Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234352e3138322e302f32342d3332203d3e203531313637.roa
File:                     3138352e3234352e3138322e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          UNq3gT1HxaxT3VLuTi1l6mdM6NAyH1cBlSQot3xF948=
Subject key identifier:   52:0D:7A:D5:D2:5F:40:B0:18:50:93:02:D1:1A:BA:40:A0:3E:F7:63
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       49514D78CA6C2436B73F71DB29EE5F08891B8FC4
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234352e3138322e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:23 +0000
ROA not before:           Sat 22 Oct 2022 04:28:23 +0000
ROA not after:            Sat 21 Oct 2023 04:33:23 +0000
asID:                     51167
IP address blocks:        185.245.182.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:51:4d:78:ca:6c:24:36:b7:3f:71:db:29:ee:5f:08:89:1b:8f:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:23 2022 GMT
            Not After : Oct 21 04:33:23 2023 GMT
        Subject: CN=520D7AD5D25F40B018509302D11ABA40A03EF763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9c:4b:96:a6:4b:f4:d6:e4:c8:f7:40:02:e3:
                    49:67:35:d7:72:b5:11:27:b6:3d:cf:1a:93:60:2a:
                    76:65:3c:f2:12:fa:33:69:24:76:e3:28:54:e1:3e:
                    f4:f7:b9:6a:fc:cf:da:4d:e7:6c:c2:10:8a:f9:cf:
                    39:2d:5c:97:a2:54:e3:3a:f5:c5:e2:61:2e:ee:72:
                    2c:7e:d0:51:0a:df:71:e3:e7:48:6e:d3:a1:49:df:
                    dd:5b:15:1a:68:1e:3f:9f:10:b8:61:19:fc:be:96:
                    e5:59:5a:6d:d4:c5:93:16:9e:6b:fe:55:8a:a2:6c:
                    01:7b:ba:c7:a8:84:10:73:50:63:83:dc:a2:65:8d:
                    ce:b4:98:96:bc:86:f3:94:82:c1:53:74:10:00:36:
                    fb:3d:4e:01:42:88:57:06:55:7b:b1:e4:e4:11:5e:
                    dd:7c:14:89:94:71:a6:21:a2:f0:18:2d:0a:e4:aa:
                    81:fa:be:8c:72:a1:7b:d7:27:1d:49:34:7c:05:01:
                    3a:18:be:49:6d:32:4e:c0:68:48:eb:a4:cc:be:20:
                    d5:14:49:b2:f3:fd:39:17:10:a1:1c:1b:fc:d5:d1:
                    7f:05:d4:d8:6f:d1:da:d6:5e:86:7b:4f:0d:92:a5:
                    a9:d5:31:e4:c1:a1:f0:95:d4:79:94:27:3b:db:e4:
                    78:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:0D:7A:D5:D2:5F:40:B0:18:50:93:02:D1:1A:BA:40:A0:3E:F7:63
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234352e3138322e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.245.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:96:f8:60:08:4c:98:8c:2e:9f:85:c6:af:cd:f3:96:80:85:
         8a:19:97:49:7a:8e:b5:c2:7d:d4:50:f9:32:22:4d:76:69:97:
         f3:a3:a8:b2:d9:ba:99:6a:d2:17:7a:34:4c:e8:59:ad:9d:96:
         60:79:9c:f7:cc:28:8d:49:ea:cc:6f:09:5d:d6:01:a2:e5:9a:
         69:8c:87:97:4d:fb:64:5a:99:f6:ac:93:c5:e4:59:a1:ad:82:
         4d:64:a2:96:6a:64:9f:3a:a6:14:1d:e4:63:62:30:7b:08:f1:
         9f:e7:5a:da:aa:c8:52:0e:7a:21:9b:fc:40:08:f7:ef:d0:44:
         6b:e1:16:18:c9:a8:ee:e2:9e:21:d9:f7:b6:c6:a8:ea:7c:07:
         78:b2:70:2e:88:a3:ee:63:4b:1f:59:86:00:b5:33:4d:08:6a:
         a0:dc:23:cc:e3:1a:c6:df:41:33:36:55:a3:ae:9c:b4:6e:47:
         c5:a8:7c:ea:3d:3a:3b:2c:f3:64:6d:a9:75:44:e7:2e:6c:60:
         32:96:32:4a:03:e3:01:81:82:98:09:e0:b3:75:d8:de:da:5f:
         d1:84:72:1c:f5:0f:75:01:75:dc:08:af:0e:57:e6:4c:15:0b:
         c6:ab:96:a8:69:21:4b:26:b6:e0:97:74:ba:f2:71:6b:24:1e:
         d8:bb:e6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----