Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/13/34352e31332e35372e302f32342d3234203d3e20323132343738.roa
File:                     34352e31332e35372e302f32342d3234203d3e20323132343738.roa (raw, json)
Hash identifier:          iDqgIQUvRpzl3TvXzMaN74wnrBrH/tD2i+q7FRzV4dc=
Subject key identifier:   84:EA:40:9C:7A:B2:3B:08:22:BD:47:36:B7:5A:CF:CE:FA:E6:EE:57
Certificate issuer:       /CN=8000e2f09d2bdd9bee9d4694e4779bca485a6067
Certificate serial:       595213D13646FE80618CB9426DAA9445119E6D54
Authority key identifier: 80:00:E2:F0:9D:2B:DD:9B:EE:9D:46:94:E4:77:9B:CA:48:5A:60:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gADi8J0r3ZvunUaU5HebykhaYGc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/13/34352e31332e35372e302f32342d3234203d3e20323132343738.roa
Signing time:             Sat 28 Nov 2020 12:46:36 +0000
ROA not before:           Sat 28 Nov 2020 12:41:36 +0000
ROA not after:            Sat 27 Nov 2021 12:46:36 +0000
asID:                     212478
IP address blocks:        45.13.57.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:52:13:d1:36:46:fe:80:61:8c:b9:42:6d:aa:94:45:11:9e:6d:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8000e2f09d2bdd9bee9d4694e4779bca485a6067
        Validity
            Not Before: Nov 28 12:41:36 2020 GMT
            Not After : Nov 27 12:46:36 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fb:8e:ae:c8:fe:9a:8e:89:7e:32:e3:73:70:
                    b2:7a:31:4b:f0:30:31:57:81:39:7a:63:84:24:a9:
                    34:ed:6f:bd:74:d5:f6:e2:28:0e:95:a2:a2:fa:26:
                    1b:23:e5:5c:6e:6d:b7:7e:4d:13:b4:77:76:86:cc:
                    36:29:7a:fc:13:73:6c:8b:6b:5f:a4:b9:71:a0:a1:
                    78:79:d2:c3:e4:42:b3:f8:a4:ff:89:9d:9e:81:4b:
                    46:36:48:10:3b:c9:cd:97:1f:0a:49:12:77:34:7c:
                    8c:49:5c:3c:89:67:3e:af:b2:aa:72:aa:86:bd:67:
                    4f:47:2f:6b:b1:d7:76:48:ac:d4:a5:fb:79:e4:7b:
                    70:f3:6f:ba:26:ab:2e:f7:a8:67:19:12:58:ec:fa:
                    e3:a7:04:e8:6e:77:64:bc:83:86:2c:2c:ec:14:b5:
                    f6:37:d3:e1:09:00:dc:aa:57:34:92:bd:e7:30:ef:
                    47:08:6e:da:d4:ac:6e:41:24:c2:61:72:ad:5f:09:
                    dc:68:0d:bf:fe:f3:58:96:5b:96:26:8f:d7:ce:f7:
                    32:35:4c:0a:4e:f2:e9:75:9a:9f:fa:24:34:9d:39:
                    35:c0:b2:1e:12:d0:71:40:9c:39:9f:7c:3c:a2:8c:
                    b6:bd:81:99:40:89:30:72:98:70:a2:9c:4c:41:93:
                    98:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:EA:40:9C:7A:B2:3B:08:22:BD:47:36:B7:5A:CF:CE:FA:E6:EE:57
            X509v3 Authority Key Identifier:
                keyid:80:00:E2:F0:9D:2B:DD:9B:EE:9D:46:94:E4:77:9B:CA:48:5A:60:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/13/8000E2F09D2BDD9BEE9D4694E4779BCA485A6067.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gADi8J0r3ZvunUaU5HebykhaYGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/13/34352e31332e35372e302f32342d3234203d3e20323132343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:12:93:d1:f3:bd:4c:8a:3f:6e:63:ee:05:6d:af:cb:a7:84:
         2f:3c:6c:8e:49:70:5f:ac:53:8e:dd:2d:b9:e4:90:eb:3d:15:
