Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/180/352e3138332e382e302f32322d3234203d3e203437353833.roa
File:                     352e3138332e382e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier:          5OMjDvnOCv+ED4EvlUjVGBuwv6xfc2XNgOt03mvLhnM=
Subject key identifier:   0C:6B:D6:54:47:AF:91:CC:39:D7:53:79:6D:6D:C4:35:58:EE:AE:39
Certificate issuer:       /CN=dfe89bf7daa0f8aa7d022df984e6ea37e6f60a3d
Certificate serial:       43BBC803AA528EC68E77B2C8CB9089E88857C5B0
Authority key identifier: DF:E8:9B:F7:DA:A0:F8:AA:7D:02:2D:F9:84:E6:EA:37:E6:F6:0A:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3-ib99qg-Kp9Ai35hObqN-b2Cj0.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/180/352e3138332e382e302f32322d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:33:50 +0000
ROA not before:           Sat 22 Oct 2022 04:28:50 +0000
ROA not after:            Sat 21 Oct 2023 04:33:50 +0000
asID:                     47583
IP address blocks:        5.183.8.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:bb:c8:03:aa:52:8e:c6:8e:77:b2:c8:cb:90:89:e8:88:57:c5:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe89bf7daa0f8aa7d022df984e6ea37e6f60a3d
        Validity
            Not Before: Oct 22 04:28:50 2022 GMT
            Not After : Oct 21 04:33:50 2023 GMT
        Subject: CN=0C6BD65447AF91CC39D753796D6DC43558EEAE39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e1:d6:af:32:07:37:7b:95:b7:24:c8:de:e3:
                    fb:49:1b:cf:01:93:38:d7:5a:fd:a4:bb:13:f6:25:
                    c8:28:1a:59:b5:7d:e4:ab:26:96:77:17:ba:af:40:
                    66:a7:26:99:6a:7f:c2:35:c5:12:74:24:76:74:6c:
                    bf:ee:96:ab:9e:75:39:67:c6:46:f7:35:f7:25:2b:
                    ff:3d:d0:aa:c7:b0:2c:27:e4:6c:b4:2a:37:cc:95:
                    38:6a:16:0e:d6:d4:9d:32:b6:16:4e:00:34:48:95:
                    dd:94:1a:c8:9a:f4:30:df:30:73:b9:d2:61:cb:3f:
                    d3:03:40:ad:e8:79:c6:9c:50:05:69:6d:a9:f8:5a:
                    53:f9:b8:63:c2:43:37:b8:a1:fb:92:41:b2:f7:32:
                    6f:5a:a4:84:d7:1d:b6:35:2c:fb:b4:01:53:10:73:
                    4c:dd:62:7a:1f:f6:58:cb:55:cb:c3:6e:3e:6c:28:
                    ec:e7:98:ea:24:f1:b8:46:20:31:58:51:fa:ba:31:
                    7d:a4:d8:a7:ad:b9:c8:3b:1a:69:64:92:34:9e:95:
                    ad:dc:7a:46:fe:de:0c:85:4d:18:56:b8:e6:d6:d9:
                    2c:fc:b9:af:d4:cf:6a:16:04:d0:f2:a2:63:85:55:
                    e0:f7:f8:a7:f0:78:a2:c7:76:2c:40:bd:bc:65:c3:
                    46:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:6B:D6:54:47:AF:91:CC:39:D7:53:79:6D:6D:C4:35:58:EE:AE:39
            X509v3 Authority Key Identifier:
                keyid:DF:E8:9B:F7:DA:A0:F8:AA:7D:02:2D:F9:84:E6:EA:37:E6:F6:0A:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/180/DFE89BF7DAA0F8AA7D022DF984E6EA37E6F60A3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-ib99qg-Kp9Ai35hObqN-b2Cj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/180/352e3138332e382e302f32322d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.183.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:f2:8f:14:08:23:52:1e:02:60:f4:b7:f7:f1:38:43:7b:99:
         f4:db:7f:8c:32:e6:eb:14:d2:31:b8:14:1e:42:4d:0a:d2:13:
         a8:7b:f7:bc:0b:13:eb:5c:ed:da:11:0a:d1:fa:4b:42:23:2b:
         26:1f:ee:20:28:a8:01:f5:4d:91:fa:ae:69:db:e6:9c:33:ca:
         43:b1:a0:1b:55:9f:5e:0a:1f:15:65:26:8a:04:95:ae:0d:a5:
         cb:94:6e:12:e7:02:01:ae:fd:30:53:73:0b:af:26:e2:6b:47:
         a0:70:2c:59:be:fc:37:d1:19:8b:c3:c7:9c:72:4d:c8:19:3a:
         62:d5:45:79:b0:6a:a7:3a:da:e7:c0:6e:2b:18:92:39:27:e3:
         df:b2:77:f2:72:3b:99:7a:77:81:33:a3:2e:13:5c:86:5c:55:
         c3:8a:79:79:f2:84:0f:95:2d:42:5f:d2:c9:5e:a7:e6:66:30:
         99:37:3b:67:08:72:c8:86:55:dd:78:a5:31:7f:43:77:26:c6:
         97:51:11:e8:86:12:40:45:cb:9a:14:36:3e:31:58:a2:0f:51:
         c9:53:fe:94:c8:ca:d8:28:b8:dc:0f:53:4e:6f:0f:b2:12:59:
         45:f1:a5:ab:dc:c4:e2:74:38:79:27:14:7c:3d:b2:1d:94:a4:
         ac:95:63:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----