Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232352e3233322e302f32332d3332203d3e203531313637.roa
File:                     3138352e3232352e3233322e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier:          T3vNbY9pC54jSBTqhZSzE6l8mduOV4cOd+bdy0R0B/0=
Subject key identifier:   7C:6E:B6:63:2D:2D:47:2F:66:FE:01:09:54:9D:CC:9B:80:5D:24:47
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       1CA5C9907C873FDE92CE9DFD9FEB554314F0B98F
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232352e3233322e302f32332d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:24 +0000
ROA not before:           Sat 22 Oct 2022 04:28:24 +0000
ROA not after:            Sat 21 Oct 2023 04:33:24 +0000
asID:                     51167
IP address blocks:        185.225.232.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a5:c9:90:7c:87:3f:de:92:ce:9d:fd:9f:eb:55:43:14:f0:b9:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:24 2022 GMT
            Not After : Oct 21 04:33:24 2023 GMT
        Subject: CN=7C6EB6632D2D472F66FE0109549DCC9B805D2447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:24:2a:6c:19:e3:38:6b:09:23:07:b4:a7:ea:
                    1d:f0:ac:2c:f4:3c:b4:7d:14:fc:d9:14:e9:4e:49:
                    c2:53:30:e1:de:e2:d5:eb:4c:33:94:94:c8:ed:29:
                    df:28:72:02:cb:23:52:33:31:df:71:bb:0f:1c:22:
                    c1:01:ec:e1:0e:23:9f:89:fd:ef:d7:08:72:3b:93:
                    ef:b2:ad:f4:73:2e:87:53:c3:30:f2:e7:4f:c8:87:
                    17:6f:22:37:cd:dc:f8:46:f2:38:95:d6:d1:af:55:
                    dc:8e:5b:08:ff:7e:42:3b:f0:fe:af:94:a6:8f:86:
                    55:75:37:34:65:63:46:b9:ee:e3:f1:c5:ae:c4:bc:
                    fd:11:27:26:9d:71:fe:14:d1:b7:6d:91:89:f2:48:
                    16:5d:67:cb:5f:8d:fd:a7:53:f2:d1:7c:ff:cc:77:
                    b9:e2:77:d4:de:90:b6:88:7f:56:32:bd:ec:ad:f2:
                    5c:ff:e2:08:a7:52:8e:b0:90:b0:e7:4e:ab:c7:14:
                    da:c9:9a:a5:e3:d7:3a:52:d7:2f:f6:eb:3c:74:f3:
                    95:da:19:e1:eb:f3:b1:d3:f5:5f:19:8a:6f:cb:46:
                    30:57:80:41:27:f1:90:e3:a0:8f:60:5d:d8:bf:65:
                    55:ef:07:d5:30:fb:2c:12:20:75:c3:4b:40:da:07:
                    b2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:6E:B6:63:2D:2D:47:2F:66:FE:01:09:54:9D:CC:9B:80:5D:24:47
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232352e3233322e302f32332d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.225.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:fa:50:94:55:6a:75:cd:9e:59:19:79:31:bf:61:a1:a4:bf:
         c9:d3:f6:e1:bc:5f:45:e6:21:83:da:06:c6:66:8b:54:1a:47:
         d6:17:a8:33:2b:44:ef:fa:40:c9:d2:58:ae:3a:1f:25:fa:fe:
         90:85:eb:5b:ab:b0:db:8f:13:53:a2:e1:ab:67:e4:48:5e:d9:
         67:79:62:63:f3:c8:2c:81:33:db:c5:22:37:f1:a6:c6:b6:63:
         ae:f5:0b:25:7b:ec:ed:11:5c:fc:2c:ae:7b:f0:77:4d:a9:34:
         df:3b:68:bc:c0:26:8d:b8:49:80:c4:3a:76:64:0f:9a:c0:50:
         6e:10:cb:44:c6:8c:7f:03:f0:68:03:2f:67:04:3f:1f:3c:d2:
         12:f1:57:e6:58:2e:fb:b3:a2:51:af:2b:7f:d2:f6:93:7f:21:
         02:7b:6f:2f:f3:7b:4a:99:3d:2d:11:37:ff:38:44:84:d4:09:
         27:3b:27:f7:52:c1:1b:3e:fd:6a:c8:00:92:d8:df:22:39:47:
         74:ac:1a:b0:11:8b:40:10:4c:9e:2e:08:0a:66:31:70:e6:75:
         8c:5c:3a:f8:82:a1:42:b7:54:d9:13:47:cb:75:9e:19:32:d6:
         59:fc:2c:cc:b1:89:cc:0e:b5:50:84:59:55:97:b9:c4:40:5c:
         51:d3:85:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----