Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230372e3234382e302f32342d3332203d3e20313336373837.roa
File:                     3138352e3230372e3234382e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          jjjh28Ec8e4P7ED65R6xH0yYg1OBl3f7U4xJa/kEF3Y=
Subject key identifier:   C7:21:8F:FE:9A:8E:FA:EC:1D:F0:54:FD:3C:38:8B:70:31:BD:EA:30
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       7A0BDC25CC1A31DD35AAF4F49E8D4026666BB98D
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230372e3234382e302f32342d3332203d3e20313336373837.roa
Signing time:             Wed 28 Dec 2022 09:32:59 +0000
ROA not before:           Wed 28 Dec 2022 09:27:59 +0000
ROA not after:            Wed 27 Dec 2023 09:32:59 +0000
asID:                     136787
IP address blocks:        185.207.248.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:0b:dc:25:cc:1a:31:dd:35:aa:f4:f4:9e:8d:40:26:66:6b:b9:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Dec 28 09:27:59 2022 GMT
            Not After : Dec 27 09:32:59 2023 GMT
        Subject: CN=C7218FFE9A8EFAEC1DF054FD3C388B7031BDEA30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e4:c4:5d:9c:d7:14:00:84:51:71:67:7e:4e:
                    da:0d:1a:1a:7a:ed:1a:98:a4:50:d0:1f:28:68:4e:
                    10:01:92:b0:15:a8:ef:51:03:fc:79:ac:84:f1:cc:
                    b7:5b:a0:ea:cb:40:cf:e4:e0:09:0b:76:25:1d:3d:
                    f4:0a:c4:d1:9e:09:2d:4c:97:77:a8:38:c6:51:ee:
                    37:9f:df:d7:f2:31:38:db:25:03:17:1d:58:eb:ea:
                    cd:a9:83:ef:85:30:40:cd:14:e2:fb:54:73:08:08:
                    83:17:0b:c1:d5:3b:06:0f:5a:fe:7d:de:27:67:e5:
                    a8:0c:df:ae:a8:5d:7f:21:3d:80:47:75:a7:61:9d:
                    92:db:db:8c:22:dc:12:73:cc:9b:ab:66:07:46:dc:
                    74:6f:50:b7:f5:41:55:d6:20:ab:33:76:03:61:3e:
                    f0:f1:d3:62:7d:73:53:53:33:26:e7:f6:28:1a:80:
                    4d:72:c5:3d:e4:f5:fd:78:2c:29:3a:f9:51:f3:c4:
                    08:e1:e8:5b:ed:ce:b4:f8:53:44:16:cd:8a:96:b8:
                    a3:b7:22:02:d6:a6:43:d3:5d:88:b5:ac:fa:b9:df:
                    33:93:c5:83:75:a9:ed:4d:9c:cf:12:b2:68:79:d1:
                    0c:85:af:6f:25:ad:2e:84:14:76:8a:bd:9d:fb:cd:
                    ba:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:21:8F:FE:9A:8E:FA:EC:1D:F0:54:FD:3C:38:8B:70:31:BD:EA:30
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230372e3234382e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.207.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:17:ac:aa:46:b6:67:f2:14:75:73:7b:e0:ce:9a:a2:cc:1c:
         8f:f4:42:99:b8:d9:79:d5:da:27:78:14:41:3a:f3:a4:9b:3c:
         23:28:1b:0e:a8:69:52:4b:79:32:f6:71:4c:37:b2:f3:8f:df:
         dc:6e:8d:4b:da:62:e4:2d:ad:2a:12:27:83:eb:1f:5c:8e:f2:
         ee:e9:e1:59:69:b8:c5:03:08:9d:f0:65:25:8d:3c:e4:f9:ba:
         33:78:6e:6a:a5:ce:d2:a9:2e:74:ac:11:4c:79:a2:42:09:3c:
         be:5e:29:b0:89:6a:2e:28:97:68:d0:87:20:4a:ff:bb:76:d2:
         8d:d5:d2:f2:0b:db:e4:c7:01:ea:25:fb:c0:80:09:0f:ca:04:
         01:74:ea:8a:95:6d:4a:4b:1a:5b:85:c5:a6:69:9e:c1:2b:f8:
         04:82:e2:45:88:04:c8:96:70:1d:b7:3f:ef:b7:e1:af:d7:d0:
         4f:81:b6:c6:d5:d6:da:36:4a:ef:22:14:c5:b3:a8:cd:fa:a1:
         b6:48:5e:0e:e4:95:3b:3b:31:d2:77:c6:62:29:c3:d8:4a:31:
         16:85:e8:2f:87:94:90:35:a6:56:63:44:6f:91:1a:ca:8c:c0:
         96:03:9f:cb:94:07:80:d5:d5:52:ad:54:31:97:53:a0:02:2a:
         d7:9e:a5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----