Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139322e3134352e3131392e302f32342d3234203d3e20313431303339.roa
File:                     3139322e3134352e3131392e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier:          GB+9/MzMOC61TSRXubxNvpdp8TSZuN5CoWKbLSpvnqE=
Subject key identifier:   09:6D:E2:20:8D:C3:F3:ED:CA:94:87:F3:3C:BD:2D:A3:C7:14:18:1B
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       2B56BD9FB241A222B8FA80861BC30CE6FBF29D19
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139322e3134352e3131392e302f32342d3234203d3e20313431303339.roa
Signing time:             Fri 24 Feb 2023 07:50:07 +0000
ROA not before:           Fri 24 Feb 2023 07:45:07 +0000
ROA not after:            Fri 23 Feb 2024 07:50:07 +0000
asID:                     141039
IP address blocks:        192.145.119.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:56:bd:9f:b2:41:a2:22:b8:fa:80:86:1b:c3:0c:e6:fb:f2:9d:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Feb 24 07:45:07 2023 GMT
            Not After : Feb 23 07:50:07 2024 GMT
        Subject: CN=096DE2208DC3F3EDCA9487F33CBD2DA3C714181B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:42:59:df:9e:3f:95:a5:db:52:23:49:36:a9:
                    dd:e3:ee:97:42:ff:8e:cc:2d:47:f5:de:b7:33:2c:
                    9f:4f:30:a2:bb:0a:79:7c:5d:ee:80:ad:14:6a:dd:
                    a1:c2:1d:04:1f:31:2c:c3:9f:99:45:10:16:15:7e:
                    d3:e0:16:1c:36:49:9c:23:e8:21:1d:df:bf:88:ea:
                    16:37:d4:8d:fb:c5:b2:25:55:fb:b1:94:cf:57:9b:
                    cf:b2:cc:29:96:ad:ab:30:32:78:f6:0b:bc:e9:87:
                    e4:f1:ed:e2:e9:55:63:77:ed:3b:d8:fd:9e:98:34:
                    17:82:4e:21:97:45:11:f6:d0:82:cb:2a:f3:a5:07:
                    6e:e4:41:69:d8:cb:a3:53:8f:11:93:3b:32:4f:d5:
                    07:69:b9:4d:07:c4:e6:50:7f:a8:f9:f9:34:18:a4:
                    0d:20:de:3c:4a:93:bf:9b:73:28:69:f7:76:ef:0b:
                    cd:e3:78:df:3b:d8:2b:b7:65:83:00:c3:44:78:fb:
                    4c:57:06:8b:97:8d:5b:ec:f9:02:91:9d:c2:83:1f:
                    8e:26:57:53:b5:26:27:83:f2:49:00:65:fe:98:cc:
                    a4:04:ac:94:a7:fe:d4:bb:0e:57:4d:6c:5b:5b:1e:
                    18:b6:b2:48:4f:3b:35:cc:99:e3:d2:a8:29:54:10:
                    94:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6D:E2:20:8D:C3:F3:ED:CA:94:87:F3:3C:BD:2D:A3:C7:14:18:1B
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139322e3134352e3131392e302f32342d3234203d3e20313431303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.145.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:49:34:75:3b:13:3f:68:e8:b2:95:41:bf:45:a7:3a:3a:82:
         46:81:79:58:31:00:ac:9d:5e:07:15:c9:01:6b:65:b1:71:99:
         18:79:76:ef:05:f1:df:e3:8e:59:87:51:41:d8:91:0a:63:ff:
         04:69:a0:f6:f6:54:a4:eb:34:b0:3c:e0:6f:a2:c7:5e:ff:f2:
         e5:b3:9e:cd:46:99:ad:20:de:ae:9c:49:45:6d:e8:f8:5e:61:
         5c:bf:99:9e:00:bc:c7:a0:17:56:45:95:27:04:3d:6e:61:d6:
         e0:f9:f6:0f:0b:d9:06:8f:49:70:0e:9e:a2:ac:92:94:fb:d5:
         4b:5b:f0:69:65:60:92:55:cd:c8:a8:b8:fc:44:e5:bd:a9:02:
         c6:cd:01:05:e6:d7:82:5d:ba:13:33:54:f3:75:eb:e7:eb:c7:
         de:57:92:85:02:81:58:0f:5d:08:d7:ef:8c:c3:ab:e6:fa:9e:
         98:31:d0:bb:86:ab:e3:98:b6:0a:df:94:06:c6:71:3e:6a:6e:
         98:2d:25:60:c8:d3:20:34:9a:85:f6:b9:3f:a6:d7:b9:68:16:
         d2:c8:cf:db:4d:44:f4:d4:a4:9a:4c:49:4f:04:05:3d:de:60:
         75:e3:3d:3c:03:a7:a6:42:73:3f:e2:3d:86:1c:a6:67:34:00:
         d8:c8:4f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----