Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/166/34352e39342e35362e302f32342d3234203d3e20323132343136.roa
File:                     34352e39342e35362e302f32342d3234203d3e20323132343136.roa (raw, json)
Hash identifier:          5kUYcfiPopwrOVw6MhzT8KLtMKCPuQxARfov5gTtW90=
Subject key identifier:   91:96:38:79:D1:0C:3C:43:99:D2:B3:E2:B5:23:8E:49:C2:46:64:31
Certificate issuer:       /CN=37e4374c116e3e8adf1985a19577cbca011a9695
Certificate serial:       263FFF739AF0EB982A4BBB700F19AE43489C444B
Authority key identifier: 37:E4:37:4C:11:6E:3E:8A:DF:19:85:A1:95:77:CB:CA:01:1A:96:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N-Q3TBFuPorfGYWhlXfLygEalpU.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/166/34352e39342e35362e302f32342d3234203d3e20323132343136.roa
Signing time:             Thu 10 Dec 2020 16:10:40 +0000
ROA not before:           Thu 10 Dec 2020 16:05:40 +0000
ROA not after:            Thu 09 Dec 2021 16:10:40 +0000
asID:                     212416
IP address blocks:        45.94.56.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:3f:ff:73:9a:f0:eb:98:2a:4b:bb:70:0f:19:ae:43:48:9c:44:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37e4374c116e3e8adf1985a19577cbca011a9695
        Validity
            Not Before: Dec 10 16:05:40 2020 GMT
            Not After : Dec  9 16:10:40 2021 GMT
        Subject: CN=3082010A0282010100EB13CD448A42E4D34E45F85531D9601EDD5131B7357C9C4CA047D63ABD5225B0C41A943CC6A8F14B99E491182A7A7DB31699D627C406820924E34C185F0F78F3135FB7A876D3CCF1EE9E80B07F7C4D6A04F2C6D5BB021FE06E9A38E2F16E7CDFCD3A319863502912FCC445C4AF9C4AB862EEE021F825EF68CD7175F6E47644A5F9DD7193105365D7A6C3C2C75DC37DC1F5C02ED027B8AC3FD7CE5CA3F8A791E1A188C02F2E3628FAE19A9C817893D1A96C949AB6359778CBC7F909D6C28D8010C4E027D6968545451B932E4890C8F6EEF3F2D3621AE390A64D79B4AA9DFE19D67229BA6C4B434ED069C74D3F97F29DABF3FB91FFE491BDCF32990E8008D340290203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:13:cd:44:8a:42:e4:d3:4e:45:f8:55:31:d9:
                    60:1e:dd:51:31:b7:35:7c:9c:4c:a0:47:d6:3a:bd:
                    52:25:b0:c4:1a:94:3c:c6:a8:f1:4b:99:e4:91:18:
                    2a:7a:7d:b3:16:99:d6:27:c4:06:82:09:24:e3:4c:
                    18:5f:0f:78:f3:13:5f:b7:a8:76:d3:cc:f1:ee:9e:
                    80:b0:7f:7c:4d:6a:04:f2:c6:d5:bb:02:1f:e0:6e:
                    9a:38:e2:f1:6e:7c:df:cd:3a:31:98:63:50:29:12:
                    fc:c4:45:c4:af:9c:4a:b8:62:ee:e0:21:f8:25:ef:
                    68:cd:71:75:f6:e4:76:44:a5:f9:dd:71:93:10:53:
                    65:d7:a6:c3:c2:c7:5d:c3:7d:c1:f5:c0:2e:d0:27:
                    b8:ac:3f:d7:ce:5c:a3:f8:a7:91:e1:a1:88:c0:2f:
                    2e:36:28:fa:e1:9a:9c:81:78:93:d1:a9:6c:94:9a:
                    b6:35:97:78:cb:c7:f9:09:d6:c2:8d:80:10:c4:e0:
                    27:d6:96:85:45:45:1b:93:2e:48:90:c8:f6:ee:f3:
                    f2:d3:62:1a:e3:90:a6:4d:79:b4:aa:9d:fe:19:d6:
                    72:29:ba:6c:4b:43:4e:d0:69:c7:4d:3f:97:f2:9d:
                    ab:f3:fb:91:ff:e4:91:bd:cf:32:99:0e:80:08:d3:
                    40:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:96:38:79:D1:0C:3C:43:99:D2:B3:E2:B5:23:8E:49:C2:46:64:31
            X509v3 Authority Key Identifier:
                keyid:37:E4:37:4C:11:6E:3E:8A:DF:19:85:A1:95:77:CB:CA:01:1A:96:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/166/37E4374C116E3E8ADF1985A19577CBCA011A9695.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-Q3TBFuPorfGYWhlXfLygEalpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/166/34352e39342e35362e302f32342d3234203d3e20323132343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.94.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:75:72:62:ab:d4:08:29:1c:0e:a7:1c:37:1a:3d:63:e1:c8:
         e2:f2:48:71:5a:08:dd:4c:28:a6:39:ee:7c:54:65:27:42:f6:
         c0:6b:47:92:8e:9a:d6:d4:79:98:dc:a9:54:44:c7:36:6f:2f:
         51:ec:9e:a2:ec:29:73:f3:6e:43:ef:37:42:c1:a9:98:55:8c:
         c9:27:99:dc:ee:b6:25:bf:91:f5:75:ec:0e:12:0d:65:07:4f:
         8e:50:55:5f:1b:d4:e9:47:59:c0:ac:c1:d8:2b:27:ae:89:e6:
         1c:a4:50:4e:12:17:2e:52:23:6e:27:18:b3:13:53:93:cb:fe:
         a3:ff:4f:31:22:25:2b:e6:f5:e3:7b:51:66:78:e8:d9:05:d4:
         ed:ae:ac:74:d0:9e:7f:60:9c:d7:b1:bd:75:67:8a:32:99:8c:
         b2:49:e8:38:50:58:30:23:19:33:f8:96:13:8f:06:7e:20:37:
         97:c4:63:8e:d2:5c:13:10:21:22:ae:31:ae:91:9b:77:47:35:
         2f:3a:f5:ae:6f:d8:4f:9e:d9:f7:fc:ad:73:b4:14:db:8c:00:
         99:67:bc:f9:10:94:bd:4a:62:ce:2e:c7:49:e3:29:ae:19:24:
         6e:93:2c:fb:fb:b6:f5:0c:d7:b6:b3:16:4a:52:fd:db:42:13:
         d8:a0:c6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----