Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139342e3131332e36352e302f32342d3332203d3e203536383736.roa
File:                     3139342e3131332e36352e302f32342d3332203d3e203536383736.roa (raw, json)
Hash identifier:          em/90MDSkKZbkwoA4Q9Ha0f0kKpzvMnvdmF6UJUvvdg=
Subject key identifier:   61:5A:76:BD:89:FF:77:4F:1D:2A:A6:5E:C3:38:25:60:D6:9D:1D:55
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       4A6645C06402713FAC4DFFDFDC2496ECC43FB09E
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e3131332e36352e302f32342d3332203d3e203536383736.roa
Signing time:             Sat 22 Oct 2022 04:33:43 +0000
ROA not before:           Sat 22 Oct 2022 04:28:43 +0000
ROA not after:            Sat 21 Oct 2023 04:33:43 +0000
asID:                     56876
IP address blocks:        194.113.65.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:66:45:c0:64:02:71:3f:ac:4d:ff:df:dc:24:96:ec:c4:3f:b0:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Oct 22 04:28:43 2022 GMT
            Not After : Oct 21 04:33:43 2023 GMT
        Subject: CN=615A76BD89FF774F1D2AA65EC3382560D69D1D55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:86:e6:8e:34:71:b5:44:cb:0e:99:0a:0f:b2:
                    7c:81:cd:8e:21:e2:2e:41:99:70:e6:6f:a7:8b:40:
                    c6:57:0d:05:d8:a9:1d:d1:f8:68:c9:91:2b:29:ee:
                    2c:79:db:95:83:14:eb:05:0d:80:c4:82:46:0e:e4:
                    9f:d8:81:e1:1c:5b:4d:0a:f1:c7:91:b6:bc:5d:22:
                    15:36:4f:b3:ff:e9:63:c5:e1:0a:bc:47:71:4e:0e:
                    21:1e:f0:74:48:6a:11:87:e8:05:5a:66:32:ef:55:
                    36:c7:84:00:a3:8c:23:25:32:bf:ce:50:14:ec:10:
                    0c:8a:ec:16:9c:60:9c:ba:f7:d7:c4:6b:fb:93:9d:
                    69:97:e6:f0:28:f7:84:3c:3c:e8:a1:25:4a:d6:29:
                    d2:66:dd:12:60:2a:1c:7d:e9:69:09:bf:d2:bb:80:
                    8a:52:be:c5:5c:4e:8a:88:c4:11:d8:a2:91:14:e1:
                    9c:4c:e7:e5:39:b0:f6:98:e5:b7:63:d7:f9:d5:ae:
                    29:11:06:91:aa:00:2e:86:d7:6d:4d:10:53:f3:f2:
                    6f:b3:e4:bf:1b:b2:4d:78:1a:45:6d:dd:eb:09:58:
                    20:cb:19:4d:7b:8b:69:ca:c7:19:cd:00:e3:53:56:
                    be:49:f2:2b:ed:3a:6b:86:df:a7:28:c6:f6:fb:67:
                    e1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5A:76:BD:89:FF:77:4F:1D:2A:A6:5E:C3:38:25:60:D6:9D:1D:55
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e3131332e36352e302f32342d3332203d3e203536383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.113.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:27:4c:0f:57:07:d5:18:71:f9:f0:46:4b:ff:dd:42:96:78:
         fc:64:da:51:3f:eb:b8:31:31:fa:75:52:6e:45:16:e4:9d:0c:
         44:0e:ed:85:1b:7a:79:2f:76:cf:79:e4:f4:dc:a0:f8:66:82:
         ce:41:29:8a:81:a6:bf:1b:30:a8:32:61:c0:35:7b:9a:d7:a3:
         32:76:dc:a0:b1:af:ae:ff:db:90:4e:28:90:50:38:2d:c0:5c:
         6b:86:00:4f:bb:e9:8c:a0:0e:ff:01:ad:96:21:42:1c:82:c6:
         ec:39:a3:ea:83:cd:ab:ff:93:6c:6f:fa:69:83:28:2e:94:02:
         7b:f2:2b:99:58:a0:6b:c5:77:fe:cc:1a:ca:a1:f9:89:27:51:
         ae:a5:7f:89:c5:ce:35:5a:b0:af:69:31:e3:18:f1:20:50:52:
         4b:74:e0:74:29:2e:86:d7:2e:2b:f1:29:54:fb:0e:3d:43:75:
         38:d8:39:af:d4:6e:2a:ee:ae:34:3b:71:d1:89:db:81:2d:a2:
         eb:42:5c:27:8f:cc:25:43:8e:94:a1:cc:80:f2:b6:c6:95:a0:
         73:2e:b9:e8:e8:81:6e:ba:a5:3f:4d:ec:5b:5d:06:78:df:d2:
         44:17:e4:d7:9e:d0:c9:7a:90:06:30:60:b7:43:30:59:dd:71:
         74:0f:d5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----