Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e32362e302f32332d3332203d3e203531313637.roa
File:                     3135352e3133332e32362e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier:          xcaRjYjc2v6Q+Hh2lbPXJeLAg/OrnyO4RFacmurlYew=
Subject key identifier:   53:E9:8E:C4:B6:9F:50:06:2C:26:18:99:A5:C8:E5:9B:F5:86:F8:FC
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       42F5472871D498BFEF3EBAE49B8CF252D7708B6E
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e32362e302f32332d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:34:33 +0000
ROA not before:           Sat 22 Oct 2022 04:29:33 +0000
ROA not after:            Sat 21 Oct 2023 04:34:33 +0000
asID:                     51167
IP address blocks:        155.133.26.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f5:47:28:71:d4:98:bf:ef:3e:ba:e4:9b:8c:f2:52:d7:70:8b:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:33 2022 GMT
            Not After : Oct 21 04:34:33 2023 GMT
        Subject: CN=53E98EC4B69F50062C261899A5C8E59BF586F8FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:83:5f:0d:41:75:b4:45:04:c6:4d:79:ef:7c:
                    1e:61:1c:00:55:3c:2d:3d:13:80:b3:41:b8:af:08:
                    df:fa:96:d4:11:91:43:85:ef:6a:3d:cf:8b:16:04:
                    20:ac:b2:b9:51:4f:95:9f:9e:ef:15:07:e7:aa:01:
                    da:ae:54:d9:a9:35:e2:5f:df:12:d7:a5:52:40:2c:
                    4b:53:c0:5a:ca:58:80:74:11:48:8e:e8:49:f2:b4:
                    e8:96:89:35:90:6a:94:f9:4b:8d:33:7c:cb:c1:dc:
                    a8:6e:cc:c2:2a:16:22:5d:9e:a4:45:65:56:fa:28:
                    04:7b:05:91:df:35:b4:fa:0e:9b:9f:08:05:21:85:
                    f7:93:16:05:bd:97:90:ac:2d:13:09:db:0c:f1:e9:
                    f6:fd:3f:01:44:f0:fa:70:1c:60:93:b7:09:ec:c4:
                    97:58:2f:dd:1b:d4:87:9b:64:bc:0a:be:1a:89:f3:
                    d4:89:69:0e:1e:d9:63:30:e1:75:47:4b:19:5d:b9:
                    fb:6e:a3:fc:54:95:5b:e6:be:e3:f0:24:7d:85:e1:
                    ef:bb:c3:91:7d:c5:ab:3f:c2:84:fc:b8:fe:ed:9a:
                    33:b7:e0:4a:7c:7e:fd:9b:3c:29:42:cb:05:f3:74:
                    86:da:6f:78:61:7b:09:5b:c1:49:fc:07:8f:a4:11:
                    1c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E9:8E:C4:B6:9F:50:06:2C:26:18:99:A5:C8:E5:9B:F5:86:F8:FC
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135352e3133332e32362e302f32332d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.133.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:be:df:9b:2c:ad:1e:24:69:91:b7:c6:f2:1d:c7:70:b2:5b:
         02:fd:62:89:b4:ac:9c:41:ed:72:6c:45:ee:0c:ae:a3:72:78:
         a4:0d:ab:de:02:2f:9c:69:be:3f:8e:a3:9d:c0:a1:a4:c4:72:
         75:b2:b2:40:b2:68:0d:3e:34:c0:4f:e3:3c:ab:19:50:02:72:
         52:21:72:02:ed:d9:e8:43:63:de:f3:e0:23:86:4f:78:c0:de:
         7d:24:c5:1d:d4:08:bd:80:c1:40:15:a7:71:2a:3c:d9:d4:68:
         d6:7f:94:25:53:1d:ec:48:cc:80:17:ef:63:67:40:f0:91:97:
         41:58:0f:6e:56:a3:8e:9d:8f:8e:0e:5e:7a:a2:c0:6a:3b:b0:
         9a:b2:0a:4d:ed:ef:20:c7:bb:3c:61:af:4c:91:07:c0:78:1b:
         35:cf:a7:a7:05:6b:d6:66:91:cf:69:24:60:f1:cd:7f:ff:18:
         b6:0a:8b:89:18:92:7b:1c:00:c2:a7:f3:da:31:31:a7:30:5f:
         b5:64:04:fc:53:7c:48:a8:fa:10:03:5c:04:26:7b:7e:72:ad:
         fc:4a:7d:d7:1f:f4:91:21:f3:c1:8c:52:c0:7d:40:c5:81:a3:
         60:28:b5:ea:79:d3:6b:82:5a:3c:be:71:b4:20:0f:4e:40:b0:
         5b:93:96:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----