Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/3139342e36312e33302e302f32342d3234203d3e2030.roa
File:                     3139342e36312e33302e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          T7Gi+f/WI73xGhzkJ9xYbc2xmcg+L3w/v/Yz6eRmxwg=
Subject key identifier:   B7:A0:91:F7:E0:BB:71:6E:84:F7:D2:D6:3A:7B:70:8C:66:93:D1:2F
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       73F7113C19CE0FB641EA20A6E0C151ADAAEAED45
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/3139342e36312e33302e302f32342d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 16:13:10 +0000
ROA not before:           Fri 03 Mar 2023 16:08:10 +0000
ROA not after:            Fri 01 Mar 2024 16:13:10 +0000
asID:                     0
IP address blocks:        194.61.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:f7:11:3c:19:ce:0f:b6:41:ea:20:a6:e0:c1:51:ad:aa:ea:ed:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Mar  3 16:08:10 2023 GMT
            Not After : Mar  1 16:13:10 2024 GMT
        Subject: CN=B7A091F7E0BB716E84F7D2D63A7B708C6693D12F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:26:ef:6d:80:49:8e:20:fc:73:4c:5a:ea:34:
                    3e:d3:fe:0a:e4:9d:f3:f3:89:84:4a:37:1d:a4:b8:
                    f5:29:8b:ac:f6:82:07:64:99:a7:f3:18:7d:19:44:
                    9c:d1:5f:a2:60:80:ec:7a:b3:99:8b:7c:c9:26:c1:
                    a8:d8:74:bb:8b:7c:01:44:3f:09:80:d8:95:6c:22:
                    b5:e4:67:fe:29:c8:e9:6e:14:11:21:25:c0:5c:c1:
                    46:bf:8d:77:13:d4:78:bc:4a:f6:b2:07:02:40:38:
                    15:6a:89:07:ef:ca:75:b8:40:ca:4f:60:82:98:52:
                    e9:e1:59:9c:3c:a2:58:5c:87:dd:05:f9:a7:93:f9:
                    ae:db:e3:28:bb:4c:14:10:46:79:17:91:a6:6e:45:
                    fc:66:e0:cd:38:6d:17:f9:b0:72:71:44:73:1b:a5:
                    9c:83:f9:a3:56:9b:ec:7f:5a:12:07:2c:d9:56:6d:
                    6b:e4:ae:05:b4:59:d8:e9:1d:50:4f:94:17:10:4c:
                    4b:02:d8:19:ae:b5:1f:77:77:78:2f:57:42:1b:e9:
                    66:b9:0b:65:0f:a7:84:47:ed:fd:aa:7d:5c:9d:31:
                    d7:3d:18:40:ad:08:28:fc:78:85:86:0a:b5:51:7d:
                    fa:50:96:2a:bd:9c:fd:5b:4f:8d:4f:6a:0f:4c:9d:
                    be:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A0:91:F7:E0:BB:71:6E:84:F7:D2:D6:3A:7B:70:8C:66:93:D1:2F
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/3139342e36312e33302e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.61.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:33:8c:79:a1:a7:b4:84:18:34:97:f8:93:a1:e9:2e:c8:66:
         94:59:20:e7:11:19:f2:1b:b4:25:dc:3e:dd:10:8f:5f:b2:19:
         aa:c0:2e:91:1f:7f:b9:e4:99:d6:26:a0:8d:2c:27:cb:45:5f:
         dd:bd:16:5e:17:7b:e9:e1:91:e8:6d:60:31:e8:df:69:ef:b8:
         a4:7f:f7:69:5a:92:1c:c7:12:4c:47:94:9b:02:ab:59:a4:94:
         2e:44:77:25:a8:29:4a:a1:c3:59:36:45:84:f6:ce:f2:58:49:
         dc:fb:0b:9b:20:73:32:dd:9f:95:03:93:ab:ee:88:7f:54:89:
         48:63:68:75:7d:75:d0:29:2a:4c:c3:ff:07:6e:ce:d9:d0:04:
         5e:9b:86:a8:97:e6:a1:d4:03:8b:d5:c4:a2:81:2d:15:14:d2:
         90:ac:63:d3:1f:1b:7a:f5:60:c0:82:b3:7d:18:bd:39:5a:5f:
         a3:e9:b9:48:57:33:5e:c5:a8:a6:80:3a:59:e2:b3:78:4a:15:
         53:ab:a4:4f:b5:84:52:b0:7f:5e:3e:59:47:d2:f4:24:6d:eb:
         09:a8:85:1f:96:4b:20:1b:94:b7:9d:9e:e9:94:42:4d:5b:77:
         f8:bd:e1:27:9d:b1:95:37:8c:76:7e:9c:97:85:29:3f:1e:dd:
         d2:f6:6c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----