Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3234322e302f32342d3332203d3e203531313637.roa
File:                     3138352e3138372e3234322e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          M4vuWbaakCkbSFntOoL9V4oevlItdQ/uNbP+Koib1GM=
Subject key identifier:   EC:88:4B:76:E7:0B:D9:D0:EB:96:9C:59:B3:F9:5F:F0:CB:85:10:F4
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       34AD99B4744F75565584F766527A6BA1879187C0
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3234322e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:23 +0000
ROA not before:           Sat 22 Oct 2022 04:28:23 +0000
ROA not after:            Sat 21 Oct 2023 04:33:23 +0000
asID:                     51167
IP address blocks:        185.187.242.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ad:99:b4:74:4f:75:56:55:84:f7:66:52:7a:6b:a1:87:91:87:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:23 2022 GMT
            Not After : Oct 21 04:33:23 2023 GMT
        Subject: CN=EC884B76E70BD9D0EB969C59B3F95FF0CB8510F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:02:4a:e6:b2:7c:40:de:b8:2e:c3:d5:12:d9:
                    cd:2c:35:9b:c4:52:b0:bd:64:80:25:a3:be:01:f4:
                    22:56:ff:d6:a4:d7:4e:95:a5:fd:21:fd:5d:96:e8:
                    1c:54:28:19:f2:a9:80:ce:18:52:fb:62:64:f2:40:
                    a1:ba:3f:47:d0:1a:1a:ca:97:cd:01:2e:55:2a:98:
                    0a:cc:66:be:62:d8:60:e5:bb:5f:24:1f:f5:63:9e:
                    78:0e:65:d9:49:85:28:69:9d:b4:2f:ff:c7:e4:fb:
                    2e:38:3c:e0:17:8c:a9:6d:2d:71:e1:24:67:72:78:
                    aa:bc:13:9a:6f:d1:72:b2:e3:e8:2d:f7:48:85:62:
                    9c:94:ce:1e:73:2e:ec:d5:ce:e4:fa:51:d5:54:c5:
                    b9:89:e6:e8:90:fa:47:e4:49:0b:b3:ac:60:67:12:
                    11:fe:29:71:21:a4:a8:be:36:a0:93:b3:3e:c3:5e:
                    2b:31:8e:be:c7:3b:29:62:b9:86:e3:5a:1e:8e:a9:
                    01:a2:b1:b8:97:2b:e8:d9:20:7e:85:d5:51:3b:d1:
                    9c:70:86:50:4a:d3:f1:05:74:39:ff:a6:af:2a:f6:
                    bb:e7:c0:8a:4d:0d:1a:3e:26:6c:8f:d3:92:a2:49:
                    87:5c:89:30:db:e3:5b:26:f2:84:e5:c9:39:ab:92:
                    ed:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:88:4B:76:E7:0B:D9:D0:EB:96:9C:59:B3:F9:5F:F0:CB:85:10:F4
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3234322e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:dc:94:08:e5:69:53:ca:9a:82:3f:02:fd:d7:38:46:c0:a4:
         e0:cf:68:a8:b5:cc:7a:63:de:0e:68:1b:de:7c:df:bb:a7:ef:
         d1:40:b2:b0:97:4f:b9:c7:0d:5e:37:65:9f:3e:cd:f9:b7:f1:
         30:12:ef:5a:b1:e6:8d:bc:fd:ca:9a:4e:7d:f6:d1:d2:98:44:
         d4:9e:ad:a5:03:6d:bf:94:a8:bc:38:d9:0f:58:ef:2a:6f:35:
         3b:f9:b2:56:53:a5:e0:c4:9b:f4:07:88:ff:6e:a9:d2:cc:25:
         17:54:51:2c:9e:e0:13:0e:d0:9e:e7:35:a7:51:8f:cb:f6:e3:
         a1:61:06:7a:a6:af:db:d5:34:97:bd:2d:09:0d:93:45:73:93:
         e2:1c:c7:50:4a:95:59:a0:e7:9b:03:8a:1f:db:3e:73:61:00:
         cf:1a:b6:48:ca:60:56:4c:b9:0f:0b:a8:5d:3a:5c:32:06:d8:
         a2:58:bc:f3:3b:f5:bd:b5:c6:f4:ab:a2:27:0f:43:a0:7b:59:
         7f:e4:27:fb:7f:d9:16:71:d4:e5:7a:37:0d:5d:1a:a8:4a:09:
         14:3c:46:e6:81:39:56:b4:4f:fd:b4:93:24:eb:b4:c0:65:d7:
         47:92:53:8e:f0:5b:62:ad:a3:c4:dd:36:13:ef:60:c1:97:c7:
         02:15:dd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----