Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3231322e39302e3132302e302f32332d3332203d3e203531313637.roa
File:                     3231322e39302e3132302e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier:          k9bW0+vOowyHV29F2jqIa8nBp7O3rZqmMBZj6/zU94A=
Subject key identifier:   6E:85:D8:CA:27:B3:22:09:C4:3D:CD:91:30:C4:4D:1F:11:23:40:6C
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       3C0F7636341253898C968F1521B3E1EEB7397709
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3231322e39302e3132302e302f32332d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:13 +0000
ROA not before:           Sat 22 Oct 2022 04:28:13 +0000
ROA not after:            Sat 21 Oct 2023 04:33:13 +0000
asID:                     51167
IP address blocks:        212.90.120.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:0f:76:36:34:12:53:89:8c:96:8f:15:21:b3:e1:ee:b7:39:77:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:13 2022 GMT
            Not After : Oct 21 04:33:13 2023 GMT
        Subject: CN=6E85D8CA27B32209C43DCD9130C44D1F1123406C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:77:c6:99:7f:bf:55:04:4f:61:4d:ea:d9:70:
                    17:09:bb:18:10:a1:09:9e:13:74:26:91:df:bb:be:
                    75:5a:6b:1f:58:f3:b5:22:35:60:97:15:fd:b5:da:
                    7f:c6:fc:42:66:29:fb:da:94:e8:f5:11:d7:0f:23:
                    f4:bd:1d:b1:8c:d2:b2:3a:b0:28:52:e1:fc:9e:35:
                    8a:36:f6:21:5a:85:55:f8:d5:85:0e:34:ac:66:60:
                    67:20:c9:16:e4:f2:36:ae:07:68:94:21:98:9a:1a:
                    98:66:bd:1f:b1:5a:a3:20:53:2a:3b:b3:d5:0e:cb:
                    7a:62:d2:8a:25:cb:6c:35:13:e2:29:42:99:b6:3c:
                    4f:ab:52:cb:80:77:be:7e:6b:51:e1:3b:ab:20:e7:
                    95:da:ad:bf:48:23:76:8d:1b:82:60:b1:3a:ca:48:
                    43:f7:c0:d6:0a:d6:22:56:3f:86:63:e5:d3:48:e5:
                    9a:49:dd:f3:63:9d:7f:06:ae:01:9f:e7:79:73:03:
                    c6:9e:4c:76:e0:a9:04:d5:4c:2c:00:e7:86:3c:44:
                    f6:f7:c8:e7:81:fb:ec:12:70:72:be:f0:02:6a:30:
                    5b:c5:0c:38:b7:d6:e8:eb:47:d7:b8:59:d9:1a:61:
                    c1:d5:1d:ac:7c:3a:c5:b7:52:bb:2c:06:c7:5f:8d:
                    94:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:85:D8:CA:27:B3:22:09:C4:3D:CD:91:30:C4:4D:1F:11:23:40:6C
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3231322e39302e3132302e302f32332d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.90.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:34:04:e2:e3:bb:73:f2:14:7f:ab:3c:89:54:f3:15:91:e8:
         1f:a6:e7:e8:3a:e6:e0:4b:41:98:e1:3d:dc:1b:4b:75:54:b4:
         12:47:98:d8:42:c7:11:6b:88:88:b7:e6:c4:70:9a:18:32:70:
         03:99:a6:bc:d4:89:43:1a:ad:22:f5:21:3b:ac:cf:77:bb:ad:
         78:db:89:ef:87:6b:94:69:f5:47:c0:f3:aa:c4:3a:e3:ec:4d:
         cc:24:cc:a4:42:a8:0c:7a:f0:11:76:a0:00:aa:80:03:93:57:
         32:ee:dc:b4:0c:ad:f8:9d:a1:e2:97:59:a1:1a:09:62:9c:37:
         10:bb:82:96:e1:90:53:dd:f9:14:2f:1e:6f:62:90:10:3e:31:
         a6:c5:7b:f9:24:f2:76:13:6a:de:2e:69:9b:d9:bf:a0:77:c1:
         a9:28:37:a8:06:16:22:f2:05:92:93:1c:b2:3c:e1:63:e2:d4:
         c0:65:ee:f5:be:52:55:dd:e8:b0:de:39:a5:b6:ec:70:c8:df:
         1d:c5:4e:8f:9b:32:1b:da:b3:15:f8:dc:ec:f7:e8:b5:c3:fa:
         89:2c:cc:a7:98:66:b1:2a:66:93:9c:b8:f3:31:79:99:e2:be:
         73:e9:39:9a:d1:b7:92:69:b9:81:49:a3:2e:d4:d5:b5:a6:30:
         37:33:04:aa
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUPA92NjQSU4mMlo8VIbPh7rc5dwkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5OTRlZTkzYmFiZTYwYzEzZTA0NDg3ZmE1Y2QzNGZk
MjNmYzkzZjAeFw0yMjEwMjIwNDI4MTNaFw0yMzEwMjEwNDMzMTNaMDMxMTAvBgNV
BAMTKDZFODVEOENBMjdCMzIyMDlDNDNEQ0Q5MTMwQzQ0RDFGMTEyMzQwNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDId8aZf79VBE9hTerZcBcJuxgQ
oQmeE3Qmkd+7vnVaax9Y87UiNWCXFf212n/G/EJmKfvalOj1EdcPI/S9HbGM0rI6
sChS4fyeNYo29iFahVX41YUONKxmYGcgyRbk8jauB2iUIZiaGphmvR+xWqMgUyo7
s9UOy3pi0ooly2w1E+IpQpm2PE+rUsuAd75+a1HhO6sg55Xarb9II3aNG4JgsTrK
SEP3wNYK1iJWP4Zj5dNI5ZpJ3fNjnX8GrgGf53lzA8aeTHbgqQTVTCwA54Y8RPb3
yOeB++wScHK+8AJqMFvFDDi31ujrR9e4WdkaYcHVHax8OsW3UrssBsdfjZSDAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUboXYyiezIgnEPc2RMMRNHxEjQGwwHwYDVR0j
BBgwFoAUYZlO6Tur5gwT4ESH+lzTT9I/yT8wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzYvNjE5OTRFRTkzQkFCRTYwQzEzRTA0NDg3RkE1Q0QzNEZE
MjNGQzkzRi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1labE82VHVyNWd3VDRF
U0gtbHpUVDlJX3lUOC5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Ni8zMjMxMzIyZTM5MzAyZTMxMzIzMDJlMzAyZjMyMzMyZDMzMzIyMDNkM2UyMDM1
MzEzMTM2Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHUWngwDQYJKoZIhvcNAQELBQADggEBAAA0BOLj
u3PyFH+rPIlU8xWR6B+m5+g65uBLQZjhPdwbS3VUtBJHmNhCxxFriIi35sRwmhgy
cAOZprzUiUMarSL1ITusz3e7rXjbie+Ha5Rp9UfA86rEOuPsTcwkzKRCqAx68BF2
oACqgAOTVzLu3LQMrfidoeKXWaEaCWKcNxC7gpbhkFPd+RQvHm9ikBA+MabFe/kk
8nYTat4uaZvZv6B3wakoN6gGFiLyBZKTHLI84WPi1MBl7vW+UlXd6LDeOaW27HDI
3x3FTo+bMhvasxX43Oz36LXD+okszKeYZrEqZpOcuPMxeZnivnPpOZrRt5JpuYFJ
oy7U1bWmMDczBKo=
-----END CERTIFICATE-----