Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139332e34322e302e302f32342d3234203d3e20333938343634.roa
File:                     3139332e34322e302e302f32342d3234203d3e20333938343634.roa (raw, json)
Hash identifier:          N/1P6YhgNduxYLUjIt/hh8GiaGWNQ74QwKuOdRAZoTs=
Subject key identifier:   D6:D5:D2:58:6B:BB:9B:4C:C1:75:99:AD:8D:4E:02:2C:85:05:A3:4B
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       7B8D670F448A188840F68962B7DC1429732105CB
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139332e34322e302e302f32342d3234203d3e20333938343634.roa
Signing time:             Tue 28 Jun 2022 04:40:50 +0000
ROA not before:           Tue 28 Jun 2022 04:35:50 +0000
ROA not after:            Tue 27 Jun 2023 04:40:50 +0000
asID:                     398464
IP address blocks:        193.42.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:8d:67:0f:44:8a:18:88:40:f6:89:62:b7:dc:14:29:73:21:05:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jun 28 04:35:50 2022 GMT
            Not After : Jun 27 04:40:50 2023 GMT
        Subject: CN=D6D5D2586BBB9B4CC17599AD8D4E022C8505A34B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a1:7c:74:25:09:b7:3c:09:80:04:a7:bc:1e:
                    f2:fe:7e:68:db:57:66:3a:3a:31:bd:4e:65:d7:25:
                    08:aa:e6:86:8d:cb:a8:f9:94:f9:5b:92:6e:7c:7f:
                    08:83:8d:fb:4c:2b:48:0a:bf:40:86:fd:03:73:c7:
                    3d:00:7c:08:bd:b1:86:7c:f4:a3:60:bf:ed:b8:bf:
                    8f:f0:c2:76:18:39:af:0c:a8:75:be:a0:b7:91:d0:
                    6c:8c:54:44:d9:6e:04:64:09:50:73:e1:dc:cf:da:
                    fb:46:21:c5:2e:b8:c9:d2:83:05:35:e9:47:6d:ce:
                    28:b3:94:ef:71:7a:5f:f7:b1:b9:0d:39:46:11:bf:
                    40:44:a2:ed:f6:46:e6:00:b6:4c:de:3d:ba:59:c1:
                    2f:92:11:bc:84:19:14:5e:97:4b:10:a8:5b:fa:79:
                    25:83:74:1d:04:82:c1:d8:f4:01:97:62:a7:04:33:
                    0e:c0:df:e6:7b:60:3f:12:36:26:26:22:7e:90:64:
                    e5:75:59:dd:f1:aa:7e:01:ab:5b:93:22:02:52:7a:
                    d0:90:04:45:5c:44:97:09:91:e2:d9:31:0b:a6:3f:
                    ca:23:99:7b:76:e8:cc:d1:c9:7e:10:9c:fc:9c:01:
                    9e:90:c9:77:c8:97:ed:3b:67:61:4f:74:de:1f:08:
                    e2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D5:D2:58:6B:BB:9B:4C:C1:75:99:AD:8D:4E:02:2C:85:05:A3:4B
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139332e34322e302e302f32342d3234203d3e20333938343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.42.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:e4:be:da:a0:ce:5d:55:96:f4:da:c0:6c:3a:0d:73:c2:af:
         cd:a6:40:43:bb:3d:2c:f0:e0:b3:d0:17:9c:cb:f7:bc:88:7b:
         0f:02:07:c0:df:62:e8:28:b4:15:ce:c6:ea:be:90:86:11:e1:
         90:62:74:9a:54:73:29:bf:e3:65:ef:32:8f:53:b1:92:b0:1c:
         46:ad:a9:92:c1:32:e3:9b:07:18:8c:d7:a0:e8:60:d4:8c:cf:
         d6:ce:3d:be:50:8a:87:d6:0f:3e:9a:4a:c2:04:29:b5:d6:fd:
         95:c9:88:40:e7:1a:fd:79:5f:99:d3:ea:d3:18:98:0a:f3:fa:
         7f:0a:ac:b5:1c:5a:db:03:c1:4d:44:2a:a6:52:01:be:13:9d:
         a4:85:42:fc:71:35:d2:d7:35:e6:92:61:50:21:fd:82:91:45:
         a1:f4:e0:bd:aa:fd:2b:7b:15:10:56:2b:6e:28:b1:50:c3:a4:
         16:76:27:93:09:64:9e:df:51:4d:99:e3:5c:ee:7c:9f:4c:ef:
         44:ce:68:15:6d:1f:be:e9:37:14:82:a7:ab:d9:f3:54:43:e5:
         88:58:e8:e7:95:85:e5:9d:f6:01:db:4b:bc:d1:28:1f:ee:a5:
         2b:35:8e:d3:18:8b:4d:f8:38:96:2d:ff:c5:68:cf:c4:7a:bf:
         a3:6f:de:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----