Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/32/34352e3133322e3135382e302f32342d3234203d3e20323133303336.roa
File:                     34352e3133322e3135382e302f32342d3234203d3e20323133303336.roa (raw, json)
Hash identifier:          ZfOnBRF0/OcVlfW9RkmcMjzpGxCtGwvBSsWYzok47Rk=
Subject key identifier:   FB:52:A7:1C:79:4E:D9:CA:9B:82:F4:D9:C6:0F:7F:C7:83:00:51:BA
Certificate issuer:       /CN=54f5873c142ab7b29dc4fd7fe7a23a384394c7b1
Certificate serial:       4BE3D7336F51B347EE3C0E2F06355A8F2394129D
Authority key identifier: 54:F5:87:3C:14:2A:B7:B2:9D:C4:FD:7F:E7:A2:3A:38:43:94:C7:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VPWHPBQqt7KdxP1_56I6OEOUx7E.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/32/34352e3133322e3135382e302f32342d3234203d3e20323133303336.roa
Signing time:             Mon 30 Nov 2020 19:13:12 +0000
ROA not before:           Mon 30 Nov 2020 19:08:12 +0000
ROA not after:            Mon 29 Nov 2021 19:13:12 +0000
asID:                     213036
IP address blocks:        45.132.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e3:d7:33:6f:51:b3:47:ee:3c:0e:2f:06:35:5a:8f:23:94:12:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54f5873c142ab7b29dc4fd7fe7a23a384394c7b1
        Validity
            Not Before: Nov 30 19:08:12 2020 GMT
            Not After : Nov 29 19:13:12 2021 GMT
        Subject: CN=3082010A0282010100D119385FA9099BDFE3609F8F221D4851864DBB59640AAF0853EE5454E34EBA0CACBAF669F0A2A072ABCF7617C33ADA2DF6DA0B05E045611FCBE2F889AD4E5C803D41CCB0C0A1D1F63AB17B37F6F1069A8868C8477357284102EDA21640042226E38B12F0FEC5495923643CCB96117E26A98E048856FCCC3D936E549AF61CF22835D976045536067080585F0F8F87693390B0614DAEB35548C481C923E144CE68403AD40DC881EAD4629E783380DEB4DF65CC47C0DA69FE0088D641F6CE9160E5A10AA7201323BCFFFD03ABF9C912FDC7093EDB47EC00EBFC37CED4F514A1F97135CD0199554ACF5427581DEEF91F387D5928A5090EE0FAF2FD604EE9BA516C670203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:19:38:5f:a9:09:9b:df:e3:60:9f:8f:22:1d:
                    48:51:86:4d:bb:59:64:0a:af:08:53:ee:54:54:e3:
                    4e:ba:0c:ac:ba:f6:69:f0:a2:a0:72:ab:cf:76:17:
                    c3:3a:da:2d:f6:da:0b:05:e0:45:61:1f:cb:e2:f8:
                    89:ad:4e:5c:80:3d:41:cc:b0:c0:a1:d1:f6:3a:b1:
                    7b:37:f6:f1:06:9a:88:68:c8:47:73:57:28:41:02:
                    ed:a2:16:40:04:22:26:e3:8b:12:f0:fe:c5:49:59:
                    23:64:3c:cb:96:11:7e:26:a9:8e:04:88:56:fc:cc:
                    3d:93:6e:54:9a:f6:1c:f2:28:35:d9:76:04:55:36:
                    06:70:80:58:5f:0f:8f:87:69:33:90:b0:61:4d:ae:
                    b3:55:48:c4:81:c9:23:e1:44:ce:68:40:3a:d4:0d:
                    c8:81:ea:d4:62:9e:78:33:80:de:b4:df:65:cc:47:
                    c0:da:69:fe:00:88:d6:41:f6:ce:91:60:e5:a1:0a:
                    a7:20:13:23:bc:ff:fd:03:ab:f9:c9:12:fd:c7:09:
                    3e:db:47:ec:00:eb:fc:37:ce:d4:f5:14:a1:f9:71:
                    35:cd:01:99:55:4a:cf:54:27:58:1d:ee:f9:1f:38:
                    7d:59:28:a5:09:0e:e0:fa:f2:fd:60:4e:e9:ba:51:
                    6c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:52:A7:1C:79:4E:D9:CA:9B:82:F4:D9:C6:0F:7F:C7:83:00:51:BA
            X509v3 Authority Key Identifier:
                keyid:54:F5:87:3C:14:2A:B7:B2:9D:C4:FD:7F:E7:A2:3A:38:43:94:C7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/32/54F5873C142AB7B29DC4FD7FE7A23A384394C7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPWHPBQqt7KdxP1_56I6OEOUx7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/32/34352e3133322e3135382e302f32342d3234203d3e20323133303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:49:f3:8d:48:59:4c:58:17:29:44:e9:3f:68:12:5d:c4:c1:
