Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139342e3135362e3232362e302f32342d3234203d3e20323034313730.roa
File:                     3139342e3135362e3232362e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier:          eTrDB3UJNTaNhozQZ5nGwpJq/hQS+Dx96QNwa5fvlow=
Subject key identifier:   F5:BB:AB:23:77:9E:13:E4:F1:32:8B:65:60:E9:59:2C:26:98:F6:5D
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       3FA8D5BBDBCE2133EF7AF2D45CD8BCFEABB9AFB1
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e3135362e3232362e302f32342d3234203d3e20323034313730.roa
Signing time:             Sat 22 Oct 2022 04:33:46 +0000
ROA not before:           Sat 22 Oct 2022 04:28:46 +0000
ROA not after:            Sat 21 Oct 2023 04:33:46 +0000
asID:                     204170
IP address blocks:        194.156.226.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a8:d5:bb:db:ce:21:33:ef:7a:f2:d4:5c:d8:bc:fe:ab:b9:af:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Oct 22 04:28:46 2022 GMT
            Not After : Oct 21 04:33:46 2023 GMT
        Subject: CN=F5BBAB23779E13E4F1328B6560E9592C2698F65D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a5:e2:e9:aa:11:06:2c:5d:bf:53:7d:11:20:
                    ef:e7:cd:8e:ec:36:0f:a1:a1:4c:7a:8d:2f:51:47:
                    4e:58:70:01:8d:b9:3f:37:38:40:d2:8e:59:97:98:
                    61:37:5c:d1:84:1f:4a:2c:de:07:91:a4:a3:b5:a8:
                    07:e1:2a:c4:38:79:f0:12:9f:89:8a:09:c4:2d:e2:
                    b0:bd:0a:3e:97:70:09:14:d5:d5:6b:97:c1:9b:6e:
                    65:46:fa:dd:b1:73:3e:ec:48:6a:04:6f:25:b6:f8:
                    0d:dd:b9:e6:e3:f0:17:98:97:5d:f8:5e:ae:64:32:
                    25:16:23:58:e3:f4:7f:d5:37:38:1e:eb:84:5d:a1:
                    d2:6e:cd:67:b9:33:c8:84:2e:0f:91:3f:51:d3:c6:
                    21:82:0e:09:31:f5:18:7d:d9:fc:1c:c3:d7:d3:3e:
                    7e:1f:91:d7:4d:e9:66:15:72:7a:7c:dc:b3:5b:10:
                    43:0d:4c:0b:65:4b:4a:37:23:d4:16:5f:a5:32:fc:
                    bc:e0:7e:50:0d:57:8e:98:5d:8e:e3:b4:73:d9:10:
                    ee:0d:72:ae:2a:3f:d3:7b:dc:76:0b:70:c1:d3:57:
                    74:9f:c6:66:f1:66:62:1c:e1:ae:2a:17:b5:71:89:
                    a7:7e:2e:cd:0e:f8:8e:e0:1a:27:f6:d8:c2:3d:81:
                    1c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:BB:AB:23:77:9E:13:E4:F1:32:8B:65:60:E9:59:2C:26:98:F6:5D
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e3135362e3232362e302f32342d3234203d3e20323034313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.156.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:21:55:f0:ec:b3:76:8b:69:dc:20:9b:c0:f9:19:22:a0:a7:
         64:78:11:da:6b:d4:38:68:3a:11:52:11:30:0c:23:28:d8:93:
         ab:8e:e8:78:4e:78:e7:e0:f3:7e:85:0c:7d:12:ee:fa:4c:af:
         73:6f:e7:b7:27:7e:0c:1c:3d:30:0d:0a:c5:34:94:09:ac:cd:
         41:59:39:b2:28:45:34:06:8f:8a:d9:e4:8f:13:64:bf:bf:20:
         aa:2e:02:23:19:27:64:3e:4f:d5:2e:12:14:64:1f:c1:63:fa:
         47:bd:80:cf:bf:59:25:fd:6a:99:6b:bf:26:5f:88:ef:01:85:
         2c:2d:7d:0b:cb:63:87:51:a3:e6:f0:ed:ec:9f:c8:9f:c4:14:
         78:a9:82:e4:77:d6:f4:84:a4:64:eb:32:b9:f1:99:30:37:66:
         45:f6:c2:7f:70:5d:f3:1c:44:8f:ac:6f:c1:1f:27:8b:03:08:
         c9:54:f5:45:c6:57:46:a7:c2:c6:c9:20:15:34:98:30:1c:8e:
         4d:a1:00:94:e1:45:02:25:5c:a9:0a:8a:ef:6e:76:e6:e8:17:
         d4:75:41:b3:fc:82:81:f0:58:18:ee:fa:f4:e6:b9:f9:ca:1c:
         75:74:c1:4a:39:31:81:d3:60:f2:ed:d3:55:5d:77:ab:5c:42:
         01:e5:f2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----