject key identifier:   10:F3:CB:9F:DB:F4:64:C1:2C:67:A9:86:61:93:10:FC:61:C5:55:5F
Certificate issuer:       /CN=00de5a79794df58205a4c7ab118447e34a5d743c
Certificate serial:       1722DC809CB48189CA32EF0AD76B9A3B196EDBA7
Authority key identifier: 00:DE:5A:79:79:4D:F5:82:05:A4:C7:AB:11:84:47:E3:4A:5D:74:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AN5aeXlN9YIFpMerEYRH40pddDw.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/27/34352e382e3134382e302f32332d3234203d3e203631333137.roa
Signing time:             Mon 30 Nov 2020 19:11:36 +0000
ROA not before:           Mon 30 Nov 2020 19:06:36 +0000
ROA not after:            Mon 29 Nov 2021 19:11:36 +0000
asID:                     61317
IP address blocks:        45.8.148.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:22:dc:80:9c:b4:81:89:ca:32:ef:0a:d7:6b:9a:3b:19:6e:db:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00de5a79794df58205a4c7ab118447e34a5d743c
        Validity
            Not Before: Nov 30 19:06:36 2020 GMT
            Not After : Nov 29 19:11:36 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:22:0e:25:d0:e7:54:e6:82:93:a1:33:06:cd:
                    cc:e7:09:3f:2e:1d:81:67:92:2c:ff:12:72:9e:0f:
                    0d:68:ee:20:ea:02:3d:db:d1:a8:6c:70:44:46:17:
                    07:c2:ac:02:4e:2d:30:e0:b6:1f:b6:ab:64:05:34:
                    bb:34:6d:35:29:ba:d7:ee:da:5a:c3:24:b2:fe:18:
                    53:5a:18:7e:c0:11:1b:4e:81:a9:c3:b5:78:77:b9:
                    50:61:49:10:e3:99:d5:65:dd:47:ad:78:5a:50:46:
                    d7:34:a0:99:07:65:14:34:bc:16:9e:9f:59:8f:3b:
                    8e:1c:f8:fa:3f:47:f5:c7:e6:f8:28:59:75:d2:ac:
                    e9:9c:48:8e:1f:0c:2d:61:a5:a9:5b:6a:0b:95:8b:
                    fd:36:d6:8d:ef:c2:5e:79:0c:11:b9:86:30:5c:53:
                    32:f3:04:85:80:42:a4:88:dd:ee:d8:65:ae:68:b1:
                    4c:f4:37:01:82:dd:bf:e1:d1:70:52:ed:31:88:86:
                    f5:be:17:57:dd:13:a1:48:e6:92:eb:f0:50:ec:d6:
                    a1:ef:f6:fd:22:38:86:73:e5:a1:8e:56:c2:38:e0:
                    bc:3e:d3:30:bc:a4:34:10:b1:96:02:c7:eb:e0:8a:
                    6b:bb:d6:3e:34:80:4b:18:ab:08:21:48:55:51:6a:
                    87:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F3:CB:9F:DB:F4:64:C1:2C:67:A9:86:61:93:10:FC:61:C5:55:5F
            X509v3 Authority Key Identifier:
                keyid:00:DE:5A:79:79:4D:F5:82:05:A4:C7:AB:11:84:47:E3:4A:5D:74:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/27/00DE5A79794DF58205A4C7AB118447E34A5D743C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AN5aeXlN9YIFpMerEYRH40pddDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/27/34352e382e3134382e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:0b:f6:0e:3a:61:03:d9:52:5e:e2:9c:27:e4:25:4a:ee:38:
         04:25:2c:09:f0:14:61:7c:b4:fe:00:f6:5e:38:ad:e9:2a:3a:
         47:f2:b2:0c:e1:bc:2c:70:a0:cf:c0:fb:65:ea:e3:e9:88:b1:
         78:63:ee:e3:72:f2:a5:51:e6:ae:a5:e6:c7:a4:3d:8b:c8:24:
         09:34:24:5a:27:bb:5b:88:e4:e5:b1:1c:62:f5:42:7d:2e:74:
         c9:3c:5f:0c:42:61:0f:35:4b:a9:98:f2:22:c9:c7:4e:23:b1:
         40:ab:bb:ea:c3:94:dc:46:6d:bb:8d:ba:e6:28:30:08:ed:dc:
         42:e5:3f:9e:de:ea:26:cb:a9:86:ff:dc:d0:8e:ff:f3:10:aa:
         10:58:cc:c7:d3:5d:e8:c2:e4:c4:b0:ab:cf:67:5c:eb:e2:ee:
         4e:d3:83:81:59:21:f7:57:06:d6:7e:38:56:78:25:f7:ce:97:
         07:fe:9b:a5:40:04:62:f4:33:45:e8:ef:34:26:20:3a:11:a3:
         5b:a1:1a:12:d4:24:a7:ad:f0:05:92:84:71:98:75:64:fc:bd:
         de:5b:ec:5f:65:ca:67:38:48:f5:3a:7f:88:d5:a0:2a:d4:ae:
         e7:1a:1b:61:0b:6e:62:10:a9:07:08:ec:6c:0a:33:7d:04:21:
         1a:28:7f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----