         2f:a7:59:22:b9:78:48:61:98:2d:d2:4b:42:5d:68:e7:1d:e7:
         68:c2:e3:4c:12:99:4e:d5:22:68:51:de:7e:d3:f5:a6:7d:00:
         76:0c:0e:18:b0:1b:27:8e:0c:ed:cb:0f:ab:f4:a0:e9:d4:96:
         8d:9a:cd:2e:ee:a8:23:0d:45:11:f6:24:11:ae:41:a6:96:14:
         a2:6e:fd:ff:28:1a:8d:57:5c:d9:15:75:44:17:2e:b3:02:5e:
         5e:39:b5:59:1a:e0:aa:19:97:08:91:8f:7d:55:59:da:43:ae:
         86:81:f8:41:7d:73:b1:73:de:31:2f:7d:ba:57:5b:e4:87:89:
         44:9c:ba:c2:30:4c:2f:69:d4:82:9e:49:ae:d4:8e:5f:81:f5:
         d9:64:29:c2:41:26:71:56:7a:d4:e2:a6:4b:e3:20:f2:98:fb:
         ae:28:7b:97:1a:c6:a0:7b:1c:7c:fc:75:e4:73:5e:65:c1:38:
         98:c5:bf:d3:25:b9:02:0e:6f:98:fa:5b:cd:60:d1:4e:3a:f4:
         95:34:c7:e1:ac:44:09:ef:59:e6:3a:10:65:13:b4:ea:f8:34:
         77:cc:fe:8d:f6:72:de:7a:76:9e:3c:f3:36:37:7b:41:3a:e5:
         5e:78:8b:78
-----BEGIN CERTIFICATE-----
MIIG5zCCBc+gAwIBAgIUS+PXM29Rs0fuPA4vBjVajyOUEp0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRmNTg3M2MxNDJhYjdiMjlkYzRmZDdmZTdhMjNhMzg0
Mzk0YzdiMTAeFw0yMDExMzAxOTA4MTJaFw0yMTExMjkxOTEzMTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDExOTM4NUZBOTA5OUJERkUz
NjA5RjhGMjIxRDQ4NTE4NjREQkI1OTY0MEFBRjA4NTNFRTU0NTRFMzRFQkEwQ0FD
QkFGNjY5RjBBMkEwNzJBQkNGNzYxN0MzM0FEQTJERjZEQTBCMDVFMDQ1NjExRkNC
RTJGODg5QUQ0RTVDODAzRDQxQ0NCMEMwQTFEMUY2M0FCMTdCMzdGNkYxMDY5QTg4
NjhDODQ3NzM1NzI4NDEwMkVEQTIxNjQwMDQyMjI2RTM4QjEyRjBGRUM1NDk1OTIz
NjQzQ0NCOTYxMTdFMjZBOThFMDQ4ODU2RkNDQzNEOTM2RTU0OUFGNjFDRjIyODM1
RDk3NjA0NTUzNjA2NzA4MDU4NUYwRjhGODc2OTMzOTBCMDYxNERBRUIzNTU0OEM0
ODFDOTIzRTE0NENFNjg0MDNBRDQwREM4ODFFQUQ0NjI5RTc4MzM4MERFQjRERjY1
Q0M0N0MwREE2OUZFMDA4OEQ2NDFGNkNFOTE2MEU1QTEwQUE3MjAxMzIzQkNGRkZE
MDNBQkY5QzkxMkZEQzcwOTNFREI0N0VDMDBFQkZDMzdDRUQ0RjUxNEExRjk3MTM1
Q0QwMTk5NTU0QUNGNTQyNzU4MURFRUY5MUYzODdENTkyOEE1MDkwRUUwRkFGMkZE
NjA0RUU5QkE1MTZDNjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0Rk4X6kJm9/jYJ+PIh1IUYZNu1lkCq8IU+5UVONOugysuvZp8KKg
cqvPdhfDOtot9toLBeBFYR/L4viJrU5cgD1BzLDAodH2OrF7N/bxBpqIaMhHc1co
QQLtohZABCIm44sS8P7FSVkjZDzLlhF+JqmOBIhW/Mw9k25UmvYc8ig12XYEVTYG
cIBYXw+Ph2kzkLBhTa6zVUjEgckj4UTOaEA61A3IgerUYp54M4DetN9lzEfA2mn+
AIjWQfbOkWDloQqnIBMjvP/9A6v5yRL9xwk+20fsAOv8N87U9RSh+XE1zQGZVUrP
VCdYHe75Hzh9WSilCQ7g+vL9YE7pulFsZwIDAQABo4IB9TCCAfEwHQYDVR0OBBYE
FPtSpxx5TtnKm4L02cYPf8eDAFG6MB8GA1UdIwQYMBaAFFT1hzwUKreyncT9f+ei
OjhDlMexMA4GA1UdDwEB/wQEAwIHgDBwBgNVHR8EaTBnMGWgY6Bhhl9yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8zMi81NEY1
ODczQzE0MkFCN0IyOURDNEZEN0ZFN0EyM0EzODQzOTRDN0IxLmNybDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlBXSFBCUXF0N0tkeFAxXzU2STZPRU9VeDdFLmNlcjCB
iwYIKwYBBQUHAQsEfzB9MHsGCCsGAQUFBzALhm9yc3luYzovL3Jwa2kxLnRlcnJh
dHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8zMi8zNDM1MmUzMTMzMzIyZTMx
MzUzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMzMwMzMzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAC2EnjANBgkqhkiG9w0BAQsFAAOCAQEADUnzjUhZTFgXKUTpP2gSXcTBL6dZ
Irl4SGGYLdJLQl1o5x3naMLjTBKZTtUiaFHeftP1pn0AdgwOGLAbJ44M7csPq/Sg
6dSWjZrNLu6oIw1FEfYkEa5BppYUom79/ygajVdc2RV1RBcuswJeXjm1WRrgqhmX
CJGPfVVZ2kOuhoH4QX1zsXPeMS99uldb5IeJRJy6wjBML2nUgp5JrtSOX4H12WQp
wkEmcVZ61OKmS+Mg8pj7rih7lxrGoHscfPx15HNeZcE4mMW/0yW5Ag5vmPpbzWDR
Tjr0lTTH4axECe9Z5joQZRO06vg0d8z+jfZy3np2njzzNjd7QTrlXniLeA==
-----END CERTIFICATE-----