Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/178/3139332e34322e3133372e302f32342d3234203d3e20333938343638.roa
File:                     3139332e34322e3133372e302f32342d3234203d3e20333938343638.roa (raw, json)
Hash identifier:          yp3jCpTC+nfAQyYb+k6B1llGk3/sckBHXLeYlI74EtY=
Subject key identifier:   9F:35:20:8D:B0:95:B8:4E:7E:C5:7D:A5:6B:AF:5C:D7:09:A8:FA:DD
Certificate issuer:       /CN=67a6e5206be3501ddd38d6f31c3368200c43a473
Certificate serial:       78C79BFAF39DA5D90EE2488638595049A1799777
Authority key identifier: 67:A6:E5:20:6B:E3:50:1D:DD:38:D6:F3:1C:33:68:20:0C:43:A4:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z6blIGvjUB3dONbzHDNoIAxDpHM.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/178/3139332e34322e3133372e302f32342d3234203d3e20333938343638.roa
Signing time:             Thu 03 Dec 2020 15:57:09 +0000
ROA not before:           Thu 03 Dec 2020 15:52:09 +0000
ROA not after:            Thu 02 Dec 2021 15:57:09 +0000
asID:                     398468
IP address blocks:        193.42.137.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c7:9b:fa:f3:9d:a5:d9:0e:e2:48:86:38:59:50:49:a1:79:97:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67a6e5206be3501ddd38d6f31c3368200c43a473
        Validity
            Not Before: Dec  3 15:52:09 2020 GMT
            Not After : Dec  2 15:57:09 2021 GMT
        Subject: CN=3082010A0282010100B13D54344740DA1FB6A226DDD8D5B0ABBB0AD122829F849392CB91CB450D2AC1F24169997B56173709B282DD2D96AD87D81C87076000C0172814FF9819E153F3E5EA6B882E6C2E13AAA71E846D22FC3D3D9FCD9E35691E5E2D1391F93985CC36F74D5B7BE16F5A92581E39E43A191381A6B0D44AA9E6D58C040A78934A6968273DA6227477B099C7B007F210ABB4C9BB55630F9B5609FD0C5E62462315681C741DE92876FB79D600DD2D260FB9938782B3A826B21D4BD6BC48E672EF3ED4289B8D6070501403EFC33C6FA11C1A3209596A253FD5201AEC74BB60601F29066126008C4072573AD7254D7A9FD0151865401E3B359137D940F31C68F419A6FD6CE70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3d:54:34:47:40:da:1f:b6:a2:26:dd:d8:d5:
                    b0:ab:bb:0a:d1:22:82:9f:84:93:92:cb:91:cb:45:
                    0d:2a:c1:f2:41:69:99:7b:56:17:37:09:b2:82:dd:
                    2d:96:ad:87:d8:1c:87:07:60:00:c0:17:28:14:ff:
                    98:19:e1:53:f3:e5:ea:6b:88:2e:6c:2e:13:aa:a7:
                    1e:84:6d:22:fc:3d:3d:9f:cd:9e:35:69:1e:5e:2d:
                    13:91:f9:39:85:cc:36:f7:4d:5b:7b:e1:6f:5a:92:
                    58:1e:39:e4:3a:19:13:81:a6:b0:d4:4a:a9:e6:d5:
                    8c:04:0a:78:93:4a:69:68:27:3d:a6:22:74:77:b0:
                    99:c7:b0:07:f2:10:ab:b4:c9:bb:55:63:0f:9b:56:
                    09:fd:0c:5e:62:46:23:15:68:1c:74:1d:e9:28:76:
                    fb:79:d6:00:dd:2d:26:0f:b9:93:87:82:b3:a8:26:
                    b2:1d:4b:d6:bc:48:e6:72:ef:3e:d4:28:9b:8d:60:
                    70:50:14:03:ef:c3:3c:6f:a1:1c:1a:32:09:59:6a:
                    25:3f:d5:20:1a:ec:74:bb:60:60:1f:29:06:61:26:
                    00:8c:40:72:57:3a:d7:25:4d:7a:9f:d0:15:18:65:
                    40:1e:3b:35:91:37:d9:40:f3:1c:68:f4:19:a6:fd:
                    6c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:35:20:8D:B0:95:B8:4E:7E:C5:7D:A5:6B:AF:5C:D7:09:A8:FA:DD
            X509v3 Authority Key Identifier:
                keyid:67:A6:E5:20:6B:E3:50:1D:DD:38:D6:F3:1C:33:68:20:0C:43:A4:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/178/67A6E5206BE3501DDD38D6F31C3368200C43A473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6blIGvjUB3dONbzHDNoIAxDpHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/178/3139332e34322e3133372e302f32342d3234203d3e20333938343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.42.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:78:26:99:60:d2:9e:eb:66:13:44:ad:c5:51:97:43:be:2a:
         92:fa:e8:ae:37:10:e1:02:05:20:43:a4:85:eb:0d:94:8f:e6:
         8a:d2:46:97:7c:bf:82:89:14:99:33:8e:fc:66:01:b5:4f:6b:
         58:02:26:37:7c:bd:db:d7:32:3a:7e:f5:7d:ea:6a:94:0d:58:
         67:8c:ed:df:50:98:c4:66:11:67:b1:c2:93:af:d3:9b:52:a4:
         65:76:d4:af:e3:18:60:07:be:24:8f:44:c1:f3:97:f0:da:25:
         c4:b8:77:5b:cf:1a:4a:5b:d3:9f:6e:8f:9d:1c:d8:87:b3:45:
         77:91:14:4d:15:a7:12:74:77:a9:2b:62:69:eb:59:4e:1f:8b:
         55:37:27:95:17:72:de:13:b2:ee:26:6a:31:c8:d3:75:a9:e9:
         36:d5:36:7b:4f:2c:da:2e:6b:0b:c3:e4:ad:d5:21:b7:01:c5:
         da:07:c9:26:00:fa:40:5b:f6:b2:6b:32:b8:c1:99:20:23:e0:
         72:7c:f1:89:a8:02:af:af:d3:8c:30:6c:c8:7f:16:8b:d8:44:
         e6:8a:ea:c9:20:15:46:73:e4:d6:29:e4:27:2f:28:5e:c8:83:
         16:9d:39:88:d8:26:5f:de:5d:a9:a7:22:1b:d1:04:2a:18:9e:
         dc:83:49:b1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----