Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139342e3231382e302f32332d3332203d3e203531313637.roa
File:                     3138352e3139342e3231382e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier:          8+01GWurmE0TKSlVabU9xnEIzvuCUod0wgmOP9Johf8=
Subject key identifier:   99:0D:69:61:E1:C8:40:6F:57:7C:EA:77:97:02:60:EB:6B:B9:D7:5D
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       71C783A70D725B294F99CDB2526D0861030386D9
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139342e3231382e302f32332d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:24 +0000
ROA not before:           Sat 22 Oct 2022 04:28:24 +0000
ROA not after:            Sat 21 Oct 2023 04:33:24 +0000
asID:                     51167
IP address blocks:        185.194.218.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c7:83:a7:0d:72:5b:29:4f:99:cd:b2:52:6d:08:61:03:03:86:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:24 2022 GMT
            Not After : Oct 21 04:33:24 2023 GMT
        Subject: CN=990D6961E1C8406F577CEA77970260EB6BB9D75D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:16:55:9d:16:95:48:5d:74:46:78:2c:7b:d9:
                    81:0b:44:9e:84:91:4a:c9:ea:32:7e:c4:e3:36:79:
                    b2:65:1a:c5:bb:ac:e0:be:81:df:03:0e:82:01:1e:
                    2a:00:a2:53:f9:e6:cd:79:13:16:25:07:b8:12:fc:
                    1c:59:0b:8c:85:b2:31:13:81:7d:fc:3c:f8:09:cf:
                    a3:36:66:83:94:81:cb:13:05:b1:f9:d0:4a:c1:11:
                    60:1c:8b:e9:20:c2:09:db:de:9a:e5:85:fd:6d:b5:
                    a6:8c:e5:e7:94:f4:5d:32:d9:7b:0c:ba:76:ae:41:
                    8b:c3:35:05:06:16:b1:d0:a3:a2:1d:94:c4:c8:c7:
                    d6:13:c5:ba:39:c1:f4:47:7d:63:fc:55:09:50:35:
                    77:55:91:3e:a0:0e:ea:82:2b:72:99:3c:2f:b3:f7:
                    5e:11:de:8d:0f:b4:a6:89:f2:9f:68:90:12:69:e7:
                    9e:74:7c:1b:39:30:85:01:f5:7b:c9:44:38:a4:52:
                    66:e9:84:3e:0f:1e:bc:e1:ac:2e:01:20:26:5d:27:
                    14:4c:c3:79:27:e8:37:6b:18:ea:b4:95:d3:a0:c9:
                    ca:81:64:f6:9b:77:16:d2:7d:14:7b:54:4c:b5:00:
                    c5:88:e9:60:0b:eb:f6:88:9e:78:d2:65:36:96:5c:
                    d3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0D:69:61:E1:C8:40:6F:57:7C:EA:77:97:02:60:EB:6B:B9:D7:5D
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139342e3231382e302f32332d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.194.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:d3:60:f5:4e:12:a5:aa:6c:01:a1:a2:f9:81:d9:28:4b:8b:
         d7:c3:61:ca:0a:90:3a:e1:3a:74:3c:7d:43:97:09:dd:cb:25:
         3c:45:db:23:ba:fb:d5:9b:8f:0e:a1:a7:a9:ad:7c:69:13:38:
         70:8e:f5:cd:4a:3f:a6:19:77:6c:f5:7c:2b:9e:13:5e:1f:30:
         27:14:f6:15:d0:c7:32:2d:74:6a:3e:5f:91:9f:4e:2f:31:4f:
         e5:83:a0:60:b8:72:ea:c6:94:bf:52:b6:46:0e:45:51:2c:16:
         29:01:ac:da:99:fe:6a:16:d3:1a:f7:f2:7c:ab:54:66:9b:90:
         ac:39:bf:71:ab:b6:26:e3:c5:cc:b2:78:55:fb:88:ae:a7:bf:
         8e:c4:26:da:46:38:6c:b5:71:e7:e7:72:0c:91:15:fe:b3:90:
         a6:1b:a1:a3:f9:24:ab:5c:6d:2d:35:ed:e7:86:0c:11:a8:e6:
         1f:ec:7c:57:6c:fd:80:d3:9b:b8:06:c2:ce:33:21:75:94:55:
         f6:c5:75:2d:f6:12:49:50:90:39:9b:9b:46:58:7f:23:46:6d:
         7f:e5:6f:ec:16:3a:46:60:12:85:c2:b0:a3:81:3f:da:44:28:
         9b:19:4c:ac:a7:2d:66:27:16:ae:36:04:b9:df:07:b8:14:b6:
         64:62:d7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----