Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/32/34352e3133322e3135372e302f32342d3234203d3e20323037313839.roa
File:                     34352e3133322e3135372e302f32342d3234203d3e20323037313839.roa (raw, json)
Hash identifier:          4Vv6l1FtsUFaq/unSN4oCRYkTZLnSJi6Ty2Nrzgfuzs=
Subject key identifier:   3C:0F:C9:1A:AF:5A:33:E0:A0:63:3A:90:8D:67:60:5A:9F:FE:89:F1
Certificate issuer:       /CN=54f5873c142ab7b29dc4fd7fe7a23a384394c7b1
Certificate serial:       78F2BD31619BEF5808163B74FD134DCC7D85528F
Authority key identifier: 54:F5:87:3C:14:2A:B7:B2:9D:C4:FD:7F:E7:A2:3A:38:43:94:C7:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VPWHPBQqt7KdxP1_56I6OEOUx7E.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/32/34352e3133322e3135372e302f32342d3234203d3e20323037313839.roa
Signing time:             Mon 30 Nov 2020 19:13:12 +0000
ROA not before:           Mon 30 Nov 2020 19:08:12 +0000
ROA not after:            Mon 29 Nov 2021 19:13:12 +0000
asID:                     207189
IP address blocks:        45.132.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f2:bd:31:61:9b:ef:58:08:16:3b:74:fd:13:4d:cc:7d:85:52:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54f5873c142ab7b29dc4fd7fe7a23a384394c7b1
        Validity
            Not Before: Nov 30 19:08:12 2020 GMT
            Not After : Nov 29 19:13:12 2021 GMT
        Subject: CN=3082010A0282010100B6FE47441782E7B58DA468E9D891DDAE8AB7D6E3DC011D526F01BE2D4C9DC58F03C71179EAEB5AAAAA8510E65C5826F5DD2970C3F206D268ADC2975A64F769F9E983546B0C61424DE284598FBAF89AE41942CA929A8ED9281F8F1FD3B69CE627EF8DB9609805DC5983ACFAC320BA00A0E58A6ECE68D6BDF6A95CF05F9C16BB3AFD74600FB3EC00E32AD389BD2A6AC3509BBC1991D93F8D23F3196951694731D9011E9DE4FA2C28179FF6A74332131E95474070AB5027C07545E6E6EE827A3CFDE573C9BA9183924490213CE4B3448290F8B43D0724624E7FA83A22A8BE291A683D00761C658CF25BB5C121F992E9DD619855985130D0636035609E95157C00090203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fe:47:44:17:82:e7:b5:8d:a4:68:e9:d8:91:
                    dd:ae:8a:b7:d6:e3:dc:01:1d:52:6f:01:be:2d:4c:
                    9d:c5:8f:03:c7:11:79:ea:eb:5a:aa:aa:85:10:e6:
                    5c:58:26:f5:dd:29:70:c3:f2:06:d2:68:ad:c2:97:
                    5a:64:f7:69:f9:e9:83:54:6b:0c:61:42:4d:e2:84:
                    59:8f:ba:f8:9a:e4:19:42:ca:92:9a:8e:d9:28:1f:
                    8f:1f:d3:b6:9c:e6:27:ef:8d:b9:60:98:05:dc:59:
                    83:ac:fa:c3:20:ba:00:a0:e5:8a:6e:ce:68:d6:bd:
                    f6:a9:5c:f0:5f:9c:16:bb:3a:fd:74:60:0f:b3:ec:
                    00:e3:2a:d3:89:bd:2a:6a:c3:50:9b:bc:19:91:d9:
                    3f:8d:23:f3:19:69:51:69:47:31:d9:01:1e:9d:e4:
                    fa:2c:28:17:9f:f6:a7:43:32:13:1e:95:47:40:70:
                    ab:50:27:c0:75:45:e6:e6:ee:82:7a:3c:fd:e5:73:
                    c9:ba:91:83:92:44:90:21:3c:e4:b3:44:82:90:f8:
                    b4:3d:07:24:62:4e:7f:a8:3a:22:a8:be:29:1a:68:
                    3d:00:76:1c:65:8c:f2:5b:b5:c1:21:f9:92:e9:dd:
                    61:98:55:98:51:30:d0:63:60:35:60:9e:95:15:7c:
                    00:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:0F:C9:1A:AF:5A:33:E0:A0:63:3A:90:8D:67:60:5A:9F:FE:89:F1
            X509v3 Authority Key Identifier:
                keyid:54:F5:87:3C:14:2A:B7:B2:9D:C4:FD:7F:E7:A2:3A:38:43:94:C7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/32/54F5873C142AB7B29DC4FD7FE7A23A384394C7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPWHPBQqt7KdxP1_56I6OEOUx7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/32/34352e3133322e3135372e302f32342d3234203d3e20323037313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:7c:20:f3:37:0e:25:71:81:85:c5:1d:a8:d6:41:73:0e:df:
