Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3138352e39372e3134372e302f32342d3332203d3e20313336373837.roa
File:                     3138352e39372e3134372e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          vFJUg4/OfOZ+q6nP1z6sXP747lgJoSHrIAfVr0YSz78=
Subject key identifier:   24:4F:7A:52:5F:2C:EE:F4:03:12:0B:8E:56:A6:A7:C1:AE:F7:3C:15
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       75F7896B6E83093225027644F8AE8F633B31D7E4
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3138352e39372e3134372e302f32342d3332203d3e20313336373837.roa
Signing time:             Thu 29 Dec 2022 11:26:13 +0000
ROA not before:           Thu 29 Dec 2022 11:21:13 +0000
ROA not after:            Thu 28 Dec 2023 11:26:13 +0000
asID:                     136787
IP address blocks:        185.97.147.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f7:89:6b:6e:83:09:32:25:02:76:44:f8:ae:8f:63:3b:31:d7:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Dec 29 11:21:13 2022 GMT
            Not After : Dec 28 11:26:13 2023 GMT
        Subject: CN=244F7A525F2CEEF403120B8E56A6A7C1AEF73C15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:57:28:f2:7f:51:d0:aa:a9:50:75:26:da:27:
                    e1:b0:79:b6:94:d6:a4:5d:c9:1b:32:47:ca:c2:35:
                    5c:a9:1b:eb:c7:5b:be:c6:b2:61:1b:69:37:b4:47:
                    d7:a7:12:9a:52:bc:ea:0e:c3:88:c8:af:10:22:5f:
                    e4:6a:c4:c4:78:36:0e:58:3a:4a:98:c9:13:cb:85:
                    51:4e:af:ce:00:5d:21:aa:8a:81:56:7c:d7:d6:a7:
                    b2:0c:8f:49:0b:e4:c1:97:a4:b2:f3:44:ee:bc:42:
                    4e:2c:f3:3a:1d:6b:70:8b:f2:53:7d:e3:85:77:55:
                    f7:0a:24:3d:09:13:73:68:7c:64:2d:d6:eb:af:4f:
                    da:96:ac:0a:e7:9c:38:b1:2b:13:62:cf:b9:c8:04:
                    81:fb:1c:13:7d:87:aa:60:ba:fb:a7:92:23:93:c7:
                    d2:83:f0:a3:47:63:e6:d0:a5:44:58:ac:9a:73:11:
                    ef:12:cd:46:59:5a:cc:c9:0c:89:49:fd:aa:5a:82:
                    42:5d:7e:8b:07:14:4d:99:dc:2b:0f:c9:a9:7c:12:
                    4b:01:70:97:8b:03:a5:38:fa:d5:3c:ab:11:62:66:
                    95:68:3d:43:43:ef:08:74:d4:fd:4d:05:f7:7b:54:
                    9c:2d:70:66:24:02:6c:ff:0f:7a:44:78:7d:b0:61:
                    9b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4F:7A:52:5F:2C:EE:F4:03:12:0B:8E:56:A6:A7:C1:AE:F7:3C:15
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3138352e39372e3134372e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.97.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:17:92:d6:81:58:89:f0:28:3b:bb:fc:2d:4a:03:28:22:e6:
         30:3e:a6:bd:e0:0d:22:fa:00:9a:d6:e0:95:93:26:c2:ce:8c:
         83:5b:49:9b:73:90:98:fd:16:ed:cb:d5:98:2c:4b:ce:40:df:
         1b:52:19:c0:ef:e2:29:b6:9e:e4:7e:7c:7c:b8:2a:ef:94:a5:
         c5:f1:3d:41:2e:db:54:04:5a:c6:93:cb:9f:4c:2e:8b:da:1c:
         ef:54:7a:d1:e3:32:a5:28:97:f4:28:d2:48:70:43:e5:37:79:
         44:0f:7b:37:9c:9e:0a:ed:5b:62:19:b6:6a:aa:ca:cb:ab:b5:
         b1:23:3b:ea:4f:8c:78:b5:8f:18:35:23:a3:c3:03:77:35:eb:
         23:ec:91:08:eb:58:58:0e:4a:e1:fb:08:e6:f6:56:35:34:13:
         64:ae:bd:78:10:0a:9d:a7:63:06:0b:01:a0:e7:1a:80:f0:1e:
         8b:3d:e8:30:4a:87:06:cc:5d:1b:65:a6:c0:49:43:ac:fa:76:
         0f:9a:26:6f:ad:05:ff:f9:c4:dd:ef:be:01:b6:f5:53:fd:8b:
         14:b9:f7:b5:85:2a:4d:cf:5d:3c:29:05:d0:3b:34:b0:08:1e:
         d1:db:21:57:c4:77:34:ee:cd:2c:8b:85:50:bc:88:f6:dc:c2:
         bc:7e:39:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----