Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232322e3234302e302f32342d3234203d3e20323132373836.roa
File:                     3138352e3232322e3234302e302f32342d3234203d3e20323132373836.roa (raw, json)
Hash identifier:          iUW1e/d7srzz6Zah7LrsJK4cpH7Drila/wCdoOjZpMM=
Subject key identifier:   BB:3C:77:DA:9A:24:93:56:E8:79:84:09:33:5F:D9:59:E5:89:D5:EF
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       6B72CE0D0D35FAA5D176375CA91DBEC4F0B910E6
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232322e3234302e302f32342d3234203d3e20323132373836.roa
Signing time:             Fri 29 Oct 2021 16:00:04 +0000
ROA not before:           Fri 29 Oct 2021 15:55:04 +0000
ROA not after:            Fri 28 Oct 2022 16:00:04 +0000
asID:                     212786
IP address blocks:        185.222.240.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:72:ce:0d:0d:35:fa:a5:d1:76:37:5c:a9:1d:be:c4:f0:b9:10:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 29 15:55:04 2021 GMT
            Not After : Oct 28 16:00:04 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:98:e2:9c:f1:94:b9:ac:8c:16:ff:24:89:bb:
                    2e:a0:36:8c:2d:7e:55:47:07:42:5f:6d:fd:9e:12:
                    41:ec:a9:2b:78:01:09:1b:a2:85:9d:16:bf:59:e1:
                    10:11:ea:88:93:f3:dd:3a:cc:d4:18:0c:7d:bf:b9:
                    76:ee:d4:13:a6:34:a1:a7:0d:18:70:09:1f:e7:c3:
                    0f:08:44:2e:2b:27:fa:fc:af:6a:65:b7:d6:8c:69:
                    46:58:a5:c3:fd:20:1e:b2:89:48:3e:d4:fa:1b:5c:
                    46:e2:64:cc:1e:4a:21:20:64:de:6a:f3:ab:74:b5:
                    2e:5c:8b:6e:52:40:b1:50:75:49:58:b7:c5:1c:c6:
                    ec:57:01:f3:37:f6:6e:90:aa:f9:e1:41:42:fd:0f:
                    fc:dc:bb:dd:a6:ee:ff:e5:37:6e:2c:fb:83:50:fb:
                    61:2d:1f:6f:37:34:ca:98:81:a8:1d:53:90:9d:e4:
                    a3:14:8e:5b:33:2c:92:f9:a6:82:a6:b1:65:e9:c2:
                    e0:03:4b:e5:97:cf:a5:bd:3f:1a:5e:ed:7e:6f:d1:
                    d8:b2:70:9f:ff:9a:f2:0a:bb:0b:84:f4:8b:64:cf:
                    12:a7:5a:30:7c:b6:6b:de:63:db:1c:25:ea:66:2f:
                    b6:0c:38:c7:b1:06:75:3c:0f:2d:ec:fd:04:34:18:
                    0f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:3C:77:DA:9A:24:93:56:E8:79:84:09:33:5F:D9:59:E5:89:D5:EF
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232322e3234302e302f32342d3234203d3e20323132373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.222.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:ae:69:9d:74:b0:19:14:b7:47:29:33:21:8d:83:72:f3:f5:
         c6:60:08:3b:ce:cc:4f:1c:32:39:de:77:31:34:69:7d:f9:92:
         5a:e7:cb:84:53:f5:56:d4:20:41:88:4c:05:7d:90:77:1e:59:
         f4:f3:c8:db:f5:e0:2b:08:62:a7:95:82:38:6a:1f:78:0f:82:
         dd:4b:e1:e2:3f:c9:21:e1:38:f8:59:03:fa:d4:fe:e9:01:45:
         78:88:2b:2a:64:4b:28:8c:d9:07:1a:9f:70:2c:94:9d:3a:f1:
         17:0a:30:bd:05:a2:d6:dd:ae:e2:29:d2:08:bc:ef:00:93:01:
         d6:0e:f5:f0:94:65:c2:6a:35:d8:ea:29:3e:64:89:43:79:e7:
         2a:e0:50:85:e8:de:50:df:f6:ef:2a:af:d4:f4:5c:33:55:f0:
         45:72:5e:b9:7f:62:0c:ca:9e:96:51:36:00:5f:37:41:43:d5:
         f1:51:a1:d5:68:7a:65:b9:ee:4d:7c:7a:1d:7f:0d:0f:ef:c3:
         01:ff:42:fd:fa:e7:fe:96:6d:6a:3c:eb:3e:54:21:35:c8:0b:
         26:83:b1:ca:9a:45:d7:15:f3:89:26:33:b7:48:3d:a4:d7:f9:
         4b:bc:18:2f:8b:4b:42:e6:78:79:73:e4:b8:e0:c9:06:84:3d:
         70:51:65:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----