Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138372e3137302e302f32342d3234203d3e20323131383331.roa
File:                     3138352e3138372e3137302e302f32342d3234203d3e20323131383331.roa (raw, json)
Hash identifier:          m2M6YQoAESKG6mb25HpTsk5So0jWMDRnrFST+J3x4Wg=
Subject key identifier:   20:64:EE:5C:16:31:28:11:21:01:67:DE:7E:83:DD:11:51:E4:EC:BA
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       4D371302566ADD27C58AF865A2EE2F162DD8274A
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138372e3137302e302f32342d3234203d3e20323131383331.roa
Signing time:             Sat 15 Jan 2022 19:00:00 +0000
ROA not before:           Sat 15 Jan 2022 18:55:00 +0000
ROA not after:            Sat 14 Jan 2023 19:00:00 +0000
asID:                     211831
IP address blocks:        185.187.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:37:13:02:56:6a:dd:27:c5:8a:f8:65:a2:ee:2f:16:2d:d8:27:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jan 15 18:55:00 2022 GMT
            Not After : Jan 14 19:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bc:4b:c4:5b:fe:8a:15:00:fc:ce:d7:b3:2e:
                    4b:0c:10:fc:b8:7e:b7:e0:0f:2b:ac:2b:e5:c6:8a:
                    74:a3:0b:37:5f:f0:3b:4c:74:90:f1:45:87:3f:d6:
                    ff:1f:bb:7a:9b:d4:d8:c7:de:c5:e6:92:c9:ff:c2:
                    fd:3b:71:7f:86:37:1a:4f:10:79:f6:58:79:2a:e9:
                    d4:14:9b:a8:f9:c7:f3:0e:a1:2c:38:7a:00:0b:42:
                    0c:ea:73:38:40:82:fe:4b:a8:e2:a7:af:f0:58:f7:
                    63:c0:65:b4:89:13:9d:d1:1b:e3:e9:d1:d7:28:79:
                    32:a6:3e:44:dc:f6:9e:7c:17:95:09:19:f8:41:ea:
                    32:9b:ad:ee:a3:7f:55:06:08:51:7a:ac:a9:7a:df:
                    36:32:30:13:86:66:be:fc:e2:8a:1c:11:86:b0:d4:
                    e9:73:57:5c:27:60:58:e5:1c:0c:48:d6:5e:db:9e:
                    4a:98:66:2b:63:7e:03:eb:aa:6f:60:56:66:36:38:
                    7c:76:aa:14:32:5c:38:8c:a9:a9:95:9f:97:1b:9a:
                    1c:7e:11:fd:2f:20:d8:39:c5:25:cf:dd:e1:4b:1d:
                    3a:d1:8a:a0:77:65:70:50:88:cf:53:1a:90:10:19:
                    7c:53:bb:06:4e:45:56:cd:a3:ac:4f:6a:7f:2b:cc:
                    ae:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:64:EE:5C:16:31:28:11:21:01:67:DE:7E:83:DD:11:51:E4:EC:BA
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138372e3137302e302f32342d3234203d3e20323131383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:db:11:cf:48:cb:5b:df:bc:be:b6:05:c5:49:85:09:88:28:
         ee:40:97:a9:8e:a8:03:63:92:85:91:30:21:25:d7:ac:eb:1f:
         1e:60:99:e8:78:f1:f5:5a:91:bb:d8:a2:dc:11:fc:99:50:55:
         9a:7d:72:42:bf:3f:2c:14:06:48:a5:00:b9:18:a1:99:29:98:
         bc:b4:f1:08:b6:7d:07:47:28:bb:34:82:ce:0d:dd:67:1c:e2:
         dd:4b:e2:61:f6:49:cc:3c:bd:3a:aa:55:d8:56:e4:6d:ac:77:
         36:a8:30:25:19:e4:3a:ff:11:b6:00:7a:d6:1c:04:7e:09:d4:
         6f:38:79:6c:8d:2e:48:01:bc:46:a8:a2:1d:a0:fe:f2:5f:6f:
         cd:67:4e:2e:0f:4a:0e:f2:5e:0d:1b:74:6b:13:54:bf:54:18:
         5e:80:4f:3a:ac:15:3c:e6:3b:8e:97:f0:da:e1:5a:bc:32:05:
         13:47:27:e9:b4:01:59:43:4c:d5:54:87:84:68:91:3d:a9:a3:
         c4:40:33:c0:9a:58:61:6e:97:93:27:46:d3:a2:e6:4d:1d:ad:
         94:dc:6b:cf:67:49:cd:b1:da:14:fe:1e:f9:76:ff:7a:39:88:
         ca:4d:2a:e5:1d:90:1a:cc:bb:77:bc:3e:10:5a:57:1c:90:c6:
         8f:b3:cf:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----