Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139342e3134372e35382e302f32342d3332203d3e203531313637.roa
File:                     3139342e3134372e35382e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          KD9K9WkpxmDGZJ2dg7t6rnQIFvb1zvg6KGsoar8br7Y=
Subject key identifier:   29:EF:2E:B1:C5:05:46:46:AE:3D:69:5F:BE:45:3F:B8:3B:8D:2E:C1
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       66E06D85E0A8A32FAB0FE7FAEB46CC6869D200C4
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e3134372e35382e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:32 +0000
ROA not before:           Sat 22 Oct 2022 04:28:32 +0000
ROA not after:            Sat 21 Oct 2023 04:33:32 +0000
asID:                     51167
IP address blocks:        194.147.58.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e0:6d:85:e0:a8:a3:2f:ab:0f:e7:fa:eb:46:cc:68:69:d2:00:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:32 2022 GMT
            Not After : Oct 21 04:33:32 2023 GMT
        Subject: CN=29EF2EB1C5054646AE3D695FBE453FB83B8D2EC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f8:bf:51:64:50:22:e2:b0:d4:4a:29:d4:74:
                    3d:2f:34:46:34:e5:a5:e9:65:87:f9:ac:13:ca:81:
                    7c:d4:72:94:9f:e7:84:ec:ee:df:6a:2b:75:5a:c9:
                    d0:7f:1b:ad:0c:f1:78:42:20:7e:34:b4:e9:8c:d7:
                    9c:6f:07:ce:90:2b:e4:5a:5f:4f:bf:e6:66:5f:06:
                    fc:a1:ba:dd:6b:96:d5:d8:39:28:c9:0d:56:bf:d8:
                    08:f1:b0:ba:92:a0:39:dc:c3:b8:81:43:0f:b3:ce:
                    e8:c4:6e:da:ce:0d:a9:c6:b3:19:ce:c3:0a:ab:49:
                    6b:dc:88:5a:15:fb:f8:b8:b5:86:2d:98:f6:71:23:
                    e5:0c:1c:a8:8e:82:f3:b7:bf:e5:c8:ac:88:83:a7:
                    e1:24:14:1f:5b:de:4a:0e:ad:c8:5c:53:c9:e4:71:
                    cd:7a:d3:03:c7:85:fb:82:31:74:ca:3f:2b:c7:95:
                    8c:d6:77:07:d7:25:10:e8:40:7a:c3:4d:01:72:89:
                    70:85:5a:20:9c:53:bb:4e:a4:c9:28:16:13:61:9e:
                    6f:78:89:25:51:e7:22:26:22:d4:bc:d6:79:8a:75:
                    24:a5:6a:be:43:42:46:1e:66:46:c9:00:2b:07:75:
                    99:b0:04:09:65:3e:70:9d:59:a6:69:24:c5:bc:83:
                    d6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:EF:2E:B1:C5:05:46:46:AE:3D:69:5F:BE:45:3F:B8:3B:8D:2E:C1
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e3134372e35382e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.147.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:24:21:48:1f:60:88:db:88:cd:af:14:ca:99:9f:c0:0a:51:
         39:b9:ce:62:72:2f:2d:a7:d8:a0:1b:5c:0e:b7:6a:16:11:9e:
         2d:16:05:e2:6c:b6:60:f2:b0:81:a6:37:ad:40:7b:de:8a:89:
         12:59:04:45:e3:00:f5:86:7b:24:89:f5:fe:94:6a:7c:de:e0:
         d4:71:ff:db:8d:cd:b3:99:7e:52:ef:f3:66:df:01:2c:23:41:
         ab:23:ba:6d:75:59:37:79:28:39:da:04:ea:18:82:6b:aa:e3:
         fe:2e:02:b4:37:ff:65:a4:10:cc:f6:10:3b:e6:e6:7d:fc:e1:
         fa:75:99:9d:a4:18:eb:60:8f:bd:eb:7e:32:ef:13:4f:7e:50:
         d8:7b:8d:3f:5c:ca:65:00:87:6a:e7:25:f2:cc:86:bf:ed:f6:
         63:91:1b:6d:15:12:5b:24:6f:71:2a:c4:83:3f:ce:c6:74:cf:
         ac:84:d3:3e:a3:4d:07:1f:fa:82:60:67:c0:80:21:bd:e0:14:
         ac:9a:7a:c3:26:43:c1:21:66:74:63:2e:fc:29:aa:ec:ce:34:
         97:ef:8c:42:7c:41:fd:13:28:0b:a1:ac:cf:96:60:59:1a:db:
         0c:33:4a:9e:de:b2:31:7d:0a:4f:0c:14:83:07:83:8e:28:2f:
         3e:40:fa:31
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUZuBtheCooy+rD+f660bMaGnSAMQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdhOGFmMmI1ZmU4MzFmZjU4OWViMzhhZTNjMDI1Y2U4
NzFmMjNlNzAeFw0yMjEwMjIwNDI4MzJaFw0yMzEwMjEwNDMzMzJaMDMxMTAvBgNV
BAMTKDI5RUYyRUIxQzUwNTQ2NDZBRTNENjk1RkJFNDUzRkI4M0I4RDJFQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt+L9RZFAi4rDUSinUdD0vNEY0
5aXpZYf5rBPKgXzUcpSf54Ts7t9qK3VaydB/G60M8XhCIH40tOmM15xvB86QK+Ra
X0+/5mZfBvyhut1rltXYOSjJDVa/2AjxsLqSoDncw7iBQw+zzujEbtrODanGsxnO
wwqrSWvciFoV+/i4tYYtmPZxI+UMHKiOgvO3v+XIrIiDp+EkFB9b3koOrchcU8nk
cc160wPHhfuCMXTKPyvHlYzWdwfXJRDoQHrDTQFyiXCFWiCcU7tOpMkoFhNhnm94
iSVR5yImItS81nmKdSSlar5DQkYeZkbJACsHdZmwBAllPnCdWaZpJMW8g9aDAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUKe8uscUFRkauPWlfvkU/uDuNLsEwHwYDVR0j
BBgwFoAUB6ivK1/oMf9YnrOK48AlzocfI+cwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzIvMDdBOEFGMkI1RkU4MzFGRjU4OUVCMzhBRTNDMDI1Q0U4
NzFGMjNFNy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0I2aXZLMV9vTWY5WW5y
T0s0OEFsem9jZkktYy5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Mi8zMTM5MzQyZTMxMzQzNzJlMzUzODJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1
MzEzMTM2Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADCkzowDQYJKoZIhvcNAQELBQADggEBABckIUgf
YIjbiM2vFMqZn8AKUTm5zmJyLy2n2KAbXA63ahYRni0WBeJstmDysIGmN61Ae96K
iRJZBEXjAPWGeySJ9f6Uanze4NRx/9uNzbOZflLv82bfASwjQasjum11WTd5KDna
BOoYgmuq4/4uArQ3/2WkEMz2EDvm5n384fp1mZ2kGOtgj73rfjLvE09+UNh7jT9c
ymUAh2rnJfLMhr/t9mORG20VElskb3EqxIM/zsZ0z6yE0z6jTQcf+oJgZ8CAIb3g
FKyaesMmQ8EhZnRjLvwpquzONJfvjEJ8Qf0TKAuhrM+WYFka2wwzSp7esjF9Ck8M
FIMHg44oLz5A+jE=
-----END CERTIFICATE-----