Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3232332e302f32342d3332203d3e203531313637.roa
File:                     3138352e3230322e3232332e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          arM0ZPYl7pRQpXYFQK75kYEkj14nQYuzo/M/faHbujY=
Subject key identifier:   8F:AC:93:7E:0E:1B:5D:82:07:C2:0A:5C:4F:4B:AD:D5:BC:1E:57:43
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       59B6F74BE17C14AF0543A688FAE10D410BAA8F10
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3232332e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:16 +0000
ROA not before:           Sat 22 Oct 2022 04:28:16 +0000
ROA not after:            Sat 21 Oct 2023 04:33:16 +0000
asID:                     51167
IP address blocks:        185.202.223.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b6:f7:4b:e1:7c:14:af:05:43:a6:88:fa:e1:0d:41:0b:aa:8f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:16 2022 GMT
            Not After : Oct 21 04:33:16 2023 GMT
        Subject: CN=8FAC937E0E1B5D8207C20A5C4F4BADD5BC1E5743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6a:20:07:4d:44:7f:14:88:1d:2b:06:32:bd:
                    59:d1:3b:d9:e1:f2:0f:c8:d3:79:c3:e5:d0:3d:34:
                    38:34:57:37:18:7d:f3:9b:8e:eb:1c:1b:9c:c9:48:
                    b9:8c:fa:75:d2:08:2b:c7:ff:13:68:b1:84:b3:5f:
                    90:37:6d:5a:09:42:c4:02:4a:cc:00:f2:08:1f:bc:
                    00:00:a8:58:7e:5b:1d:e9:df:12:aa:fb:4b:b6:de:
                    ca:24:64:17:ec:cc:aa:46:af:57:a7:7b:05:5e:66:
                    b5:fd:3d:59:21:c4:f7:42:55:19:f3:7e:95:d9:69:
                    02:f0:f7:60:bb:8e:e6:45:58:d1:df:b2:90:42:b4:
                    ba:9b:e9:21:2e:96:52:2d:c2:83:47:74:04:d0:9d:
                    7d:f5:38:f5:9f:47:6e:84:2b:50:e9:bd:49:a7:f1:
                    f2:e8:1e:ec:e9:f5:40:0e:0f:21:7f:dd:25:2f:6f:
                    81:03:8c:83:39:10:6b:a7:e2:c9:fb:e2:e8:e6:58:
                    ae:96:9b:a3:a4:35:3b:84:29:e5:ba:19:5c:da:a5:
                    8e:4e:d6:ba:43:75:9a:01:9d:2c:98:e8:0c:35:8c:
                    54:09:fe:bc:8b:64:8f:0a:70:e3:09:b4:16:d5:31:
                    11:2d:79:d4:c1:68:57:85:80:ab:f0:ae:18:6b:ea:
                    85:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:AC:93:7E:0E:1B:5D:82:07:C2:0A:5C:4F:4B:AD:D5:BC:1E:57:43
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3232332e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:c7:0a:9b:8a:02:92:25:c1:c3:bb:f0:88:32:12:93:3c:12:
         93:26:64:55:70:f9:3e:20:c7:d4:74:4d:29:22:2d:fc:47:4f:
         00:eb:48:18:ce:1f:d9:ab:a1:de:2e:ee:38:54:a0:c1:bc:68:
         f1:dc:b6:35:29:13:d9:2f:33:9b:01:e6:bc:c8:d4:af:4d:34:
         f6:00:04:fd:17:dd:6c:7f:52:5f:6c:74:57:50:51:ea:99:68:
         23:bb:0a:ce:cf:55:14:4f:4f:c7:fe:37:61:fa:69:ef:82:be:
         2f:42:90:ca:87:eb:a4:e0:94:14:43:4f:ba:f5:dd:93:8d:4e:
         86:bb:76:44:76:6a:30:1f:52:54:84:55:b7:56:45:c9:58:8f:
         7a:ec:18:03:cd:77:9e:d0:af:19:de:9f:52:04:5b:5d:cf:dc:
         fa:27:96:f0:db:4b:d0:2c:1b:c3:7c:08:3f:f0:64:1f:3e:a6:
         de:9c:f6:16:63:65:d8:e8:90:f9:dc:3c:0a:a4:3a:e4:db:06:
         fd:f4:bb:16:f9:89:6e:7c:c2:89:37:10:45:b8:84:88:b1:02:
         a2:2d:64:dd:b7:e6:59:06:e4:01:da:64:ba:41:f4:3d:4f:55:
         ca:05:07:52:fd:a6:3a:1c:93:8d:34:48:ce:d6:34:04:20:a9:
         35:ba:7e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----