         08:2d:87:96:87:ad:ac:cc:21:e2:20:bd:11:e7:06:31:5c:4f:
         76:04:96:e3:a2:e7:a6:88:24:d4:6c:0b:15:23:a0:e2:46:09:
         b9:9e:ae:fa:b0:5b:72:d4:17:35:a4:5c:91:aa:9f:20:92:e3:
         f2:21:bb:88:65:23:ea:b7:b0:68:a2:ae:70:05:54:75:14:66:
         60:cb:c7:42:48:fd:45:f7:3b:1b:91:3a:0c:53:7f:7e:d1:d0:
         3c:e0:6c:a8:e4:67:90:8b:6d:02:b2:6f:d6:08:f4:1a:c1:02:
         79:2e:35:16:19:b5:6e:fc:cb:c4:02:dc:bb:f6:a9:01:f7:ab:
         e4:19:a2:f1:69:e2:11:c6:6d:8b:d8:d2:b6:76:19:a4:d8:ca:
         79:3b:5e:48:a1:6a:7c:20:b3:6a:59:f0:20:f5:9f:ca:40:e2:
         95:ed:02:8b:d3:86:9a:9f:a2:d3:09:7b:87:49:e3:c8:d6:52:
         7c:c4:f9:39:b9:39:b2:2b:21:2a:92:33:a6:25:8b:df:b2:c8:
         68:21:cf:91:a6:41:2b:d7:9a:fc:fa:3d:6c:0b:e1:d1:21:59:
         ef:da:fc:22:92:20:c1:9a:30:8c:79:43:31:dc:d9:06:73:34:
         c6:14:6a:2f
-----BEGIN CERTIFICATE-----
MIIG5zCCBc+gAwIBAgIUePK9MWGb71gIFjt0/RNNzH2FUo8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRmNTg3M2MxNDJhYjdiMjlkYzRmZDdmZTdhMjNhMzg0
Mzk0YzdiMTAeFw0yMDExMzAxOTA4MTJaFw0yMTExMjkxOTEzMTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjZGRTQ3NDQxNzgyRTdCNThE
QTQ2OEU5RDg5MUREQUU4QUI3RDZFM0RDMDExRDUyNkYwMUJFMkQ0QzlEQzU4RjAz
QzcxMTc5RUFFQjVBQUFBQTg1MTBFNjVDNTgyNkY1REQyOTcwQzNGMjA2RDI2OEFE
QzI5NzVBNjRGNzY5RjlFOTgzNTQ2QjBDNjE0MjRERTI4NDU5OEZCQUY4OUFFNDE5
NDJDQTkyOUE4RUQ5MjgxRjhGMUZEM0I2OUNFNjI3RUY4REI5NjA5ODA1REM1OTgz
QUNGQUMzMjBCQTAwQTBFNThBNkVDRTY4RDZCREY2QTk1Q0YwNUY5QzE2QkIzQUZE
NzQ2MDBGQjNFQzAwRTMyQUQzODlCRDJBNkFDMzUwOUJCQzE5OTFEOTNGOEQyM0Yz
MTk2OTUxNjk0NzMxRDkwMTFFOURFNEZBMkMyODE3OUZGNkE3NDMzMjEzMUU5NTQ3
NDA3MEFCNTAyN0MwNzU0NUU2RTZFRTgyN0EzQ0ZERTU3M0M5QkE5MTgzOTI0NDkw
MjEzQ0U0QjM0NDgyOTBGOEI0M0QwNzI0NjI0RTdGQTgzQTIyQThCRTI5MUE2ODNE
MDA3NjFDNjU4Q0YyNUJCNUMxMjFGOTkyRTlERDYxOTg1NTk4NTEzMEQwNjM2MDM1
NjA5RTk1MTU3QzAwMDkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtv5HRBeC57WNpGjp2JHdroq31uPcAR1SbwG+LUydxY8DxxF56uta
qqqFEOZcWCb13Slww/IG0mitwpdaZPdp+emDVGsMYUJN4oRZj7r4muQZQsqSmo7Z
KB+PH9O2nOYn7425YJgF3FmDrPrDILoAoOWKbs5o1r32qVzwX5wWuzr9dGAPs+wA
4yrTib0qasNQm7wZkdk/jSPzGWlRaUcx2QEeneT6LCgXn/anQzITHpVHQHCrUCfA
dUXm5u6Cejz95XPJupGDkkSQITzks0SCkPi0PQckYk5/qDoiqL4pGmg9AHYcZYzy
W7XBIfmS6d1hmFWYUTDQY2A1YJ6VFXwACQIDAQABo4IB9TCCAfEwHQYDVR0OBBYE
FDwPyRqvWjPgoGM6kI1nYFqf/onxMB8GA1UdIwQYMBaAFFT1hzwUKreyncT9f+ei
OjhDlMexMA4GA1UdDwEB/wQEAwIHgDBwBgNVHR8EaTBnMGWgY6Bhhl9yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8zMi81NEY1
ODczQzE0MkFCN0IyOURDNEZEN0ZFN0EyM0EzODQzOTRDN0IxLmNybDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlBXSFBCUXF0N0tkeFAxXzU2STZPRU9VeDdFLmNlcjCB
iwYIKwYBBQUHAQsEfzB9MHsGCCsGAQUFBzALhm9yc3luYzovL3Jwa2kxLnRlcnJh
dHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8zMi8zNDM1MmUzMTMzMzIyZTMx
MzUzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNzMxMzgzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAC2EnTANBgkqhkiG9w0BAQsFAAOCAQEAdnwg8zcOJXGBhcUdqNZBcw7fCC2H
loetrMwh4iC9EecGMVxPdgSW46Lnpogk1GwLFSOg4kYJuZ6u+rBbctQXNaRckaqf
IJLj8iG7iGUj6rewaKKucAVUdRRmYMvHQkj9Rfc7G5E6DFN/ftHQPOBsqORnkItt
ArJv1gj0GsECeS41Fhm1bvzLxALcu/apAfer5Bmi8WniEcZti9jStnYZpNjKeTte
SKFqfCCzalnwIPWfykDile0Ci9OGmp+i0wl7h0njyNZSfMT5Obk5sishKpIzpiWL
37LIaCHPkaZBK9ea/Po9bAvh0SFZ79r8IpIgwZowjHlDMdzZBnM0xhRqLw==
-----END CERTIFICATE-----