Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/32/34352e3133322e3135382e302f32342d3234203d3e20323037313839.roa
File:                     34352e3133322e3135382e302f32342d3234203d3e20323037313839.roa (raw, json)
Hash identifier:          Y8nHe2fw/MvArCe9Kc1HSeSixPsodmzoJm/sfKQxy10=
Subject key identifier:   B1:05:0C:4B:FE:00:2A:B2:43:1C:6F:06:B0:80:B6:44:CC:CE:71:25
Certificate issuer:       /CN=54f5873c142ab7b29dc4fd7fe7a23a384394c7b1
Certificate serial:       5B106821F55C27B0E9E35BCF25E1263EFBEA557F
Authority key identifier: 54:F5:87:3C:14:2A:B7:B2:9D:C4:FD:7F:E7:A2:3A:38:43:94:C7:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VPWHPBQqt7KdxP1_56I6OEOUx7E.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/32/34352e3133322e3135382e302f32342d3234203d3e20323037313839.roa
Signing time:             Mon 30 Nov 2020 19:13:12 +0000
ROA not before:           Mon 30 Nov 2020 19:08:12 +0000
ROA not after:            Mon 29 Nov 2021 19:13:12 +0000
asID:                     207189
IP address blocks:        45.132.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:10:68:21:f5:5c:27:b0:e9:e3:5b:cf:25:e1:26:3e:fb:ea:55:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54f5873c142ab7b29dc4fd7fe7a23a384394c7b1
        Validity
            Not Before: Nov 30 19:08:12 2020 GMT
            Not After : Nov 29 19:13:12 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6d:29:cc:87:0b:9c:0c:29:20:70:bb:53:35:
                    88:57:3a:5d:59:d1:cf:9c:58:34:23:9b:a1:ac:2a:
                    fe:d0:74:6e:5d:9f:c4:2c:9a:69:65:03:ff:9e:d3:
                    3a:64:72:33:e0:2d:b8:5c:17:72:22:55:27:4f:aa:
                    67:e8:30:df:6b:a0:1f:8b:de:fb:c8:95:f1:ce:7b:
                    07:c3:e4:0e:eb:b2:5d:50:29:4e:ae:cc:62:07:1d:
                    df:e2:c3:e1:f8:43:97:bb:08:5d:9e:98:e3:30:07:
                    41:63:ca:94:24:93:3f:2b:0a:40:bd:3e:c8:e6:0c:
                    28:33:84:d9:aa:8a:1f:18:04:b3:06:48:c9:21:07:
                    7c:d0:c6:c5:d8:bd:65:cc:99:a6:3a:e6:37:b0:38:
                    e5:5e:9c:80:3e:48:b6:cb:25:08:3b:f4:ec:b5:e0:
                    a6:b0:36:df:13:a7:df:e1:39:7d:68:0f:8d:35:3a:
                    62:a9:e6:06:cc:9c:ea:43:11:13:61:fb:6d:09:3f:
                    50:95:4a:6e:cc:6c:cf:4e:46:d0:78:b7:8e:87:48:
                    8f:0c:87:56:8e:af:e2:99:b7:ff:18:41:ee:60:18:
                    44:6d:8f:e0:b2:db:48:fd:3a:4d:cd:83:d8:2f:8b:
                    45:ab:fb:17:2b:f9:39:07:3a:7b:1b:92:f0:4d:8b:
                    b5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:05:0C:4B:FE:00:2A:B2:43:1C:6F:06:B0:80:B6:44:CC:CE:71:25
            X509v3 Authority Key Identifier:
                keyid:54:F5:87:3C:14:2A:B7:B2:9D:C4:FD:7F:E7:A2:3A:38:43:94:C7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/32/54F5873C142AB7B29DC4FD7FE7A23A384394C7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPWHPBQqt7KdxP1_56I6OEOUx7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/32/34352e3133322e3135382e302f32342d3234203d3e20323037313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:47:95:45:0b:99:e8:e9:5a:27:4c:16:d3:86:e7:08:58:df:
         48:0f:cc:80:a9:0b:6b:42:df:fd:67:f3:af:eb:01:c9:b5:e6:
         e0:30:d6:94:0b:d9:a6:f2:33:27:61:f6:2e:f9:ab:60:78:a2:
         07:c7:84:cc:cf:22:ac:2a:a4:73:81:d0:83:f4:91:5a:38:f2:
         77:9b:bb:f4:53:7d:03:bd:88:08:f7:5c:7a:f9:fe:44:93:eb:
         23:b8:3b:ac:4b:b9:34:3b:4a:1e:97:00:72:45:b0:02:99:d9:
         77:e1:6c:6f:26:30:48:65:c2:72:5d:87:21:07:a4:51:9c:7c:
         16:4f:2c:e3:5e:87:ac:3c:ed:8a:5e:16:8d:19:f4:9f:6f:03:
         e9:d0:d6:1f:ef:05:a9:c6:41:89:3c:54:7a:91:0c:ac:38:25:
         2b:b1:e7:1d:69:45:32:31:90:f6:de:7b:bc:be:49:15:50:e6:
         36:98:2e:7a:98:45:f9:27:28:7e:09:d4:ce:a9:19:8e:88:ec:
         da:45:75:45:14:7f:62:e4:5e:37:ee:5e:4b:9f:64:a2:03:56:
         b0:92:83:7e:32:34:73:8b:d1:30:97:d4:16:7b:fb:7f:8f:d6:
         a4:3a:36:2a:b5:b3:2d:92:92:cb:bc:11:ac:7d:fc:5e:5f:80:
         75:a2:bd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----