Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/34352e3132382e3136302e302f32322d3234203d3e203437353833.roa
File:                     34352e3132382e3136302e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier:          reIfOvazsFOjt0i1PFuBZNFAXuc4zNMbviSRUKCtvf4=
Subject key identifier:   D1:F5:D7:6E:A6:47:1C:58:FE:A9:5F:45:8D:A6:AE:FA:9E:83:95:81
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       2098D75792AAE6CE07C4056F2F03FA8432BD3923
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/34352e3132382e3136302e302f32322d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:34:02 +0000
ROA not before:           Sat 22 Oct 2022 04:29:02 +0000
ROA not after:            Sat 21 Oct 2023 04:34:02 +0000
asID:                     47583
IP address blocks:        45.128.160.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:98:d7:57:92:aa:e6:ce:07:c4:05:6f:2f:03:fa:84:32:bd:39:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Oct 22 04:29:02 2022 GMT
            Not After : Oct 21 04:34:02 2023 GMT
        Subject: CN=D1F5D76EA6471C58FEA95F458DA6AEFA9E839581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:77:93:94:e0:71:3d:e7:1c:ce:93:90:1c:b3:
                    ac:d3:d3:47:2b:6b:1f:44:ee:ee:b8:15:27:a8:1e:
                    cc:bb:71:af:f5:d5:3d:5f:1c:53:32:79:66:bf:57:
                    b7:ad:fa:96:9c:1b:79:92:b4:41:b8:a9:89:8c:df:
                    06:75:76:81:b8:9c:ba:76:f5:0d:57:51:7e:b1:20:
                    c5:8a:08:17:08:15:46:b2:63:ce:73:50:7b:87:80:
                    bd:8a:1f:a6:2c:d1:ee:9c:94:5e:bd:65:d2:93:ce:
                    3b:5f:da:8b:b0:fa:c0:55:f6:19:fa:7e:c8:4c:a8:
                    f8:7c:04:1a:d7:e7:6f:8f:bb:3a:95:9e:9c:47:44:
                    94:c1:13:49:84:6a:b4:44:b5:1e:34:76:0f:9d:40:
                    e4:9b:84:89:37:2e:ef:b2:ba:f9:93:b4:db:51:dc:
                    78:eb:17:9b:43:3d:b7:3a:16:f9:fd:d1:bc:94:7a:
                    72:4c:19:53:54:8d:a3:ad:e7:a9:73:52:a9:92:d6:
                    97:ef:ae:f1:7b:41:ff:4a:43:66:ea:f6:a8:21:9c:
                    03:d3:17:f1:e4:ee:02:65:94:5e:6f:d5:65:6d:8f:
                    51:1a:b0:b8:63:50:e2:20:26:a3:e4:e6:52:e4:3a:
                    67:e9:dc:76:71:f6:f0:1f:77:83:73:f7:e7:45:6d:
                    29:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F5:D7:6E:A6:47:1C:58:FE:A9:5F:45:8D:A6:AE:FA:9E:83:95:81
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/34352e3132382e3136302e302f32322d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.128.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:4b:e9:ba:6e:ad:9e:4e:27:11:40:19:87:92:d0:54:6b:d7:
         1c:50:83:73:59:3f:b8:57:ac:29:06:b6:5e:a7:0c:9e:9e:bf:
         0d:89:53:0a:d7:ee:eb:7e:ea:8c:84:60:4a:3c:20:f8:d8:d1:
         9b:e3:87:ac:c6:c9:c0:9a:f3:08:fd:0b:d0:a4:f3:67:6f:1d:
         38:4c:48:bc:29:18:60:0b:ab:d9:c5:fc:91:3d:d7:f8:8f:9e:
         1f:80:7f:23:00:5c:df:99:2b:d6:df:5f:f7:87:64:21:5a:76:
         ff:5f:e0:a7:c3:38:34:cc:5e:5b:6a:ac:cd:20:f6:08:97:1f:
         56:18:3b:e9:16:ca:68:04:a3:2f:1b:6d:21:7c:f8:bc:f2:44:
         c9:e1:72:54:a0:a4:e4:22:dc:f8:8d:4a:1e:c1:53:d5:42:14:
         60:6c:94:c2:b6:d0:ea:51:c0:fe:11:ec:34:ab:07:6e:9f:b7:
         94:81:d2:b8:32:20:0e:23:e0:f6:ed:f2:7c:5e:bd:99:2f:e1:
         74:d3:97:06:94:37:df:6d:b9:56:87:66:c1:b7:4c:1c:48:b1:
         90:14:fe:50:86:09:1b:22:60:e5:de:ee:0e:f9:70:15:65:f0:
         89:ca:5b:60:e4:8e:7e:55:b9:f5:96:07:69:39:27:4c:94:fe:
         b3:4e:fb:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----