Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231372e3132362e302f32332d3332203d3e203531313637.roa
File:                     3138352e3231372e3132362e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier:          bWohao5nQu1iLORIgpXBQbbuUpcvCOzFvIAYTSFuIZM=
Subject key identifier:   B1:63:3C:26:14:69:10:1C:F4:33:AA:05:BA:9A:87:13:FE:E1:C6:EF
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       34BE312FA9AE0FA5B93361EECEF9FF4AC76B02D2
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231372e3132362e302f32332d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:19 +0000
ROA not before:           Sat 22 Oct 2022 04:28:19 +0000
ROA not after:            Sat 21 Oct 2023 04:33:19 +0000
asID:                     51167
IP address blocks:        185.217.126.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:be:31:2f:a9:ae:0f:a5:b9:33:61:ee:ce:f9:ff:4a:c7:6b:02:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:19 2022 GMT
            Not After : Oct 21 04:33:19 2023 GMT
        Subject: CN=B1633C261469101CF433AA05BA9A8713FEE1C6EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:55:47:f1:31:bd:ef:a1:54:1f:90:59:ab:ea:
                    d8:c4:a2:f8:79:c8:07:a9:58:38:dd:ae:b8:c5:27:
                    18:0e:e6:74:1b:b9:70:cd:08:d2:29:92:ca:79:ac:
                    ae:74:74:e6:57:c9:1b:f4:6a:25:8f:d6:ad:24:b1:
                    79:5b:b7:fb:b8:22:db:69:d6:80:db:77:a9:be:ff:
                    9e:ac:3b:ca:7f:38:0c:14:22:e4:1d:53:71:c1:06:
                    35:5f:28:6e:f1:11:5e:9d:30:95:a7:dc:2b:f4:1d:
                    2d:62:30:5f:70:32:a7:37:6e:f9:d2:5f:d0:42:fa:
                    6c:08:4d:aa:8e:d0:52:e6:62:01:d4:95:e6:82:95:
                    3a:17:2c:c4:2b:c8:d7:33:dc:2f:a1:f6:f1:a2:99:
                    06:f1:dc:12:b4:7b:69:93:90:df:ba:95:1f:63:30:
                    c1:40:61:16:82:d8:73:2d:a3:ee:b1:f3:5d:df:08:
                    42:61:97:5d:5c:0f:e1:1a:7f:e6:f5:cd:e8:d8:40:
                    12:d4:1e:d4:65:cc:51:9a:5a:65:fe:17:a4:bd:c1:
                    8a:88:dc:08:6d:3f:e1:d6:c2:82:2e:22:6c:6e:71:
                    fa:23:9b:67:ad:49:0c:b9:b4:d2:4b:07:45:71:c4:
                    c0:b1:e1:f8:92:31:57:47:09:07:25:b8:e2:63:ec:
                    c6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:63:3C:26:14:69:10:1C:F4:33:AA:05:BA:9A:87:13:FE:E1:C6:EF
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231372e3132362e302f32332d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.217.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:25:4a:8b:62:db:e2:36:71:3f:fa:0a:3f:29:10:50:40:5d:
         12:ea:10:30:62:a8:13:2b:bf:4a:5a:40:fe:e3:8e:99:1c:f7:
         f1:c4:11:b6:e0:b1:45:41:70:d2:b2:a2:49:e9:8c:57:59:66:
         f7:ce:65:34:e6:e3:a6:42:4d:ec:59:68:40:ee:31:cb:c0:1a:
         e9:0d:ac:12:64:c1:2d:8e:d4:d4:dc:f9:18:7b:02:35:a1:07:
         3c:60:6d:75:a8:ab:b9:29:19:4b:7f:4a:16:67:95:21:92:4b:
         0b:01:eb:34:87:0f:7f:5a:7f:17:35:65:28:6b:c8:e1:3b:95:
         cf:d8:d7:87:4f:c9:3e:1a:79:a7:bf:d0:9d:78:dd:36:29:77:
         98:ef:1e:7c:7d:5c:ba:f9:5f:a9:85:bb:28:80:f6:6a:d5:99:
         83:d2:71:b6:08:f2:b0:82:f0:b8:66:9e:f6:38:c1:15:85:09:
         51:53:bd:49:d9:d3:8b:35:5f:3c:ce:9b:03:73:79:10:0c:e6:
         6b:86:ff:a2:1e:b7:a4:d1:b5:61:53:a2:d1:d0:85:b0:f8:9a:
         85:a6:52:bb:48:41:c0:76:f5:83:37:ba:d4:28:44:3c:8f:08:
         90:26:db:ba:3e:a4:e6:1a:eb:d1:8e:26:e3:93:a7:d3:6b:29:
         df:ae:ff:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----