Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3231332e32372e302f32342d3332203d3e203531313637.roa
File:                     3138352e3231332e32372e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          ZTVjB5T76FshYwqUPu0TOSAiHur4YDTxll7menpeTyo=
Subject key identifier:   8B:09:76:24:60:A7:50:C6:5A:3D:ED:86:A8:2D:35:CE:33:40:47:C4
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       24CD78D671512619E822F1850811E23B9797F5D3
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3231332e32372e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:34:06 +0000
ROA not before:           Sat 22 Oct 2022 04:29:06 +0000
ROA not after:            Sat 21 Oct 2023 04:34:06 +0000
asID:                     51167
IP address blocks:        185.213.27.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:cd:78:d6:71:51:26:19:e8:22:f1:85:08:11:e2:3b:97:97:f5:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Oct 22 04:29:06 2022 GMT
            Not After : Oct 21 04:34:06 2023 GMT
        Subject: CN=8B09762460A750C65A3DED86A82D35CE334047C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4e:1f:e7:51:a7:42:c4:24:a2:c4:e7:63:eb:
                    81:96:03:09:1f:b3:9a:36:5a:96:19:c2:05:03:fd:
                    80:3c:ba:c0:70:0a:1a:02:a5:69:d1:af:3b:cf:fa:
                    41:20:7f:35:70:db:43:1c:ef:47:f1:5d:69:6a:10:
                    2e:6c:fb:e8:81:07:7a:37:67:91:ed:4b:b0:9f:77:
                    0f:5e:a4:b1:24:de:e2:c6:b6:dc:04:e4:a9:a6:c7:
                    e5:62:40:a8:32:2a:83:4b:3c:f2:20:4d:50:19:37:
                    30:03:cb:de:b0:bf:52:17:4e:36:fe:f6:c5:d0:8d:
                    33:34:6c:14:ac:98:b5:ac:cd:c6:76:db:5d:b7:da:
                    d2:e5:b8:d7:5a:9c:d8:69:94:0e:cd:dc:49:39:7b:
                    db:88:4f:15:ff:85:c8:0e:10:ad:58:66:9d:a6:d7:
                    15:39:b4:70:4f:39:a8:55:74:f5:ef:84:6c:86:1d:
                    ec:a9:5e:b1:dc:82:03:21:03:9e:f2:8d:05:14:e8:
                    10:4b:86:27:67:0b:79:b0:b0:e3:d2:ad:23:a7:2d:
                    34:71:d2:71:a1:fa:42:6b:6b:86:7d:59:ca:e0:ac:
                    c0:73:ee:47:26:95:08:dc:e2:5b:1c:cd:80:52:40:
                    d8:02:9e:5f:ab:38:9a:9b:31:96:d0:ef:42:8c:b3:
                    19:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:09:76:24:60:A7:50:C6:5A:3D:ED:86:A8:2D:35:CE:33:40:47:C4
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3231332e32372e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.213.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:40:68:0a:db:b8:82:45:f4:08:3e:d3:c9:77:a9:53:c3:38:
         4d:64:a7:8e:fa:26:c5:bb:76:5b:3c:46:20:cf:52:ee:5b:41:
         cf:30:3e:9e:14:73:34:7b:96:4d:99:9c:f3:10:b4:15:2b:8e:
         f4:40:6f:1e:86:11:1e:32:f0:fc:0c:3d:04:47:88:25:99:34:
         19:d9:3d:75:e2:9e:7b:2f:6d:1a:3e:e3:63:fa:6f:67:36:e0:
         f6:97:4f:de:fa:a7:87:48:1e:e2:c4:e1:a2:cd:ae:a2:27:35:
         ab:48:32:78:04:68:9f:2b:cf:f4:65:ea:b9:3d:19:08:5c:49:
         54:bf:34:3c:b4:e1:17:c5:50:4a:fb:87:34:c1:32:6b:d2:1a:
         dc:75:7d:a1:64:94:20:7a:01:ce:e0:37:79:27:c6:eb:d7:ff:
         40:c0:6b:dd:28:56:b8:04:60:a7:66:c9:1f:c8:a6:3a:f0:01:
         05:cd:04:0a:49:9c:22:1d:54:3d:e5:1c:6d:5f:08:b4:62:c5:
         c6:24:f2:0a:e0:c5:6f:b1:15:41:1a:62:ed:e6:8b:9b:fe:0e:
         81:8b:7f:96:f9:90:b1:82:4a:59:61:73:d6:21:c3:d2:a8:39:
         9a:89:0d:13:56:a9:bc:d1:49:4f:68:3c:32:e5:e3:86:43:db:
         76:b9:51:0f
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUJM141nFRJhnoIvGFCBHiO5eX9dMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJkMjljOTk2YWJjYzcyYzcyMjc5ZWY3ODk4Nzk1MWI4
MjVhZTQwMDAeFw0yMjEwMjIwNDI5MDZaFw0yMzEwMjEwNDM0MDZaMDMxMTAvBgNV
BAMTKDhCMDk3NjI0NjBBNzUwQzY1QTNERUQ4NkE4MkQzNUNFMzM0MDQ3QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHTh/nUadCxCSixOdj64GWAwkf
s5o2WpYZwgUD/YA8usBwChoCpWnRrzvP+kEgfzVw20Mc70fxXWlqEC5s++iBB3o3
Z5HtS7Cfdw9epLEk3uLGttwE5Kmmx+ViQKgyKoNLPPIgTVAZNzADy96wv1IXTjb+
9sXQjTM0bBSsmLWszcZ221232tLluNdanNhplA7N3Ek5e9uITxX/hcgOEK1YZp2m
1xU5tHBPOahVdPXvhGyGHeypXrHcggMhA57yjQUU6BBLhidnC3mwsOPSrSOnLTRx
0nGh+kJra4Z9WcrgrMBz7kcmlQjc4lsczYBSQNgCnl+rOJqbMZbQ70KMsxkHAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUiwl2JGCnUMZaPe2GqC01zjNAR8QwHwYDVR0j
BBgwFoAUItKcmWq8xyxyJ573iYeVG4Ja5AAwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzMvMjJEMjlDOTk2QUJDQzcyQzcyMjc5RUY3ODk4Nzk1MUI4
MjVBRTQwMC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0l0S2NtV3E4eHl4eUo1
NzNpWWVWRzRKYTVBQS5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
My8zMTM4MzUyZTMyMzEzMzJlMzIzNzJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1
MzEzMTM2Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC51RswDQYJKoZIhvcNAQELBQADggEBAMJAaArb
uIJF9Ag+08l3qVPDOE1kp476JsW7dls8RiDPUu5bQc8wPp4UczR7lk2ZnPMQtBUr
jvRAbx6GER4y8PwMPQRHiCWZNBnZPXXinnsvbRo+42P6b2c24PaXT976p4dIHuLE
4aLNrqInNatIMngEaJ8rz/Rl6rk9GQhcSVS/NDy04RfFUEr7hzTBMmvSGtx1faFk
lCB6Ac7gN3knxuvX/0DAa90oVrgEYKdmyR/IpjrwAQXNBApJnCIdVD3lHG1fCLRi
xcYk8grgxW+xFUEaYu3mi5v+DoGLf5b5kLGCSllhc9Yhw9KoOZqJDRNWqbzRSU9o
PDLl44ZD23a5UQ8=
-----END CERTIFICATE-----