Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/34352e3134332e38302e302f32332d3234203d3e203437353833.roa
File:                     34352e3134332e38302e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier:          +IydnVFVycfjH8oqTPlq/A77yVT2PNchOaz2PD68Uso=
Subject key identifier:   A0:64:57:A7:9E:13:E4:71:99:ED:B6:F8:65:09:03:3B:01:E1:32:96
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       608A1AC2133E31B4C2822B4A1D14397AE1F8EFFD
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/34352e3134332e38302e302f32332d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:34:04 +0000
ROA not before:           Sat 22 Oct 2022 04:29:04 +0000
ROA not after:            Sat 21 Oct 2023 04:34:04 +0000
asID:                     47583
IP address blocks:        45.143.80.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:8a:1a:c2:13:3e:31:b4:c2:82:2b:4a:1d:14:39:7a:e1:f8:ef:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Oct 22 04:29:04 2022 GMT
            Not After : Oct 21 04:34:04 2023 GMT
        Subject: CN=A06457A79E13E47199EDB6F86509033B01E13296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fe:40:b7:bf:7d:80:d3:54:f9:19:78:c3:9c:
                    7b:8a:f0:b5:a0:d7:49:44:8a:e6:dd:25:2d:3b:54:
                    17:f2:24:1f:7a:e6:fa:13:cb:cd:ab:48:23:59:c4:
                    ea:d4:f8:dc:b1:81:5f:42:0f:c2:81:8a:36:78:6d:
                    cd:4e:de:1e:72:48:40:8d:1e:5e:8b:f8:91:f6:a4:
                    d7:26:26:66:d3:2c:30:0b:0e:52:7f:92:e6:46:cf:
                    da:a2:41:97:65:4f:f7:a7:d6:85:b0:a9:f5:7b:78:
                    01:26:0b:d3:64:fb:97:04:44:01:ae:44:b9:6b:9a:
                    f1:f6:00:9c:44:ee:2a:ee:4e:97:c9:ab:bc:ad:74:
                    ed:19:ac:48:e2:bc:2e:36:98:9c:96:0c:36:35:f2:
                    a3:1c:84:c6:fe:57:31:4a:25:e8:87:e8:cc:3f:ed:
                    cb:f3:26:18:a3:64:2f:d6:fe:a2:67:ca:17:47:32:
                    d0:cf:01:24:67:1c:21:49:f2:3a:83:c2:46:b4:db:
                    74:7a:ec:89:41:7f:17:57:62:8c:7d:ee:fe:80:44:
                    59:05:1a:09:5f:28:5a:f6:1c:4f:1c:fc:e6:cb:08:
                    90:ff:07:59:17:3e:0f:2b:df:0a:ad:e2:cf:77:69:
                    ef:bf:1d:a4:b4:ba:5b:d0:5d:16:fd:ae:12:7a:78:
                    3f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:64:57:A7:9E:13:E4:71:99:ED:B6:F8:65:09:03:3B:01:E1:32:96
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/34352e3134332e38302e302f32332d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.143.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:80:84:a0:fb:eb:50:1a:2a:0b:39:84:9a:4d:70:e3:d6:12:
         a2:f4:fd:3d:a1:da:68:39:e5:6e:03:19:63:71:eb:15:de:c8:
         80:4d:9e:f9:17:4d:b9:d6:49:e3:b7:f5:89:08:a6:cb:95:f4:
         88:0b:d8:27:4d:9e:60:a9:d2:e1:10:50:18:b5:c0:00:cf:60:
         8f:04:b7:ee:5f:a1:c6:0f:6b:89:d8:fa:6c:39:2a:f4:1f:6f:
         e0:b6:e5:58:3a:50:67:d9:d2:1e:ff:dd:1d:71:dd:0e:86:38:
         56:59:d4:f6:9c:43:f9:0b:90:2b:8e:a9:b4:02:29:f2:c2:ee:
         6f:0a:4b:3c:00:8a:e9:ee:c9:e4:10:15:bc:8e:36:31:48:7a:
         de:2b:94:dd:37:b2:cd:02:df:81:0b:fe:54:fb:f0:f5:a9:10:
         a3:cf:50:e6:c1:eb:d8:c7:c0:e6:cc:af:b4:d4:2c:32:fd:29:
         a4:12:ce:21:a2:c5:2e:d4:fb:b0:9c:3d:18:6a:8f:a1:4c:80:
         17:f6:5d:db:2c:b0:fb:c2:7f:61:9c:18:9b:87:a3:3d:1a:7b:
         9c:b5:df:da:5c:87:39:94:19:67:8b:84:89:81:dd:81:06:a7:
         aa:77:81:0f:f4:e7:45:8a:b5:5e:df:75:13:1b:87:97:24:20:
         c7:47:28:ad
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUYIoawhM+MbTCgitKHRQ5euH47/0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWU3OTNiNWMxMjM5MjMxZTA4ZGVkZDZmYjgwNjA3MzJj
ZDA2M2Y0ZDAeFw0yMjEwMjIwNDI5MDRaFw0yMzEwMjEwNDM0MDRaMDMxMTAvBgNV
BAMTKEEwNjQ1N0E3OUUxM0U0NzE5OUVEQjZGODY1MDkwMzNCMDFFMTMyOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE/kC3v32A01T5GXjDnHuK8LWg
10lEiubdJS07VBfyJB965voTy82rSCNZxOrU+NyxgV9CD8KBijZ4bc1O3h5ySECN
Hl6L+JH2pNcmJmbTLDALDlJ/kuZGz9qiQZdlT/en1oWwqfV7eAEmC9Nk+5cERAGu
RLlrmvH2AJxE7iruTpfJq7ytdO0ZrEjivC42mJyWDDY18qMchMb+VzFKJeiH6Mw/
7cvzJhijZC/W/qJnyhdHMtDPASRnHCFJ8jqDwka023R67IlBfxdXYox97v6ARFkF
GglfKFr2HE8c/ObLCJD/B1kXPg8r3wqt4s93ae+/HaS0ulvQXRb9rhJ6eD9tAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUoGRXp54T5HGZ7bb4ZQkDOwHhMpYwHwYDVR0j
BBgwFoAUHnk7XBI5Ix4I3t1vuAYHMs0GP00wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzgvMUU3OTNCNUMxMjM5MjMxRTA4REVERDZGQjgwNjA3MzJD
RDA2M0Y0RC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0huazdYQkk1SXg0STN0
MXZ1QVlITXMwR1AwMC5jZXIwgYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4Zq
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
OC8zNDM1MmUzMTM0MzMyZTM4MzAyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNDM3
MzUzODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLY9QMA0GCSqGSIb3DQEBCwUAA4IBAQApgISg++tQ
GioLOYSaTXDj1hKi9P09odpoOeVuAxljcesV3siATZ75F0251knjt/WJCKbLlfSI
C9gnTZ5gqdLhEFAYtcAAz2CPBLfuX6HGD2uJ2PpsOSr0H2/gtuVYOlBn2dIe/90d
cd0OhjhWWdT2nEP5C5Arjqm0Ainywu5vCks8AIrp7snkEBW8jjYxSHreK5TdN7LN
At+BC/5U+/D1qRCjz1DmwevYx8DmzK+01Cwy/SmkEs4hosUu1PuwnD0Yao+hTIAX
9l3bLLD7wn9hnBibh6M9Gnuctd/aXIc5lBlni4SJgd2BBqeqd4EP9OdFirVe33UT
G4eXJCDHRyit
-----END CERTIFICATE-----