         bf:8f:75:c4:65:3f:6a:2f:f2:28:f9:23:44:d1:71:22:8a:86:
         92:19:d3:da:37:e8:25:ab:56:c0:2a:ec:0b:ee:df:92:87:ed:
         f4:6b:a4:f0:5b:65:ca:b2:61:a8:e5:e7:cb:5a:e9:66:d0:12:
         8a:05:79:49:c8:49:06:81:37:b3:da:2a:cc:b6:16:dc:a3:7f:
         a2:8d:3d:64:c5:08:52:55:16:a5:59:6e:17:5f:d9:32:9c:48:
         9a:cb:a7:3c:19:a7:ba:c0:0d:ac:b1:ab:ae:a8:ee:2c:d6:51:
         a0:fb:08:9c:f4:da:2a:23:20:2b:ab:14:4a:34:ee:bf:64:07:
         ce:6a:7f:ef:29:7f:4e:8e:7b:19:ac:45:a9:d2:a2:19:b1:c6:
         70:cf:23:ef:ef:78:60:07:7c:65:c3:15:a6:ad:0f:f8:97:57:
         93:11:4a:53:75:fa:bf:52:e3:84:82:ca:78:a4:7f:20:b2:c8:
         00:76:fe:6b:64:c9:59:8a:f5:a8:f1:57:a9:6d:39:a3:77:22:
         f6:9c:ca:1d:1f:46:d1:04:b7:68:43:62:a2:97:8b:f7:3a:40:
         99:1e:8f:73
-----BEGIN CERTIFICATE-----
MIIG4zCCBcugAwIBAgIUWVIT0TZG/oBhjLlCbaqURRGebVQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODAwMGUyZjA5ZDJiZGQ5YmVlOWQ0Njk0ZTQ3NzliY2E0
ODVhNjA2NzAeFw0yMDExMjgxMjQxMzZaFw0yMTExMjcxMjQ2MzZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDNGQjhFQUVDOEZFOUE4RTg5
N0UzMkUzNzM3MEIyN0EzMTRCRjAzMDMxNTc4MTM5N0E2Mzg0MjRBOTM0RUQ2RkJE
NzRENUY2RTIyODBFOTVBMkEyRkEyNjFCMjNFNTVDNkU2REI3N0U0RDEzQjQ3Nzc2
ODZDQzM2Mjk3QUZDMTM3MzZDOEI2QjVGQTRCOTcxQTBBMTc4NzlEMkMzRTQ0MkIz
RjhBNEZGODk5RDlFODE0QjQ2MzY0ODEwM0JDOUNEOTcxRjBBNDkxMjc3MzQ3QzhD
NDk1QzNDODk2NzNFQUZCMkFBNzJBQTg2QkQ2NzRGNDcyRjZCQjFENzc2NDhBQ0Q0
QTVGQjc5RTQ3QjcwRjM2RkJBMjZBQjJFRjdBODY3MTkxMjU4RUNGQUUzQTcwNEU4
NkU3NzY0QkM4Mzg2MkMyQ0VDMTRCNUY2MzdEM0UxMDkwMERDQUE1NzM0OTJCREU3
MzBFRjQ3MDg2RURBRDRBQzZFNDEyNEMyNjE3MkFENUYwOURDNjgwREJGRkVGMzU4
OTY1Qjk2MjY4RkQ3Q0VGNzMyMzU0QzBBNEVGMkU5NzU5QTlGRkEyNDM0OUQzOTM1
QzBCMjFFMTJEMDcxNDA5QzM5OUY3QzNDQTI4Q0I2QkQ4MTk5NDA4OTMwNzI5ODcw
QTI5QzRDNDE5Mzk4MzcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0/uOrsj+mo6JfjLjc3CyejFL8DAxV4E5emOEJKk07W+9dNX24igO
laKi+iYbI+Vcbm23fk0TtHd2hsw2KXr8E3Nsi2tfpLlxoKF4edLD5EKz+KT/iZ2e
gUtGNkgQO8nNlx8KSRJ3NHyMSVw8iWc+r7KqcqqGvWdPRy9rsdd2SKzUpft55Htw
82+6Jqsu96hnGRJY7PrjpwTobndkvIOGLCzsFLX2N9PhCQDcqlc0kr3nMO9HCG7a
1KxuQSTCYXKtXwncaA2//vNYlluWJo/XzvcyNUwKTvLpdZqf+iQ0nTk1wLIeEtBx
QJw5n3w8ooy2vYGZQIkwcphwopxMQZOYNwIDAQABo4IB8TCCAe0wHQYDVR0OBBYE
FITqQJx6sjsIIr1HNrdaz8765u5XMB8GA1UdIwQYMBaAFIAA4vCdK92b7p1GlOR3
m8pIWmBnMA4GA1UdDwEB/wQEAwIHgDBwBgNVHR8EaTBnMGWgY6Bhhl9yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xMy84MDAw
RTJGMDlEMkJERDlCRUU5RDQ2OTRFNDc3OUJDQTQ4NUE2MDY3LmNybDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0FEaThKMHIzWnZ1blVhVTVIZWJ5a2hhWUdjLmNlcjCB
hwYIKwYBBQUHAQsEezB5MHcGCCsGAQUFBzALhmtyc3luYzovL3Jwa2kxLnRlcnJh
dHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xMy8zNDM1MmUzMTMzMmUzNTM3
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMyMzQzNzM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LQ05MA0GCSqGSIb3DQEBCwUAA4IBAQBlEpPR871Mij9uY+4Fba/Lp4QvPGyOSXBf
rFOO3S255JDrPRW/j3XEZT9qL/Io+SNE0XEiioaSGdPaN+glq1bAKuwL7t+Sh+30
a6TwW2XKsmGo5efLWulm0BKKBXlJyEkGgTez2irMthbco3+ijT1kxQhSVRalWW4X
X9kynEiay6c8Gae6wA2ssauuqO4s1lGg+wic9NoqIyArqxRKNO6/ZAfOan/vKX9O
jnsZrEWp0qIZscZwzyPv73hgB3xlwxWmrQ/4l1eTEUpTdfq/UuOEgsp4pH8gssgA
dv5rZMlZivWo8VepbTmjdyL2nModH0bRBLdoQ2Kil4v3OkCZHo9z
-----END CERTIFICATE-----