Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139342e3231362e302f32332d3332203d3e203531313637.roa
File:                     3138352e3139342e3231362e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier:          JNgDmPmLwUB6lTmhi9GRee2nQhsGsV2QUu8MfVOvgeY=
Subject key identifier:   5E:34:43:DE:8F:14:F1:D8:91:CB:27:03:5D:D6:95:0B:D2:BD:8C:3A
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       1A5E2110E53973D4FB9619C827C7D6E9889D200A
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139342e3231362e302f32332d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:13 +0000
ROA not before:           Sat 22 Oct 2022 04:28:13 +0000
ROA not after:            Sat 21 Oct 2023 04:33:13 +0000
asID:                     51167
IP address blocks:        185.194.216.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:5e:21:10:e5:39:73:d4:fb:96:19:c8:27:c7:d6:e9:88:9d:20:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:13 2022 GMT
            Not After : Oct 21 04:33:13 2023 GMT
        Subject: CN=5E3443DE8F14F1D891CB27035DD6950BD2BD8C3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:69:ec:0b:39:fe:6b:c9:95:0d:18:f4:cd:c3:
                    ea:8f:41:f9:fb:c0:9f:dd:43:bd:fc:ab:ef:b7:fe:
                    02:78:3d:9a:4d:aa:f1:43:84:db:f5:8f:3b:8e:32:
                    f7:f0:dc:a9:39:b2:5e:0a:2f:24:bc:61:c3:62:7d:
                    58:78:ee:20:02:a9:ef:d9:43:c0:78:eb:cd:a7:1f:
                    fe:20:a2:26:c1:80:6e:9d:de:2e:d2:3a:60:9d:97:
                    d3:7a:07:b9:52:ce:e5:6e:dc:43:9c:09:ca:55:10:
                    66:8f:51:df:72:58:33:1f:d3:e8:bf:62:cc:f3:99:
                    e7:78:e0:eb:a3:b2:58:23:ef:ff:18:d4:f6:bd:16:
                    e2:be:a4:23:99:e6:6e:33:a8:a4:94:6c:ef:58:95:
                    e9:8d:72:e7:8d:a8:fe:a9:3a:85:e0:4b:09:4f:81:
                    4a:82:34:62:28:9c:a4:a3:a2:70:58:c7:e5:08:6c:
                    4d:bc:f7:8e:96:2c:f4:ac:30:ea:ac:5c:29:18:50:
                    71:cc:f7:da:03:cf:b2:9b:a9:07:97:b8:5f:2e:1e:
                    c8:06:20:dc:3e:15:28:e0:a7:3d:67:40:27:e9:c8:
                    39:ac:08:c4:68:8d:62:09:9e:8e:a1:54:66:a4:01:
                    f3:41:02:64:d0:9a:88:18:7a:fa:73:66:a0:22:cf:
                    eb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:34:43:DE:8F:14:F1:D8:91:CB:27:03:5D:D6:95:0B:D2:BD:8C:3A
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139342e3231362e302f32332d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.194.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:9a:7e:9d:2b:55:0c:29:1c:9d:ca:03:f4:17:31:f5:86:7d:
         61:06:e6:5d:6f:b8:79:f0:8e:47:01:6f:c5:6c:33:ab:0a:18:
         4e:38:f5:e8:dd:bb:2c:11:5d:45:a1:fd:9c:43:96:a4:d9:6c:
         91:df:e5:14:86:70:58:89:2a:71:0c:67:bf:a5:d0:b8:cd:7a:
         88:c5:32:55:4b:d2:43:14:6a:04:58:87:61:15:25:f6:25:db:
         0d:38:b6:03:13:df:f4:b3:49:80:dd:7b:ea:57:1e:af:b4:3e:
         4a:34:fd:f1:e2:e1:3b:ed:19:3d:f0:db:ba:e0:49:43:bc:29:
         5f:31:ba:be:96:ab:76:da:7c:7e:f3:eb:fd:0c:5f:75:cf:a3:
         31:00:0a:8c:55:79:91:fb:a1:bd:28:3c:2a:e1:cc:39:71:55:
         cb:80:ea:9c:98:fc:ec:ab:0a:a1:f7:61:53:34:8a:5a:e4:22:
         ac:2c:89:e7:47:33:8c:6e:85:49:61:b3:65:12:cb:ee:4d:20:
         24:9c:ad:00:66:b3:40:9b:8b:eb:ce:d9:dc:48:65:32:35:2f:
         70:bc:9f:f2:a4:f7:9b:ee:87:42:7d:f8:7d:06:bc:2b:06:1e:
         93:6b:83:60:58:ae:2c:70:bf:a2:ef:61:3b:43:6c:5c:59:97:
         15:f5:7a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----