Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/39/34352e3133372e3139332e302f32342d3234203d3e20323037373837.roa
File:                     34352e3133372e3139332e302f32342d3234203d3e20323037373837.roa (raw, json)
Hash identifier:          VOeHFYI/jk65PmNMRwxYZz2zj/9by9cGESjGtvKpQeQ=
Subject key identifier:   B8:F3:9F:A8:A2:9E:76:1B:76:5E:0B:7F:84:B3:F0:8D:DD:79:AF:1B
Certificate issuer:       /CN=101d22f56ee5531cc92d0861beae087dc3b08ec0
Certificate serial:       0E1417264773DDCD6BCD37DA05118F5DB5B2C0B0
Authority key identifier: 10:1D:22:F5:6E:E5:53:1C:C9:2D:08:61:BE:AE:08:7D:C3:B0:8E:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EB0i9W7lUxzJLQhhvq4IfcOwjsA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/39/34352e3133372e3139332e302f32342d3234203d3e20323037373837.roa
Signing time:             Mon 30 Nov 2020 19:13:45 +0000
ROA not before:           Mon 30 Nov 2020 19:08:45 +0000
ROA not after:            Mon 29 Nov 2021 19:13:45 +0000
asID:                     207787
IP address blocks:        45.137.193.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:14:17:26:47:73:dd:cd:6b:cd:37:da:05:11:8f:5d:b5:b2:c0:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101d22f56ee5531cc92d0861beae087dc3b08ec0
        Validity
            Not Before: Nov 30 19:08:45 2020 GMT
            Not After : Nov 29 19:13:45 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:86:23:ac:d1:1a:3c:eb:00:65:e7:ff:64:bc:
                    bb:c2:fe:f6:b5:4b:da:1d:21:02:65:16:f7:de:ba:
                    fb:9d:a4:8c:df:e4:15:8d:42:a0:86:c9:30:48:6d:
                    4a:21:65:64:48:8d:05:8f:51:19:5a:29:bd:80:df:
                    e5:d5:56:b7:53:4a:4e:79:a3:6c:64:1f:ec:c3:18:
                    aa:e0:4d:af:e4:21:36:a0:4c:4e:50:54:bf:29:c5:
                    9f:e1:81:f6:e4:96:12:ef:43:64:c2:fe:3d:e0:55:
                    cd:90:ca:9c:ce:74:7a:1e:ce:8a:bc:2b:23:75:cb:
                    72:30:ae:c2:27:4b:62:94:12:a3:94:20:d3:be:73:
                    66:28:e0:13:bc:a9:12:89:66:43:83:38:8b:08:ae:
                    4d:1b:0c:da:16:7c:9f:fb:a1:40:f1:2c:be:9d:71:
                    6f:46:89:30:43:a1:95:d5:23:21:6d:95:ce:0b:ba:
                    07:8d:df:fd:b3:6d:ef:a2:34:5f:1a:fc:35:d3:52:
                    37:c3:88:38:0d:e1:5b:b5:19:c0:74:98:75:fc:3d:
                    b4:7e:55:38:58:14:73:5e:d3:bb:15:53:2b:56:f9:
                    f3:01:de:83:8e:b4:70:06:61:76:59:93:d1:2c:02:
                    48:96:03:98:37:3d:91:c1:77:71:0c:d1:da:31:99:
                    c1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F3:9F:A8:A2:9E:76:1B:76:5E:0B:7F:84:B3:F0:8D:DD:79:AF:1B
            X509v3 Authority Key Identifier:
                keyid:10:1D:22:F5:6E:E5:53:1C:C9:2D:08:61:BE:AE:08:7D:C3:B0:8E:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/39/101D22F56EE5531CC92D0861BEAE087DC3B08EC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EB0i9W7lUxzJLQhhvq4IfcOwjsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/39/34352e3133372e3139332e302f32342d3234203d3e20323037373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:a1:51:04:66:63:ba:a5:1e:e7:91:2a:0f:68:b9:ef:56:96:
         e8:c8:bd:28:a4:78:03:61:0a:87:58:0c:3d:3a:48:ba:9c:ce:
         7a:57:c0:04:56:66:62:b9:64:29:18:06:f9:8c:1a:db:7c:cd:
         47:3e:40:0b:56:d5:70:60:24:43:98:7e:95:25:b7:81:01:3c:
         76:70:dd:0d:e0:3b:09:80:56:b1:78:15:ab:0a:8a:be:04:9c:
         27:65:9b:01:10:25:5f:13:fe:14:32:e7:49:b3:ca:99:c1:1e:
         15:4d:36:96:58:68:2f:2a:83:8a:d7:ae:31:cd:ea:1d:b3:d7:
         b7:2f:b0:68:11:f5:2b:2b:3d:0e:9a:b7:64:69:d3:9d:3f:fe:
         ee:40:fa:9b:d0:b9:11:ec:e5:e6:d1:f8:34:b4:1c:db:41:78:
         51:4c:df:9b:ce:9c:46:e5:2d:2d:2e:e9:e9:87:54:72:24:40:
         19:75:7d:95:e7:5c:32:a6:a6:84:dd:0f:3c:a6:1f:3c:c3:96:
         06:24:4d:55:29:dd:94:d2:0e:a2:9d:4a:dd:63:45:70:e2:0d:
         b7:62:c1:e1:78:a6:e8:cb:87:6b:27:c0:2d:dc:b0:1d:e4:6d:
         01:4e:91:52:f0:2c:f5:ab:67:eb:ae:4c:dd:c0:9b:7f:52:c1:
         44:99:da:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----