Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231362e37342e302f32342d3332203d3e20313336373837.roa
File:                     3138352e3231362e37342e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          ouAeCXszwucIuNQyqrv9RF3F85HfiKnNg5eSFSAOB50=
Subject key identifier:   9F:5D:19:85:66:B1:75:99:93:1A:01:D1:26:52:D8:97:10:58:F6:7F
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       734EEF80DE12917E224B9DB1D00826DFD52DFE8E
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231362e37342e302f32342d3332203d3e20313336373837.roa
Signing time:             Wed 28 Dec 2022 09:32:34 +0000
ROA not before:           Wed 28 Dec 2022 09:27:34 +0000
ROA not after:            Wed 27 Dec 2023 09:32:34 +0000
asID:                     136787
IP address blocks:        185.216.74.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:4e:ef:80:de:12:91:7e:22:4b:9d:b1:d0:08:26:df:d5:2d:fe:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Dec 28 09:27:34 2022 GMT
            Not After : Dec 27 09:32:34 2023 GMT
        Subject: CN=9F5D198566B17599931A01D12652D8971058F67F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cf:7c:a8:b9:48:6a:53:4a:61:64:85:96:a4:
                    53:ad:e3:a1:f6:c1:7a:c6:ad:b6:69:d2:1f:a7:5b:
                    50:40:04:32:f5:a7:4a:4d:bb:96:1c:95:56:d4:99:
                    4b:ab:51:6e:3b:68:a6:30:f6:54:9f:98:a7:8e:43:
                    81:1a:25:bf:65:7f:53:6f:50:16:7c:31:c3:0c:8e:
                    87:2f:6b:74:38:62:69:26:ff:fa:db:ab:7a:45:e8:
                    7e:2c:5b:f9:15:c8:3f:0f:fe:f1:ed:98:15:98:57:
                    19:c5:63:d6:68:a6:c9:b5:36:9b:78:b7:83:9e:b3:
                    6e:94:9c:2c:3c:eb:7b:fb:46:c0:a7:65:17:30:e0:
                    f9:19:72:da:e5:d9:1a:98:c5:aa:21:81:33:43:de:
                    35:ea:87:92:c8:18:b3:2b:18:8c:2d:d5:c3:79:73:
                    29:e7:62:2f:40:ec:62:36:db:c2:76:b8:99:94:e7:
                    1d:78:60:f4:4d:c0:45:66:4e:c8:cc:4e:40:70:e7:
                    73:7d:c7:52:53:97:9f:45:81:19:26:80:97:14:75:
                    7a:07:60:99:0d:69:32:43:69:a7:36:50:ac:54:a9:
                    3a:16:a7:0c:74:52:46:dc:05:32:71:9e:95:79:8d:
                    1e:35:98:ec:1e:d7:83:36:88:e7:9a:80:2e:05:2d:
                    23:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5D:19:85:66:B1:75:99:93:1A:01:D1:26:52:D8:97:10:58:F6:7F
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231362e37342e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.216.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dd:6e:b0:4f:ff:90:7c:c5:cb:45:38:74:22:db:76:88:b5:af:
         c2:6d:fb:32:e7:96:d6:a4:c2:cf:d4:53:1f:32:2a:51:07:53:
         1e:e8:f3:1a:fb:37:a7:79:96:5e:3e:2c:7e:ae:e3:4f:b1:4f:
         d7:c4:0d:b4:80:1a:a7:be:8b:c0:50:cb:d6:a2:7b:df:2e:8c:
         40:14:c3:26:34:c3:4a:f4:96:fe:2f:fa:e8:1a:b7:40:2b:b0:
         4e:b0:4a:f8:33:52:65:bc:37:35:11:3b:0d:bc:fb:7b:b2:aa:
         77:8e:d0:68:a7:f8:18:ab:5c:46:52:f4:3e:18:3c:f5:83:e2:
         c7:bb:0b:42:03:f1:e2:de:69:62:e1:e7:3d:fa:70:de:06:35:
         e9:f9:9a:6a:b5:74:b0:83:a7:99:37:2d:43:c1:3a:0f:1b:09:
         1a:92:f6:48:ce:96:cb:e8:f0:b2:76:2b:bb:a7:84:1b:04:70:
         e5:c0:6d:01:0e:e1:d2:5e:c1:ef:42:d5:32:13:7f:25:2e:89:
         32:e1:e0:84:02:e1:7b:f4:4c:f3:83:33:07:d1:ce:ab:f2:a4:
         7f:76:74:f4:dc:46:18:de:84:5a:14:31:81:82:c4:26:7f:11:
         9f:68:d9:45:79:4f:c3:a4:87:5a:2b:e2:2c:3e:7a:94:31:18:
         ec:b6:1b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----