Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/163/3139332e3136302e3131382e302f32342d3234203d3e203530323336.roa
File:                     3139332e3136302e3131382e302f32342d3234203d3e203530323336.roa (raw, json)
Hash identifier:          DbvePxh8Ys+uBe60j6PLl/JbO0iwWQ8hVHNZKcU1644=
Subject key identifier:   02:09:6A:33:07:40:AB:B4:C2:12:82:28:4F:9F:A1:EA:28:65:DE:6F
Certificate issuer:       /CN=58929d850c68341e7c7cf8411dcbab66a8ea09d8
Certificate serial:       1B68CCD07CCE1736D3EB39D62BB79033D83CE839
Authority key identifier: 58:92:9D:85:0C:68:34:1E:7C:7C:F8:41:1D:CB:AB:66:A8:EA:09:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WJKdhQxoNB58fPhBHcurZqjqCdg.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/163/3139332e3136302e3131382e302f32342d3234203d3e203530323336.roa
Signing time:             Wed 13 Jan 2021 08:18:40 +0000
ROA not before:           Wed 13 Jan 2021 08:13:40 +0000
ROA not after:            Wed 12 Jan 2022 08:18:40 +0000
asID:                     50236
IP address blocks:        193.160.118.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:68:cc:d0:7c:ce:17:36:d3:eb:39:d6:2b:b7:90:33:d8:3c:e8:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58929d850c68341e7c7cf8411dcbab66a8ea09d8
        Validity
            Not Before: Jan 13 08:13:40 2021 GMT
            Not After : Jan 12 08:18:40 2022 GMT
        Subject: CN=3082010A02820101009E51AE8A116A800300E2930297A0E9C7E9BCD42DBAC713D727A07BD3F52E83376856D9B712ADF0FB476B4EA5ACC3FA0DB5FC883D024191748878995265044C209B6AA13CC0E745F29CE328F8BC58C45E5A3CB37D924AFD04DD6F43147AD0BCB86AD832E4CAD1F4583E1058BF96EE730F82CFF2999F05F53503D6AF888A4E26493C5A13206C05D80BAEF9E803F8C9D72C8B3E1DA100CEB209BC2DFC1B429E365BB883C61787149ECD5F8E91E1A3880ED6B848F77637C9769087342B84319260E7CC55D8EB7149C9414D3A9B60992DC7FBFCEACBB166DB05A08C276D90648B8B78C0FA1D1864743193E166E6E22676DA522C6B4C7A1636221207AE087FE63DE5FF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:51:ae:8a:11:6a:80:03:00:e2:93:02:97:a0:
                    e9:c7:e9:bc:d4:2d:ba:c7:13:d7:27:a0:7b:d3:f5:
                    2e:83:37:68:56:d9:b7:12:ad:f0:fb:47:6b:4e:a5:
                    ac:c3:fa:0d:b5:fc:88:3d:02:41:91:74:88:78:99:
                    52:65:04:4c:20:9b:6a:a1:3c:c0:e7:45:f2:9c:e3:
                    28:f8:bc:58:c4:5e:5a:3c:b3:7d:92:4a:fd:04:dd:
                    6f:43:14:7a:d0:bc:b8:6a:d8:32:e4:ca:d1:f4:58:
                    3e:10:58:bf:96:ee:73:0f:82:cf:f2:99:9f:05:f5:
                    35:03:d6:af:88:8a:4e:26:49:3c:5a:13:20:6c:05:
                    d8:0b:ae:f9:e8:03:f8:c9:d7:2c:8b:3e:1d:a1:00:
                    ce:b2:09:bc:2d:fc:1b:42:9e:36:5b:b8:83:c6:17:
                    87:14:9e:cd:5f:8e:91:e1:a3:88:0e:d6:b8:48:f7:
                    76:37:c9:76:90:87:34:2b:84:31:92:60:e7:cc:55:
                    d8:eb:71:49:c9:41:4d:3a:9b:60:99:2d:c7:fb:fc:
                    ea:cb:b1:66:db:05:a0:8c:27:6d:90:64:8b:8b:78:
                    c0:fa:1d:18:64:74:31:93:e1:66:e6:e2:26:76:da:
                    52:2c:6b:4c:7a:16:36:22:12:07:ae:08:7f:e6:3d:
                    e5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:09:6A:33:07:40:AB:B4:C2:12:82:28:4F:9F:A1:EA:28:65:DE:6F
            X509v3 Authority Key Identifier:
                keyid:58:92:9D:85:0C:68:34:1E:7C:7C:F8:41:1D:CB:AB:66:A8:EA:09:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/163/58929D850C68341E7C7CF8411DCBAB66A8EA09D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WJKdhQxoNB58fPhBHcurZqjqCdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/163/3139332e3136302e3131382e302f32342d3234203d3e203530323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.160.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:01:3d:3d:ce:59:7c:29:1f:4e:37:55:bd:3c:a8:b5:ec:b3:
         f5:21:93:7d:3c:f9:4d:39:c2:90:e2:c4:5e:c3:43:09:9f:4b:
         07:d8:b5:53:ef:38:66:af:2b:51:06:c3:28:28:f7:a1:07:a5:
         a7:be:5a:00:b7:a7:01:44:50:29:89:45:5c:37:6e:1d:5a:c2:
         8e:14:88:42:1f:7f:1b:7e:30:f5:42:a3:cf:48:e4:e1:92:11:
         19:13:9f:37:fb:05:2d:ef:67:a5:dc:6a:97:9e:2d:30:f8:c2:
         9c:6e:f1:b4:52:c4:4e:5a:d5:27:27:14:e9:1e:10:7d:7b:27:
         a7:64:61:df:0d:33:5f:9f:de:71:68:22:9f:b8:54:94:90:38:
         19:0e:f1:3d:51:15:cf:85:a5:11:02:d8:ea:63:c6:72:93:5c:
         66:58:ee:bb:35:df:0f:4a:d2:a9:c1:94:f1:80:73:40:81:72:
         15:d7:bf:9f:b2:58:7e:68:6b:f7:a1:30:8f:c7:3c:90:c6:9e:
         c0:76:83:00:5b:2d:0b:b9:11:2b:2d:47:6e:48:49:1d:dd:4d:
         a2:9a:c7:9f:d4:9a:58:f1:28:26:b3:22:ab:6c:f1:89:15:4f:
         de:f7:c2:ba:dd:85:21:2f:be:7e:4b:bc:55:c3:eb:da:b2:cb:
         2d:d3:c0:5d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----