Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231392e3134302e302f32342d3332203d3e20313336373837.roa
File:                     3138352e3231392e3134302e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          Zoh2Hn0vw7PPDntZd0Tt959UuZply8XWkERC8IQFPMc=
Subject key identifier:   CC:EA:C9:F7:C9:DF:29:4C:9F:0D:A7:7E:30:29:85:76:EA:C3:9F:80
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       24009D1CDDE58D4A8E0CEBF4373BDA17DA03D55E
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231392e3134302e302f32342d3332203d3e20313336373837.roa
Signing time:             Wed 28 Dec 2022 09:38:47 +0000
ROA not before:           Wed 28 Dec 2022 09:33:47 +0000
ROA not after:            Wed 27 Dec 2023 09:38:47 +0000
asID:                     136787
IP address blocks:        185.219.140.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:00:9d:1c:dd:e5:8d:4a:8e:0c:eb:f4:37:3b:da:17:da:03:d5:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Dec 28 09:33:47 2022 GMT
            Not After : Dec 27 09:38:47 2023 GMT
        Subject: CN=CCEAC9F7C9DF294C9F0DA77E30298576EAC39F80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:88:6b:cb:03:8b:11:5b:d5:8f:2d:a3:e1:09:
                    cf:74:8c:74:94:76:d1:ff:3a:ba:a9:c5:7a:44:7b:
                    d5:3b:9b:b0:1c:7d:29:5c:e8:05:40:2b:67:4f:1d:
                    e5:ab:b3:2f:e6:12:e7:dc:6f:b2:4b:84:57:e4:be:
                    c0:3d:56:73:e9:c5:14:fc:b2:7b:be:18:20:26:62:
                    db:d1:b5:a4:44:06:58:7d:ae:56:dd:87:4c:39:68:
                    c4:58:a6:07:4e:1a:fb:52:be:12:03:87:51:05:36:
                    8b:26:4e:b3:c4:f3:36:c8:72:c4:3f:0f:ca:05:76:
                    2c:e5:b4:d6:7b:d8:c9:7b:df:81:e2:91:bf:69:52:
                    10:58:d2:14:de:a6:2a:b1:71:41:df:3f:37:be:26:
                    a9:bf:80:92:7c:68:79:e8:6f:44:55:86:48:62:ec:
                    35:80:d7:5e:73:71:ba:d9:ca:f2:35:07:bd:a1:b6:
                    7a:e9:e1:e6:01:60:4e:5e:16:be:c8:1e:af:23:11:
                    a7:51:ee:95:b1:f1:ff:93:39:85:73:7b:e0:b0:19:
                    e6:84:21:58:7a:be:a8:c6:74:77:67:70:83:c6:a0:
                    69:3d:61:83:3f:27:29:c9:44:64:dd:0f:0d:9c:0a:
                    55:92:4f:0f:34:c5:23:cb:47:98:73:39:c5:99:53:
                    30:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:EA:C9:F7:C9:DF:29:4C:9F:0D:A7:7E:30:29:85:76:EA:C3:9F:80
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231392e3134302e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.219.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:f5:5f:1c:4a:20:57:f5:46:90:10:f8:ed:d2:09:e5:c8:5a:
         68:03:bd:2b:2b:3e:46:41:d7:e3:30:f6:56:6b:62:10:85:b1:
         70:cc:f1:e4:48:79:c8:8f:2b:bb:f5:68:4c:51:b9:45:ca:5f:
         5c:4b:9a:3b:cd:1d:cf:70:cd:b4:ba:d2:73:a1:27:c0:75:ed:
         ef:7b:bd:8a:5c:19:28:94:9f:66:f3:f7:1d:d4:1d:dd:7a:b4:
         4c:19:14:d4:e1:f5:f2:36:57:f8:44:9a:38:0a:e9:ab:c9:78:
         e1:7d:e0:84:0c:ef:f0:ef:42:fc:89:f7:9c:2a:83:81:a0:a9:
         b8:3f:37:d4:2c:c4:2f:63:7f:88:cd:15:3d:c2:55:d7:c7:9d:
         cc:fa:ea:88:20:20:7a:5e:a4:48:bf:fe:6a:fc:f5:f8:be:49:
         45:3a:90:57:07:1d:cd:af:c0:63:f4:cb:74:17:80:f4:ce:39:
         1e:3c:d9:31:86:81:1a:a4:e1:0f:20:f3:ab:b0:f3:d0:9f:0d:
         d6:8e:6a:4e:69:7d:de:cb:92:86:41:c1:c2:90:06:84:ec:4a:
         c6:aa:73:46:a2:6e:83:ac:36:d2:8a:98:69:5e:da:f4:1b:6c:
         41:51:fa:d8:78:08:f0:34:c3:0d:25:c8:d6:7d:71:0b:07:1e:
         ce:91:5e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----