Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3138352e3235322e3233322e302f32342d3332203d3e203531313637.roa
File:                     3138352e3235322e3233322e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          w8vapEzzUKAbLA6rn8Ao79ZgBSwzEzQ/u/oI/j/Ppng=
Subject key identifier:   69:C4:A0:01:78:B1:0C:CA:BA:26:3B:C4:32:8B:5B:AF:7E:27:1E:B8
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       3052365E0EF17F7500C1142EC2A0226B442A6811
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3138352e3235322e3233322e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:42 +0000
ROA not before:           Sat 22 Oct 2022 04:28:42 +0000
ROA not after:            Sat 21 Oct 2023 04:33:42 +0000
asID:                     51167
IP address blocks:        185.252.232.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:52:36:5e:0e:f1:7f:75:00:c1:14:2e:c2:a0:22:6b:44:2a:68:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Oct 22 04:28:42 2022 GMT
            Not After : Oct 21 04:33:42 2023 GMT
        Subject: CN=69C4A00178B10CCABA263BC4328B5BAF7E271EB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e1:b1:e4:0a:f4:21:51:9f:e8:9f:e8:1f:81:
                    c4:42:94:06:b1:29:54:bb:e7:3e:e1:ee:e6:75:f8:
                    7d:c0:7c:7d:a7:71:97:6b:aa:d8:8a:02:43:53:de:
                    aa:47:0c:f2:7a:97:a6:c3:07:07:bc:c1:a8:d1:c2:
                    92:d1:b5:03:b8:d7:a8:16:2e:a8:b2:72:f9:80:8b:
                    65:7c:66:2d:fe:1e:dc:9f:56:63:84:b6:f3:5e:9d:
                    5a:5a:a9:6f:dc:3d:5d:9b:bd:17:f6:a3:47:aa:50:
                    3e:05:a6:c6:a2:2d:d0:58:c2:b9:e3:4e:3d:16:a3:
                    ef:64:ed:1a:10:c8:c5:53:64:20:93:a7:85:ca:4b:
                    a4:75:16:4e:62:e4:3a:26:46:e6:7d:d2:38:02:34:
                    90:97:63:c3:24:65:6e:45:4a:df:db:62:91:1a:b6:
                    ee:5d:b1:5d:51:3f:96:bc:7f:13:af:88:45:27:df:
                    c5:ad:ec:62:db:b7:ff:6e:81:bb:82:ec:e3:5a:f6:
                    c7:f1:20:d8:2a:76:ce:c8:18:a9:47:b2:10:98:69:
                    56:9c:28:06:94:84:fa:07:d5:b3:8d:e4:fe:d5:d6:
                    7b:60:c3:3b:53:6e:d1:c8:fa:ff:7c:7e:44:9f:6b:
                    aa:fc:aa:13:b6:0f:67:76:52:dd:4a:0a:0c:c7:93:
                    7d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C4:A0:01:78:B1:0C:CA:BA:26:3B:C4:32:8B:5B:AF:7E:27:1E:B8
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3138352e3235322e3233322e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.252.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:5c:68:9e:ed:a4:d0:36:5f:a6:69:98:03:2a:80:a6:26:eb:
         97:ce:18:bb:1a:3f:c7:3d:f9:a3:84:1a:16:c1:1c:77:a4:68:
         4e:60:53:be:a2:b5:ca:de:1e:2f:e5:df:06:7a:0b:27:27:0c:
         50:2b:f1:21:14:cf:9c:de:48:7d:75:06:35:f0:3d:59:0a:8e:
         f8:5d:61:f5:8d:61:dc:cb:ff:a8:65:fa:66:6a:32:60:5b:8e:
         f8:c6:5b:e4:a8:d6:4f:6c:bd:66:70:8a:c3:20:d2:3b:1c:a0:
         87:ef:a2:97:17:8d:43:b2:d0:ef:85:43:e0:a8:21:fc:a9:63:
         1b:90:b9:82:39:94:03:a4:6e:e1:80:18:1e:ac:6d:b8:8d:92:
         0f:0f:ef:c1:54:7d:e0:f6:69:22:6d:42:6b:2a:5d:b5:37:3f:
         3f:dd:21:c5:6f:d2:4c:01:f6:6d:d4:c9:ba:9d:85:a6:d3:89:
         98:58:87:7f:de:77:d4:55:dc:82:92:4a:8c:f7:49:81:e5:07:
         ab:f9:2c:85:55:a4:7c:d9:24:6c:50:fa:27:16:05:a7:ea:59:
         ee:d9:53:a6:47:46:3d:a2:02:e5:e4:c7:ae:eb:97:e9:a7:eb:
         c3:c3:e0:a8:ad:f5:0f:42:ec:f3:97:33:32:aa:78:4f:2b:e8:
         5f:eb:bc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----