Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/34352e3133302e3130342e302f32342d3332203d3e203531313637.roa
File:                     34352e3133302e3130342e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          +Q2as9xbGkQypa9XP1a1DdYj52kL9AuG6HmBWBAu4Yo=
Subject key identifier:   28:CB:7E:1D:5F:8C:CB:CE:86:90:6C:B0:0B:AC:F2:72:45:2E:1C:00
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       3EFFC2EAEEA44B1349682A24D7E886D664B0C8D9
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e3133302e3130342e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:44 +0000
ROA not before:           Sat 22 Oct 2022 04:28:44 +0000
ROA not after:            Sat 21 Oct 2023 04:33:44 +0000
asID:                     51167
IP address blocks:        45.130.104.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ff:c2:ea:ee:a4:4b:13:49:68:2a:24:d7:e8:86:d6:64:b0:c8:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Oct 22 04:28:44 2022 GMT
            Not After : Oct 21 04:33:44 2023 GMT
        Subject: CN=28CB7E1D5F8CCBCE86906CB00BACF272452E1C00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:91:2f:d4:5b:10:cf:ca:27:2c:b6:74:40:b9:
                    67:26:3e:d7:6e:44:1b:50:c5:37:fd:48:99:bb:bf:
                    f3:d0:d1:cf:52:9b:da:e7:ee:11:5f:7d:cc:bb:d9:
                    52:8e:b2:d8:b3:9e:81:d9:e0:16:b9:c7:ae:73:1a:
                    5f:a8:8e:3f:86:39:11:fe:42:6e:0b:e3:5a:fc:dc:
                    5b:23:3b:39:01:c8:7f:d2:77:8e:5e:3c:c2:e3:00:
                    bf:bd:1f:c4:51:9e:02:bd:41:52:46:5c:0a:0e:1f:
                    28:05:5a:96:34:d4:e0:63:4b:e4:a8:bd:88:04:a1:
                    61:c0:3b:8a:50:ee:73:bd:63:ab:13:d2:c4:36:ef:
                    5b:69:3d:94:dd:f0:ab:89:84:15:85:5d:0d:35:c1:
                    73:ca:4d:28:3a:bd:b6:6d:49:a3:65:28:63:9e:e1:
                    1a:90:86:8e:a3:08:5a:65:b6:c4:a2:19:87:af:f6:
                    6f:ce:e6:a6:4c:b6:0e:55:c5:62:ea:01:b9:94:4d:
                    d4:14:ab:a3:66:41:36:77:04:ca:c7:db:25:dd:92:
                    e9:f0:d7:2c:2b:9e:4b:3c:02:43:07:1e:6b:b3:a8:
                    35:cd:1c:bc:e1:86:6b:2d:88:bc:ea:1c:c4:98:39:
                    83:95:52:28:00:fa:ca:f1:29:54:e0:ef:f9:17:fb:
                    02:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:CB:7E:1D:5F:8C:CB:CE:86:90:6C:B0:0B:AC:F2:72:45:2E:1C:00
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e3133302e3130342e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.130.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:5e:24:d3:1c:81:d0:22:1b:47:a3:0d:85:18:75:81:e6:32:
         ad:79:08:e5:fc:1f:a3:1e:f8:92:75:07:11:a6:a3:ec:c5:d7:
         28:1f:5f:84:e2:28:ec:43:56:c1:b9:cf:06:5f:a2:f4:6c:7d:
         93:39:4b:35:aa:71:40:1a:4c:2b:d1:10:f7:56:b8:bb:99:3d:
         a0:a0:06:f2:98:f2:d6:50:0b:d0:39:75:b0:ba:c9:7f:0d:53:
         1d:3a:4c:fa:f8:f9:e6:17:41:87:40:5f:37:ee:34:88:07:7e:
         1f:5c:fa:f4:22:88:a8:19:50:96:76:63:9a:7f:3d:a5:01:a4:
         e2:cb:d2:84:8c:77:0f:c9:f8:0a:14:53:6a:d1:12:5c:2a:62:
         55:c5:9a:6f:cd:39:e0:21:28:0d:cc:d5:26:64:e9:c4:23:bf:
         fe:7d:e3:8c:12:d0:2b:f8:d2:e7:fe:13:a6:b1:50:d7:1f:43:
         c5:ce:26:08:61:76:79:8a:5b:95:ad:4c:3f:9f:f3:79:ee:9a:
         c4:59:71:34:ee:3a:5d:f6:57:56:1c:33:a5:e7:8a:f2:dc:55:
         50:8a:4b:86:47:66:3b:ca:ef:a3:95:9b:cd:c4:76:19:a6:71:
         ae:9c:ad:19:f9:0b:a4:4c:30:bd:0d:40:db:f9:a2:cc:2c:b5:
         bd:bf:c1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----