Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/39322e3131382e36322e302f32342d3332203d3e20313336373837.roa
File:                     39322e3131382e36322e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          4JZVhK5XGKrdtmS50HR8yoS4nQGZAfHMdRWK3jCtCOU=
Subject key identifier:   29:1A:B4:9E:14:95:5A:AD:80:CE:F3:C1:E2:1E:B3:D6:DA:F7:09:6C
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       25E8FD5BD65125D819FB783E166D5A5350A5BA25
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/39322e3131382e36322e302f32342d3332203d3e20313336373837.roa
Signing time:             Wed 28 Dec 2022 09:41:03 +0000
ROA not before:           Wed 28 Dec 2022 09:36:03 +0000
ROA not after:            Wed 27 Dec 2023 09:41:03 +0000
asID:                     136787
IP address blocks:        92.118.62.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e8:fd:5b:d6:51:25:d8:19:fb:78:3e:16:6d:5a:53:50:a5:ba:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Dec 28 09:36:03 2022 GMT
            Not After : Dec 27 09:41:03 2023 GMT
        Subject: CN=291AB49E14955AAD80CEF3C1E21EB3D6DAF7096C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d1:b0:f8:08:13:0d:00:87:6e:fe:88:b7:fc:
                    3f:aa:5d:8e:16:1a:36:8f:cd:a6:01:d1:be:c7:5d:
                    70:c7:8c:66:0d:ea:d2:2b:31:29:ae:58:d7:44:6e:
                    7f:e2:1e:57:3c:c8:d0:da:ec:ad:36:fa:05:75:51:
                    82:33:5b:6e:6a:90:9f:73:06:53:a7:cb:1a:7e:dc:
                    cf:28:d3:fb:ec:4d:ae:64:d5:b7:19:ea:51:2e:cf:
                    cf:4a:6b:73:11:6d:7f:4f:02:12:14:a8:a9:a6:8b:
                    1d:19:1a:1f:a7:55:26:b0:fd:e2:02:9f:c0:13:51:
                    66:b0:aa:e5:51:2a:46:fe:14:39:60:1d:49:8a:17:
                    23:ff:c4:0a:ba:94:34:80:f5:8b:fe:33:3e:53:79:
                    1b:31:f7:41:52:04:10:2c:3d:db:bb:35:9a:fc:49:
                    5e:a1:87:4a:e6:bf:d0:7f:84:d7:eb:ca:9e:c2:ba:
                    0b:a6:91:4f:c2:b5:96:bf:93:18:24:8f:49:40:05:
                    d8:4d:e9:ff:c4:79:ff:41:19:1f:08:a9:3c:ba:26:
                    c8:8a:a6:e5:a5:d3:70:96:fb:86:3a:34:73:27:33:
                    eb:d3:60:a2:cf:2d:6a:8d:7d:b9:21:a3:2f:bd:b0:
                    51:e1:6c:3c:8f:e0:74:ff:93:4f:67:a0:dc:95:d3:
                    0b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:1A:B4:9E:14:95:5A:AD:80:CE:F3:C1:E2:1E:B3:D6:DA:F7:09:6C
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/39322e3131382e36322e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.118.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:c8:a0:e8:2a:c4:91:11:05:6b:57:0a:cb:dd:62:8c:e8:6a:
         a5:b5:90:b4:da:5b:e0:37:33:53:4f:26:d4:fd:60:34:7a:15:
         42:d8:c3:ca:85:86:43:a0:9d:f7:51:2a:0d:46:d2:43:fa:90:
         0e:09:dc:86:e9:b6:7c:77:e5:94:70:70:26:de:9e:fa:59:a9:
         4d:3e:78:d1:e0:f0:3e:a2:0b:39:82:eb:6a:96:93:36:b8:5a:
         84:f4:15:5b:72:85:a0:50:ff:35:3f:9e:15:18:16:e5:d4:a9:
         fd:1c:4e:ec:1a:e9:6d:aa:5a:c6:9d:24:25:bc:82:5e:74:c5:
         83:42:c8:db:8b:47:98:84:ca:08:75:0b:aa:5f:d2:28:0e:a6:
         8f:6d:a0:ca:ca:c4:4e:e3:06:67:1c:e4:20:80:97:8f:e0:9a:
         f3:4a:20:1c:e3:6e:d6:6a:62:e0:8f:3a:ba:b9:3f:6c:98:f8:
         0f:43:28:aa:6e:9c:e5:47:fd:49:2e:35:db:d9:ac:55:e4:f6:
         94:61:cb:f8:56:fb:28:05:4f:88:f2:92:53:f3:80:b6:85:e9:
         ac:a5:1b:90:c7:74:2e:aa:7e:22:1c:28:47:8c:ae:8d:cb:dc:
         ea:0c:57:7c:76:28:19:39:2b:0d:c9:a9:89:6f:f1:96:d5:4c:
         d6:26:e5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----