Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e39302e3232322e302f32342d3234203d3e20333936303733.roa
File:                     34352e39302e3232322e302f32342d3234203d3e20333936303733.roa (raw, json)
Hash identifier:          BHEQUzChGXmlGip491oEcH56oxoBLUko4TDK/1Z545s=
Subject key identifier:   DC:2B:2C:38:05:F7:03:EE:8F:AB:6C:80:A8:35:3D:51:7A:5A:C8:24
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       1D6028E40C338E1C7DC55FA7D61E5FBC2ABAB4B6
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e39302e3232322e302f32342d3234203d3e20333936303733.roa
Signing time:             Sat 22 Oct 2022 04:33:32 +0000
ROA not before:           Sat 22 Oct 2022 04:28:32 +0000
ROA not after:            Sat 21 Oct 2023 04:33:32 +0000
asID:                     396073
IP address blocks:        45.90.222.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:60:28:e4:0c:33:8e:1c:7d:c5:5f:a7:d6:1e:5f:bc:2a:ba:b4:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:32 2022 GMT
            Not After : Oct 21 04:33:32 2023 GMT
        Subject: CN=DC2B2C3805F703EE8FAB6C80A8353D517A5AC824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d6:b8:09:00:75:2a:64:7b:d6:ea:3f:31:45:
                    2d:38:45:b8:c6:1a:cd:d2:2a:64:ad:1e:d6:bc:7e:
                    03:13:bf:06:34:14:67:35:fc:85:72:6c:58:13:1e:
                    4d:bd:04:26:aa:4b:0c:9a:b7:ed:09:37:60:15:c9:
                    46:32:1e:f8:cd:3c:78:f1:9a:8c:16:d8:30:1b:34:
                    7b:6f:cf:85:5d:bc:ce:da:6d:c1:70:1c:c0:1c:da:
                    33:4d:62:1f:ec:1e:14:1d:f3:a6:5b:1c:8f:dc:b6:
                    43:50:65:22:71:77:03:ac:8a:ad:22:de:28:ed:64:
                    fc:cc:ac:c7:51:2c:69:12:bd:20:df:f1:08:f7:cc:
                    8a:03:e9:06:d1:c0:0c:56:32:3d:75:5f:99:e4:3c:
                    fb:0f:0d:42:10:d8:eb:a6:ff:4b:1c:13:f6:dc:0e:
                    07:12:21:9f:50:e6:ab:e3:51:d9:2e:5c:75:5c:64:
                    64:04:43:ef:87:e8:38:3e:a7:ae:71:8b:8b:80:71:
                    2c:cb:8d:c5:c4:c0:9e:97:ef:2e:44:b0:c7:29:4d:
                    0a:43:17:fa:fa:70:9f:b4:a5:a4:66:9c:b3:12:6b:
                    74:df:61:b1:f0:55:2e:7c:cc:65:4b:a4:3f:52:5f:
                    f0:2c:a0:23:d4:0b:95:08:49:c2:23:95:f7:ca:f4:
                    b7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2B:2C:38:05:F7:03:EE:8F:AB:6C:80:A8:35:3D:51:7A:5A:C8:24
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e39302e3232322e302f32342d3234203d3e20333936303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.90.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:15:b6:b3:f2:d6:23:72:5f:92:63:d5:1d:15:13:25:75:3e:
         3b:21:e5:4f:d1:fa:e4:11:1c:ce:51:60:06:16:7a:ce:02:ee:
         2d:26:fd:5a:99:4a:77:26:13:2f:94:ff:16:08:94:ce:2d:e0:
         eb:cf:56:b1:6e:3e:77:f0:8e:d6:a2:f3:92:62:c6:e8:c7:80:
         44:a6:a4:aa:fb:50:cd:6d:de:fc:57:a9:ca:b6:da:7c:62:ce:
         e6:a7:16:80:e8:c3:ad:95:47:fe:d1:7f:1d:59:bf:0d:0b:bb:
         21:88:8c:91:cf:82:a9:8d:d6:cb:2c:96:50:2b:87:24:91:1e:
         cc:0c:8c:9b:69:58:26:77:e9:3d:e0:01:78:c4:22:c9:c3:d4:
         42:89:7b:de:71:8a:95:fc:f5:5c:dd:d6:3d:e0:11:34:34:ae:
         da:c0:4a:4f:06:16:53:1a:17:e8:33:71:b7:52:da:09:f5:fc:
         51:5f:79:73:b8:9b:da:d7:39:60:db:61:46:a0:b7:f6:53:5a:
         6d:5c:f3:2f:02:a2:f1:a6:b8:0c:89:37:76:7f:b2:b6:2b:a0:
         1d:f4:b3:5f:39:2b:a6:68:09:7f:02:e7:54:f1:ca:b5:bc:32:
         8e:36:e0:a2:69:65:f8:25:40:f8:27:d5:08:d3:38:5b:7d:72:
         99:5c:48:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----