Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/39/34352e3133372e3139342e302f32332d3234203d3e203631333137.roa
File:                     34352e3133372e3139342e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          zptk3Ih8d+/2dA48N8D3fZB4t01KxxbEHQxcikLahM8=
Subject key identifier:   A4:A7:D9:AB:E8:EF:BE:BB:E6:DD:64:CA:E4:B1:E5:B8:3E:70:33:1E
Certificate issuer:       /CN=101d22f56ee5531cc92d0861beae087dc3b08ec0
Certificate serial:       0459459437178CB5FDD0BCA3B772A2095CD7BDBA
Authority key identifier: 10:1D:22:F5:6E:E5:53:1C:C9:2D:08:61:BE:AE:08:7D:C3:B0:8E:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EB0i9W7lUxzJLQhhvq4IfcOwjsA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/39/34352e3133372e3139342e302f32332d3234203d3e203631333137.roa
Signing time:             Mon 30 Nov 2020 19:13:45 +0000
ROA not before:           Mon 30 Nov 2020 19:08:45 +0000
ROA not after:            Mon 29 Nov 2021 19:13:45 +0000
asID:                     61317
IP address blocks:        45.137.194.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:59:45:94:37:17:8c:b5:fd:d0:bc:a3:b7:72:a2:09:5c:d7:bd:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101d22f56ee5531cc92d0861beae087dc3b08ec0
        Validity
            Not Before: Nov 30 19:08:45 2020 GMT
            Not After : Nov 29 19:13:45 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:54:f5:89:52:49:fb:4c:ce:b9:3e:f7:41:f5:
                    66:a8:9f:d0:a8:a3:82:06:54:2d:53:0d:6e:7a:e2:
                    91:77:97:e8:3c:0f:ac:1b:92:a4:fc:08:31:1b:63:
                    40:89:91:e8:c3:31:8f:ca:85:ec:30:20:ae:81:4b:
                    8a:24:82:4f:6d:9c:90:53:1a:21:f4:eb:39:c2:4e:
                    cd:58:78:03:c8:24:2e:6e:be:9d:e5:28:84:d9:25:
                    3a:db:00:20:05:62:99:a6:e2:fc:c6:b9:88:ee:b1:
                    ee:3a:a9:da:b5:fc:25:6d:37:4c:d1:44:dc:ce:5b:
                    da:ae:09:38:de:d2:c9:93:21:f9:78:52:d3:69:8b:
                    75:6e:11:1b:8b:ad:d5:8b:2a:c7:1b:a3:54:a3:e3:
                    9c:75:d5:cf:f8:28:17:06:61:7d:27:04:f4:e0:f3:
                    50:29:82:c1:60:80:1b:0c:33:bf:43:9a:3b:29:56:
                    48:64:97:18:4d:77:d3:5a:d0:d7:03:a9:f1:38:e9:
                    4a:a1:5d:dd:c6:6d:a0:44:c5:8c:f0:42:fc:a7:d1:
                    88:14:27:aa:d9:a6:38:88:e8:50:25:4e:49:a1:0b:
                    85:28:61:87:31:49:5a:11:ff:6f:b9:e2:9d:c4:b9:
                    bc:af:43:bb:4b:f5:97:75:6a:ee:d9:7a:01:73:76:
                    3d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A7:D9:AB:E8:EF:BE:BB:E6:DD:64:CA:E4:B1:E5:B8:3E:70:33:1E
            X509v3 Authority Key Identifier:
                keyid:10:1D:22:F5:6E:E5:53:1C:C9:2D:08:61:BE:AE:08:7D:C3:B0:8E:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/39/101D22F56EE5531CC92D0861BEAE087DC3B08EC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EB0i9W7lUxzJLQhhvq4IfcOwjsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/39/34352e3133372e3139342e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:ee:48:3f:bb:93:e7:c0:80:9a:91:f0:83:ea:1c:b6:04:67:
         4d:a0:6d:4c:4a:e5:9d:b3:25:93:7d:29:40:45:d6:53:b3:25:
         62:0f:24:e5:47:77:46:49:0b:40:03:48:33:42:ff:68:5b:84:
         e8:d0:9d:c6:6c:30:bd:ff:c9:08:9f:6b:ac:e1:e1:a9:b4:8c:
         f2:87:f8:bc:3e:b9:36:ad:65:a3:50:85:b6:c9:73:73:d4:ac:
         a3:ca:dc:23:aa:50:d5:30:d1:5d:55:ed:cd:eb:6f:9f:45:3a:
         75:e3:15:6d:53:c6:ee:14:2f:cf:ed:cf:26:f8:99:4a:c8:e6:
         a9:2e:3e:15:34:ac:73:15:4a:43:08:72:9e:63:ec:ce:2c:cd:
         a4:59:ab:1e:cb:bc:b5:82:ed:e1:90:a6:9e:b4:ee:9f:01:d4:
         3d:b0:3a:5a:8a:75:35:8b:64:19:63:9d:15:60:ed:dd:c7:50:
         b4:72:70:2b:b0:a5:90:b7:b2:ec:eb:0e:fd:05:b7:59:3c:fa:
         11:60:c2:bf:0b:14:da:eb:29:80:34:08:36:9a:86:68:c2:9b:
         a7:9a:a7:8b:33:2f:db:7b:69:c9:4a:73:d8:2b:1e:82:08:91:
         2a:72:1e:c0:ae:9d:9f:57:55:c4:4c:21:14:f3:52:ea:a5:db:
         89:b8:70:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----