Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3138332e3138332e302f32342d3234203d3e20323034313730.roa
File:                     3138352e3138332e3138332e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier:          CPf3SSSTzt0RI9HlUy0qOu/YbwUMeTVmR67uiA7h/HI=
Subject key identifier:   98:71:AB:1A:A7:63:A6:E3:1C:7D:5B:7A:58:60:79:8A:AE:A6:25:8A
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       1FAF86D54EEAE77C3CDFC3D73F9B51CAEA5BC26C
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3138332e3138332e302f32342d3234203d3e20323034313730.roa
Signing time:             Sat 22 Oct 2022 04:34:07 +0000
ROA not before:           Sat 22 Oct 2022 04:29:07 +0000
ROA not after:            Sat 21 Oct 2023 04:34:07 +0000
asID:                     204170
IP address blocks:        185.183.183.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:af:86:d5:4e:ea:e7:7c:3c:df:c3:d7:3f:9b:51:ca:ea:5b:c2:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Oct 22 04:29:07 2022 GMT
            Not After : Oct 21 04:34:07 2023 GMT
        Subject: CN=9871AB1AA763A6E31C7D5B7A5860798AAEA6258A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:d7:9b:5e:c7:47:69:d2:75:18:f8:d4:44:44:
                    b3:f8:59:84:17:e0:14:cc:50:cc:b8:d5:c1:3e:e3:
                    ed:03:e2:9e:c8:b6:c2:b9:8e:c3:ad:79:7f:8b:e1:
                    9a:43:6b:bb:63:90:f3:98:cb:66:81:7d:ce:8d:ec:
                    ca:c1:01:f8:ed:12:e6:02:dd:11:46:a7:d7:d2:79:
                    de:02:5c:ee:53:a7:09:49:0a:22:c5:f9:5e:7e:74:
                    5e:83:d6:69:0f:19:91:4e:7e:69:85:0d:ab:a6:3e:
                    f2:ab:e8:ef:97:6e:fd:53:53:d3:e2:70:46:92:da:
                    8f:2e:ac:3f:96:b5:83:98:67:bc:c6:bc:12:aa:6a:
                    f7:d0:c1:44:6a:59:dd:0a:5e:18:4b:cf:a1:0d:4a:
                    6a:13:67:7f:99:9d:6b:33:fc:c0:69:7c:2d:d6:2d:
                    c0:58:0c:30:0e:5d:d5:f2:44:ed:d7:ae:ea:29:9b:
                    71:0c:00:89:62:98:71:16:5c:30:3b:f3:25:09:58:
                    1e:8a:56:eb:dd:fd:09:77:3e:1e:86:73:ae:fc:8c:
                    25:26:d5:c6:ba:20:e6:57:08:47:41:da:bb:ca:ab:
                    68:8b:d5:07:da:89:da:a6:ec:90:4a:2e:54:4d:02:
                    63:30:3e:89:42:34:d8:66:0e:fb:66:58:8b:67:4b:
                    2f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:71:AB:1A:A7:63:A6:E3:1C:7D:5B:7A:58:60:79:8A:AE:A6:25:8A
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3138332e3138332e302f32342d3234203d3e20323034313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.183.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:50:43:d3:53:98:ba:b8:0a:f1:49:cf:d0:5e:b5:b1:7c:b1:
         bf:5e:3c:78:15:f9:51:e4:f2:ed:75:3e:d9:c3:c2:ac:95:c9:
         6f:e4:16:74:8a:9c:f4:2d:99:b1:5f:58:36:bf:e3:96:19:5a:
         a3:ac:45:0f:23:71:f8:9b:3f:34:07:5a:c0:bb:5b:d6:dd:cd:
         a8:b3:a8:5e:07:c2:21:48:eb:37:e6:2a:94:e8:9b:ff:27:89:
         6d:f9:58:7f:ed:5b:c3:17:05:07:9d:ca:62:33:0a:39:bb:d6:
         ea:c9:c7:85:7f:9e:ea:50:50:1a:4a:72:5f:9f:7f:96:e4:43:
         a8:22:4d:bb:d5:64:aa:79:d2:be:8b:d0:9e:ce:34:43:09:1a:
         21:03:e8:4e:8c:67:c6:cc:b4:69:9e:ae:07:1b:bc:d7:86:82:
         01:cb:fb:81:33:35:44:e2:a5:54:f0:5b:65:e6:7d:1b:85:f3:
         f2:84:9b:1b:68:86:8a:56:f9:2b:c1:dc:9e:51:20:f8:52:70:
         ea:3a:a5:e4:2e:cd:a8:2e:f0:a3:51:9c:3e:c5:39:3d:e3:b0:
         eb:89:8c:04:17:2b:54:39:32:bc:38:50:6f:5b:88:10:4d:c8:
         3d:79:de:09:62:29:71:6d:2b:8b:11:5a:5b:a2:67:a4:97:fc:
         44:ec:49:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----