Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e35312e302f32342d3332203d3e203531313637.roa
File:                     38352e3230382e35312e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          A98Tc+ppBepSYlQLYzQTJh8pAgyvnKyICtURUwymWeM=
Subject key identifier:   65:E0:3F:76:DA:33:04:97:7F:BA:0E:B0:EA:90:CF:5A:55:0E:FF:E2
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       4EEEF57F8859E90DB2FECB071B73FE3731CA620A
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e35312e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:21 +0000
ROA not before:           Sat 22 Oct 2022 04:28:21 +0000
ROA not after:            Sat 21 Oct 2023 04:33:21 +0000
asID:                     51167
IP address blocks:        85.208.51.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ee:f5:7f:88:59:e9:0d:b2:fe:cb:07:1b:73:fe:37:31:ca:62:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:21 2022 GMT
            Not After : Oct 21 04:33:21 2023 GMT
        Subject: CN=65E03F76DA3304977FBA0EB0EA90CF5A550EFFE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e2:7c:25:cc:a9:bb:20:c7:30:b8:e0:1f:d6:
                    43:20:1e:c2:87:ae:90:77:e2:c0:3e:b4:6d:68:a2:
                    be:db:e2:2e:80:17:b0:6f:cf:9a:b1:26:6d:40:6f:
                    6e:36:8b:95:1e:39:9d:3e:75:d1:6d:b1:82:e3:a2:
                    b9:33:a0:de:f6:08:60:3d:30:03:75:8b:87:30:d9:
                    c7:a1:d9:88:03:79:28:2e:bc:68:c3:16:6e:bc:9a:
                    ed:f4:fe:0a:cf:5d:26:58:cf:1a:3f:cc:ef:c9:46:
                    67:68:8a:11:11:8d:fe:64:5a:5a:53:15:9a:f3:94:
                    00:f1:73:71:46:ae:e1:37:d2:57:f4:7e:9d:71:af:
                    a6:30:a5:40:1d:ab:4e:53:51:88:37:68:10:cb:b3:
                    28:1b:44:73:fb:1f:40:50:ba:45:e2:8b:93:a9:ee:
                    bc:9e:6a:4d:77:a1:c7:f2:3e:b1:76:ad:60:0e:66:
                    1e:e0:5e:e0:f1:32:e4:a1:d6:cf:6b:c7:f2:ad:ca:
                    f9:21:58:4b:7d:f4:0a:58:86:ec:ef:ea:75:03:7b:
                    68:d1:2f:96:ad:8a:01:cf:6f:c6:35:d7:cf:2d:dd:
                    42:15:4d:e9:ae:1e:64:d2:42:75:e2:2c:a6:82:f2:
                    7f:16:2f:fe:1f:2f:45:35:92:96:25:7b:16:2c:b1:
                    5f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E0:3F:76:DA:33:04:97:7F:BA:0E:B0:EA:90:CF:5A:55:0E:FF:E2
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e35312e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.208.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:8f:72:ce:6d:8d:9c:2e:f6:f7:4e:07:58:1e:d8:ad:52:ff:
         be:27:51:90:21:f0:77:1e:9d:b9:92:61:3e:0b:9c:ed:2b:a0:
         45:9d:30:3d:1a:53:a0:d8:e5:bb:0f:8a:9e:51:2d:16:15:d0:
         3d:6a:0a:f4:67:dd:77:49:c1:90:bc:59:4d:e6:ce:75:6c:76:
         6f:06:5a:5d:1d:6b:95:26:bc:74:c2:16:a1:dc:6c:29:8f:15:
         fa:50:57:f0:cf:60:ff:be:b0:ea:74:88:00:e1:7c:f0:ac:d8:
         6b:1f:eb:93:21:9a:ed:00:ae:b5:e9:97:93:bb:e9:b5:7c:87:
         7e:2f:6f:87:ce:b0:a7:f6:34:13:5f:4a:f9:a4:7c:b8:4a:2a:
         57:23:45:30:ba:68:81:ac:01:67:2f:23:ef:ac:42:ef:38:64:
         1c:a9:bd:47:6a:60:0d:b1:64:8b:80:19:38:11:95:22:0b:4c:
         87:e7:94:ca:f3:b2:d8:58:7d:aa:6d:32:56:c5:bc:be:b9:60:
         8c:40:4c:6e:cc:1a:b7:f9:d2:0d:4d:bf:26:68:20:57:b5:95:
         a4:23:ce:fb:fc:07:d5:c4:f9:63:dc:77:23:a7:78:51:80:f2:
         0c:a7:04:d4:2b:29:8c:6f:6b:ac:03:1a:b3:38:3b:8f:75:b0:
         b2:99:57:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----