Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139342e3135362e3232372e302f32342d3332203d3e20313336373837.roa
File:                     3139342e3135362e3232372e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          hULH8yvHYdGLHWhIdCZ501izbKzW9KrgZb93sT0ZQ3Q=
Subject key identifier:   13:50:56:1B:63:9F:C8:15:BE:67:03:A3:CC:15:FF:54:E7:52:E4:6B
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       1227A52199FF18EF96D9DE92544F26032421CB1E
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e3135362e3232372e302f32342d3332203d3e20313336373837.roa
Signing time:             Wed 28 Dec 2022 09:39:46 +0000
ROA not before:           Wed 28 Dec 2022 09:34:46 +0000
ROA not after:            Wed 27 Dec 2023 09:39:46 +0000
asID:                     136787
IP address blocks:        194.156.227.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:27:a5:21:99:ff:18:ef:96:d9:de:92:54:4f:26:03:24:21:cb:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Dec 28 09:34:46 2022 GMT
            Not After : Dec 27 09:39:46 2023 GMT
        Subject: CN=1350561B639FC815BE6703A3CC15FF54E752E46B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:83:c8:07:18:96:de:09:ea:66:05:1b:3d:74:
                    f7:c7:1e:0d:f5:22:3b:b9:97:f9:1f:b9:4d:9a:fb:
                    b2:14:68:3b:09:f3:f0:06:68:e4:5d:d6:58:8c:d3:
                    62:3c:fc:a6:0a:36:ce:fc:b6:dc:23:28:a7:6d:35:
                    ee:40:6b:12:a4:55:7e:78:08:d5:42:94:de:0d:e6:
                    7c:4b:45:45:ef:44:92:c9:4d:3e:82:84:77:6b:d3:
                    8f:81:55:d6:6f:e0:21:30:ed:a9:cd:70:ec:98:8f:
                    7f:e1:aa:c9:e1:f1:70:b4:78:52:46:88:6c:b5:d5:
                    a9:13:d1:b5:2d:13:67:14:0e:7c:c8:21:e2:6c:bf:
                    37:8a:84:1d:7d:fb:4c:ad:f6:d1:d2:eb:95:82:58:
                    70:e0:fd:10:2a:0e:fe:0c:f7:95:a5:e0:58:30:27:
                    0e:bd:87:c6:7e:2f:1f:ce:14:c8:7d:11:67:21:1a:
                    ed:e2:2a:c2:06:b1:72:62:65:3f:1f:7b:68:a1:a5:
                    9e:c1:a8:2f:9b:1a:78:e9:f6:b0:ed:10:b1:fe:d1:
                    df:85:ee:a2:63:3f:1f:98:84:a8:6a:83:1f:bb:e9:
                    8b:8b:77:ec:2b:7c:65:f6:1f:29:c2:b3:ea:ab:47:
                    b5:d5:cc:d3:a7:a9:5e:34:d5:32:2b:ca:0b:a3:d3:
                    6a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:50:56:1B:63:9F:C8:15:BE:67:03:A3:CC:15:FF:54:E7:52:E4:6B
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e3135362e3232372e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.156.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:af:ed:eb:99:7d:f5:8b:ed:62:73:8f:5a:6d:dc:99:6c:f5:
         4e:5f:35:25:9c:b1:46:cd:f5:b3:b2:d7:1d:8a:24:76:fa:02:
         34:17:97:34:d3:72:a4:c5:94:89:e1:a4:7b:3f:08:af:2e:97:
         53:60:fc:5e:54:87:cd:b7:fb:75:49:ba:e7:8b:a1:22:b9:44:
         f8:43:7d:19:da:30:3c:95:3b:c1:8f:19:5b:e8:1b:63:0c:58:
         75:f7:bd:93:6b:a5:1f:79:37:49:9f:89:ad:db:ac:42:1e:48:
         04:74:50:73:6f:e0:c3:0f:d8:0f:4f:61:b1:82:c9:4c:b7:4b:
         50:31:6e:a1:ee:44:f6:56:6e:55:49:33:36:3c:a3:49:06:e1:
         d6:09:b8:5e:47:6f:5a:f4:d2:e2:11:f1:1d:20:1f:ce:35:c3:
         36:9e:0e:83:2e:7a:c3:bc:cd:35:49:1a:af:29:3d:eb:3a:7b:
         79:3e:de:c0:34:0f:97:91:ed:19:ce:12:e4:72:89:ee:c6:fa:
         61:8d:15:d2:e4:57:f3:d8:db:53:f2:86:8c:07:53:a4:5c:32:
         c5:2d:c7:17:26:47:9d:44:d3:59:16:96:92:18:16:e5:1a:32:
         bc:f0:42:b8:cc:3a:34:57:ca:b1:71:ef:3a:87:e8:ec:31:1d:
         52:f0:be:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----