Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139322e39362e302f32332d3332203d3e203531313637.roa
File:                     3138352e3139322e39362e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier:          ytBnTLbZMjFCDGVooqkxP4ZXgwAGFUyb0v9HHTY7DlM=
Subject key identifier:   DB:00:91:CD:88:EF:3A:1C:40:AD:59:D0:A9:F4:2F:08:EF:0B:23:ED
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       09163F63E03B716B56527F7E8F2CC5FD8CAD0ADC
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139322e39362e302f32332d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:34:15 +0000
ROA not before:           Sat 22 Oct 2022 04:29:15 +0000
ROA not after:            Sat 21 Oct 2023 04:34:15 +0000
asID:                     51167
IP address blocks:        185.192.96.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:16:3f:63:e0:3b:71:6b:56:52:7f:7e:8f:2c:c5:fd:8c:ad:0a:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:15 2022 GMT
            Not After : Oct 21 04:34:15 2023 GMT
        Subject: CN=DB0091CD88EF3A1C40AD59D0A9F42F08EF0B23ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4b:51:1e:2f:70:88:54:fd:af:ae:3e:e3:1a:
                    e8:8c:b7:ac:da:fe:04:d6:cf:ea:fc:3f:77:8e:a6:
                    44:2e:92:64:e5:3a:88:bb:e9:ff:74:41:b5:f1:f6:
                    0a:d1:af:4a:7d:49:57:0c:c0:95:d5:e4:3e:f3:ef:
                    60:b1:9d:94:e7:8c:da:23:3f:b9:9d:b9:bd:5b:85:
                    ae:6b:bf:02:b7:d9:ee:99:22:c6:3f:43:c1:e2:23:
                    86:62:a3:4f:3a:4c:8d:ff:0a:bd:16:b1:e0:6c:19:
                    cc:83:b5:46:84:9c:eb:42:ca:17:92:4f:3a:2c:2a:
                    55:83:9c:bf:d6:3a:3a:a7:42:03:1d:d3:d2:eb:40:
                    53:5e:81:73:86:aa:5f:cf:66:55:e4:ed:c9:b8:d4:
                    26:a6:90:45:e9:9a:8c:8b:b4:50:c9:06:f5:c0:04:
                    c8:4c:ac:63:9b:e5:3c:cf:31:f1:1c:76:cb:b3:11:
                    5b:2e:0e:5c:d5:9d:9a:9e:3a:27:1d:b8:c5:1c:5d:
                    53:ed:a1:cc:26:c6:71:ad:28:09:40:58:a3:70:71:
                    b2:2f:68:9a:09:75:0d:6f:b1:53:b2:2f:9e:a9:10:
                    be:fe:2b:e8:9c:a0:2b:a9:b6:4f:6d:82:3e:1d:a6:
                    15:db:78:ed:d9:5d:4f:0d:7e:ed:d2:21:1c:81:07:
                    9e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:00:91:CD:88:EF:3A:1C:40:AD:59:D0:A9:F4:2F:08:EF:0B:23:ED
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139322e39362e302f32332d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.192.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:9b:11:4f:3c:a1:b7:93:e9:01:8e:0c:fe:ee:60:a4:c7:0a:
         5c:e9:0e:7d:fc:80:90:32:f8:8a:79:e0:72:ab:5d:a0:15:f7:
         4a:9e:25:af:bd:fc:51:3d:b4:2b:f9:af:3d:f6:f4:79:82:61:
         7f:a6:ae:58:8b:a3:64:96:4d:46:0b:f0:7d:68:1d:57:b4:64:
         56:11:ae:94:a5:b7:c2:43:3c:6e:cb:b9:45:eb:0b:70:a8:43:
         56:07:9f:62:de:d9:61:1b:43:93:c4:fd:b8:df:b5:e4:5e:3e:
         ce:4d:18:da:5f:63:30:e9:77:a2:f6:62:e6:39:4b:77:1a:c7:
         dd:05:74:ff:de:90:ab:a6:d8:2c:27:30:8c:75:84:18:88:98:
         a2:cf:f5:56:f5:99:6e:0e:fe:17:ca:06:9c:23:b8:3d:46:fb:
         f8:89:f9:aa:c9:c3:32:63:1d:d0:ee:15:74:db:c1:b4:ba:2c:
         d0:5c:9a:e7:87:f6:7d:c6:52:d8:68:cf:e0:03:8a:30:6c:85:
         19:8c:cb:52:6e:cd:4c:a4:4e:cc:9d:ad:f7:21:f5:0a:59:64:
         5f:54:14:7c:bc:d1:b1:b1:a5:60:d9:74:f5:8c:d7:9b:50:16:
         60:d9:04:2d:2e:61:4a:f0:41:d9:a9:7a:81:64:5e:c8:3f:8d:
         01:0b:eb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----