Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/34352e3133362e31372e302f32342d3234203d3e203333363936.roa
File:                     34352e3133362e31372e302f32342d3234203d3e203333363936.roa (raw, json)
Hash identifier:          Jn3D7OcmgfbFZpqvwNENp7DTT1XA83VlHGoI10xcBs8=
Subject key identifier:   83:F9:3D:54:96:D7:37:17:B0:52:B3:57:37:1A:E2:83:B7:B0:0F:D5
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       5DEA20542285607CC41586566DD97398DA41477A
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/34352e3133362e31372e302f32342d3234203d3e203333363936.roa
Signing time:             Thu 26 Jan 2023 11:48:41 +0000
ROA not before:           Thu 26 Jan 2023 11:43:41 +0000
ROA not after:            Thu 25 Jan 2024 11:48:41 +0000
asID:                     33696
IP address blocks:        45.136.17.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ea:20:54:22:85:60:7c:c4:15:86:56:6d:d9:73:98:da:41:47:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jan 26 11:43:41 2023 GMT
            Not After : Jan 25 11:48:41 2024 GMT
        Subject: CN=83F93D5496D73717B052B357371AE283B7B00FD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8f:e0:a6:27:10:1f:02:04:a7:6b:9f:9a:c0:
                    7d:da:e1:01:9c:2e:11:2b:7c:3c:bf:90:2f:bd:97:
                    de:49:52:57:6a:cc:d7:ba:fd:5f:19:1d:88:47:db:
                    68:a0:7e:7d:06:45:6b:11:08:17:f1:d7:7c:80:42:
                    d5:dd:dc:42:e4:91:18:14:dd:1b:5b:c0:9c:e9:8a:
                    dc:ca:d8:08:4d:dc:29:3c:42:33:56:f0:5b:37:57:
                    d4:88:b1:53:53:55:c6:18:97:42:94:23:e8:6b:87:
                    5a:7c:c0:de:e9:5c:f1:f4:13:12:36:2e:28:97:52:
                    7a:7b:b0:0f:f8:23:f1:52:ca:61:80:4a:7c:a7:c5:
                    bd:cf:52:ac:f6:b1:a5:73:d8:91:47:1b:8f:28:60:
                    c3:04:9a:e8:16:e1:3d:cf:e9:ad:03:f1:52:e8:86:
                    d9:95:72:a8:4c:91:13:d1:3e:84:be:a9:44:4b:28:
                    dd:68:1d:79:f1:a4:d0:ea:90:a7:f6:23:1e:22:57:
                    8b:6f:f6:cf:17:53:d5:35:b9:cd:62:4f:18:8a:81:
                    77:19:13:99:4a:ab:24:02:3d:97:f8:1b:9c:a3:bf:
                    1c:ae:0a:da:4e:b2:33:ac:74:bb:72:67:8f:f3:3b:
                    88:a3:99:b6:48:23:cf:26:fd:08:2e:18:46:0c:97:
                    9a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F9:3D:54:96:D7:37:17:B0:52:B3:57:37:1A:E2:83:B7:B0:0F:D5
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/34352e3133362e31372e302f32342d3234203d3e203333363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.136.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:b8:9f:d2:32:34:24:a6:07:ac:60:69:11:5e:e3:14:6d:ed:
         7b:e0:71:c4:70:20:23:c4:d6:46:ce:ac:13:09:47:f3:d0:34:
         a6:ef:29:c0:9f:7c:e7:21:b7:9e:57:34:76:79:c3:28:d5:95:
         de:ee:f6:72:af:58:1a:27:30:7e:8c:69:5f:f2:43:1e:d6:ba:
         82:1d:5f:ca:7e:d3:85:28:8b:e3:1f:bd:a9:94:dd:73:8c:a9:
         13:ee:8d:6f:99:bb:08:4b:43:3a:2f:47:30:22:b7:98:67:3d:
         87:9f:44:f1:64:ce:b3:97:bd:86:da:38:f1:32:13:6b:2b:82:
         3b:a1:12:f6:57:71:ff:63:85:9a:5c:be:19:97:11:68:02:29:
         6c:e1:3b:d2:81:17:1b:c2:75:04:de:a4:72:b5:53:5c:ce:4d:
         ac:da:cc:3b:61:25:ab:ce:b8:4c:11:4d:62:a6:6d:6e:d6:29:
         e7:31:88:15:2a:9c:ec:68:d6:c3:bb:e0:38:0b:1f:75:b5:7b:
         8d:03:c9:5d:3e:17:e1:18:15:63:21:d3:43:15:a5:64:f5:af:
         67:3c:33:33:9b:59:e2:a6:3a:75:af:4f:cf:ec:44:0b:c7:af:
         53:a9:5e:80:28:dc:fe:4b:30:4a:7e:0c:13:d0:1b:4b:15:82:
         8c:e9:5b:af
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUXeogVCKFYHzEFYZWbdlzmNpBR3owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMzAxMjYxMTQzNDFaFw0yNDAxMjUxMTQ4NDFaMDMxMTAvBgNV
BAMTKDgzRjkzRDU0OTZENzM3MTdCMDUyQjM1NzM3MUFFMjgzQjdCMDBGRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyj+CmJxAfAgSna5+awH3a4QGc
LhErfDy/kC+9l95JUldqzNe6/V8ZHYhH22igfn0GRWsRCBfx13yAQtXd3ELkkRgU
3RtbwJzpitzK2AhN3Ck8QjNW8Fs3V9SIsVNTVcYYl0KUI+hrh1p8wN7pXPH0ExI2
LiiXUnp7sA/4I/FSymGASnynxb3PUqz2saVz2JFHG48oYMMEmugW4T3P6a0D8VLo
htmVcqhMkRPRPoS+qURLKN1oHXnxpNDqkKf2Ix4iV4tv9s8XU9U1uc1iTxiKgXcZ
E5lKqyQCPZf4G5yjvxyuCtpOsjOsdLtyZ4/zO4ijmbZII88m/QguGEYMl5p7AgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUg/k9VJbXNxewUrNXNxrig7ewD9UwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4Zq
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zNDM1MmUzMTMzMzYyZTMxMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzMz
MzYzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALYgRMA0GCSqGSIb3DQEBCwUAA4IBAQC7uJ/SMjQk
pgesYGkRXuMUbe174HHEcCAjxNZGzqwTCUfz0DSm7ynAn3znIbeeVzR2ecMo1ZXe
7vZyr1gaJzB+jGlf8kMe1rqCHV/KftOFKIvjH72plN1zjKkT7o1vmbsIS0M6L0cw
IreYZz2Hn0TxZM6zl72G2jjxMhNrK4I7oRL2V3H/Y4WaXL4ZlxFoAils4TvSgRcb
wnUE3qRytVNczk2s2sw7YSWrzrhMEU1ipm1u1innMYgVKpzsaNbDu+A4Cx91tXuN
A8ldPhfhGBVjIdNDFaVk9a9nPDMzm1nipjp1r0/P7EQLx69TqV6AKNz+SzBKfgwT
0BtLFYKM6Vuv
-----END CERTIFICATE-----