Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3136342e302f32332d3332203d3e203531313637.roa
File:                     3138352e3231352e3136342e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier:          HJGKaRLrLoNL0CqljmudBLYJfD/Sa3zJ3/V66qEqFMI=
Subject key identifier:   34:C8:93:74:7E:C0:00:89:80:93:52:DA:95:42:13:F7:4D:62:D2:31
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       357B3318F9459BAA210D8DC1B589C2CFE1609133
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3136342e302f32332d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:34:37 +0000
ROA not before:           Sat 22 Oct 2022 04:29:37 +0000
ROA not after:            Sat 21 Oct 2023 04:34:37 +0000
asID:                     51167
IP address blocks:        185.215.164.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:7b:33:18:f9:45:9b:aa:21:0d:8d:c1:b5:89:c2:cf:e1:60:91:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:37 2022 GMT
            Not After : Oct 21 04:34:37 2023 GMT
        Subject: CN=34C893747EC00089809352DA954213F74D62D231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:70:9d:9e:e8:cd:80:89:a8:0a:6b:1d:64:89:
                    e5:89:01:1c:5a:de:c8:dc:13:14:2d:10:7e:a1:2e:
                    d6:78:41:21:77:2b:43:94:f4:be:6b:ce:88:b2:6f:
                    39:e3:32:c0:c5:fc:e6:67:46:12:9d:b2:fc:90:59:
                    2e:3f:43:98:da:2b:3a:bc:59:d7:b8:92:69:a2:f9:
                    b0:9d:d6:fe:d4:58:89:88:e8:7a:9a:f1:98:a8:89:
                    a8:1b:d8:06:ed:1e:50:1c:e7:8c:fb:29:33:75:6d:
                    ed:98:96:7b:91:4a:44:d6:08:98:91:be:d6:43:36:
                    df:d4:1a:a0:bc:05:a8:e4:06:00:00:04:b3:65:3e:
                    35:f7:9c:a7:1b:77:b6:0e:c2:05:69:fd:03:14:22:
                    4c:12:d3:b8:5a:9c:09:b9:68:85:17:29:59:b3:91:
                    81:5a:aa:41:02:12:79:83:81:5a:73:1f:92:5b:27:
                    ef:16:b6:1e:34:23:05:88:bc:1f:9b:a0:5a:44:03:
                    f2:42:f3:bc:51:4c:85:0a:c0:18:1f:48:a7:b1:16:
                    59:99:57:ac:1a:60:52:d1:37:38:3f:8c:36:ab:09:
                    c9:2d:57:95:d8:e6:f2:fd:ed:ab:90:68:c8:c8:4c:
                    f1:5c:80:16:1e:ad:42:ec:ee:d4:40:04:5d:a3:5b:
                    70:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C8:93:74:7E:C0:00:89:80:93:52:DA:95:42:13:F7:4D:62:D2:31
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3136342e302f32332d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.215.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:13:20:1c:1d:bc:d5:09:8a:7c:2a:01:1d:b4:0b:b0:10:90:
         2e:75:6f:4e:f9:db:12:48:91:83:75:d7:72:af:68:71:63:0e:
         90:f0:f5:83:31:93:67:61:c9:d3:9d:3a:70:ab:ca:d1:0c:f9:
         b2:05:09:11:a2:45:d6:75:89:b2:6a:14:80:3b:34:49:86:25:
         c2:06:d3:67:35:9d:0c:63:d0:f4:4f:66:1a:16:14:6d:e7:a2:
         29:b6:fb:e5:c1:00:4e:23:f0:05:d4:bd:dc:46:aa:30:26:b1:
         b0:c4:ef:cc:e9:8b:bb:1d:10:87:cd:b3:75:88:01:aa:81:6b:
         d1:3e:3c:a6:d6:69:14:79:19:91:74:9b:f2:3e:13:73:02:24:
         f6:13:19:47:45:b9:1d:86:63:43:18:3d:b1:e8:f4:30:43:ee:
         f3:3e:0b:1e:01:10:ef:da:ee:6d:d3:90:1d:ed:97:dd:67:08:
         67:eb:91:af:b2:0b:c6:40:91:bf:4c:25:16:2d:af:11:62:09:
         b5:b3:87:ba:76:3d:c0:94:02:84:d2:a3:c0:ae:f4:1b:84:fa:
         7c:c0:29:f1:2c:02:ae:e6:3e:4b:ce:a2:0d:2f:7c:dd:2f:da:
         11:0e:f7:40:ef:c8:0a:0b:0f:d4:84:81:97:10:7e:25:4a:97:
         4d:77:39:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----