Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139332e3230332e31352e302f32342d3234203d3e2033333536.roa
File:                     3139332e3230332e31352e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier:          yXEMRq3G+/LHHjuUOew+OA0tZN1NT0KyGfBqHj5NdKA=
Subject key identifier:   31:43:07:C0:79:60:74:7B:69:49:6F:3A:2A:40:33:DD:5B:2D:27:F4
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       2AD0B47DECC40B42A63811519BAC7B5C7474DC2A
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e3230332e31352e302f32342d3234203d3e2033333536.roa
Signing time:             Tue 28 Jun 2022 04:41:11 +0000
ROA not before:           Tue 28 Jun 2022 04:36:11 +0000
ROA not after:            Tue 27 Jun 2023 04:41:11 +0000
asID:                     3356
IP address blocks:        193.203.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:d0:b4:7d:ec:c4:0b:42:a6:38:11:51:9b:ac:7b:5c:74:74:dc:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Jun 28 04:36:11 2022 GMT
            Not After : Jun 27 04:41:11 2023 GMT
        Subject: CN=314307C07960747B69496F3A2A4033DD5B2D27F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9a:37:fc:2f:ba:d8:22:10:b4:b2:34:30:f6:
                    b2:c8:a3:a5:82:83:62:3b:61:56:23:61:86:10:99:
                    6e:04:6a:25:28:6f:b3:71:4b:3a:02:11:c6:01:c1:
                    bc:cb:28:04:56:71:80:15:85:34:a0:98:e4:bd:70:
                    89:c6:12:84:eb:85:d6:b9:40:e6:5b:7e:fb:ee:f9:
                    d0:98:c3:ec:f4:f3:ba:c1:b5:6a:59:b3:bc:34:07:
                    56:57:b2:91:93:25:15:e0:01:78:e9:a8:be:a1:1f:
                    1e:b1:e9:24:da:b1:5f:93:08:78:7b:f9:ee:a3:4d:
                    0a:fd:9a:83:7f:8e:b0:b7:a1:95:76:9c:01:71:7b:
                    bc:2d:48:47:ae:7b:a5:ca:97:0b:d5:33:b7:5c:52:
                    c5:49:fc:db:b7:e7:58:de:f1:61:3a:75:a7:01:6b:
                    17:88:03:bb:18:b8:15:da:9f:88:d3:0c:d1:f0:00:
                    4f:59:7c:a6:6e:25:5f:45:1e:46:f0:01:17:38:78:
                    e9:7e:4f:ff:a2:d0:99:90:03:0c:a0:c3:84:c2:51:
                    c2:7f:ce:3c:bd:2b:50:44:8e:d6:35:52:b2:fd:8e:
                    c5:1f:7d:59:81:76:d6:38:46:1c:6c:40:18:e2:df:
                    fd:26:c0:f4:10:87:06:ee:b1:ec:cb:bb:6c:0e:c1:
                    d1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:43:07:C0:79:60:74:7B:69:49:6F:3A:2A:40:33:DD:5B:2D:27:F4
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e3230332e31352e302f32342d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.203.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:2e:2f:5f:dd:83:fd:bc:00:b3:73:1b:da:5c:72:a6:c6:f9:
         f5:16:d7:ca:49:03:0d:b9:cf:17:1a:44:56:67:60:f2:96:d8:
         4c:98:29:a9:0e:19:19:fb:af:62:2c:90:d9:86:47:87:9c:6e:
         70:87:37:d5:9e:4f:fd:94:34:6d:90:77:85:df:29:50:f9:82:
         db:16:51:53:5b:51:a9:70:df:bb:64:e9:17:37:c9:2c:7d:3f:
         e9:bb:5d:25:66:99:60:21:8f:05:d0:4e:40:90:b6:34:b4:94:
         e8:70:19:4e:4c:02:2b:bd:14:67:ab:de:3c:73:0e:3f:b4:3b:
         4d:71:04:be:7a:e9:56:19:b2:2e:98:84:9c:56:37:c9:fc:78:
         d5:53:d3:38:a5:31:12:59:4e:9c:76:19:af:d3:8e:94:a4:cf:
         d9:72:a5:c5:3a:6f:a0:e6:fa:07:19:ba:18:c4:40:67:48:91:
         ae:5c:a4:9c:97:cd:73:c1:ea:4b:58:2f:1e:3f:f7:24:f3:c8:
         79:5f:75:a3:ef:8c:a9:13:a5:bb:80:0b:12:68:c8:17:86:d3:
         fb:b9:ab:c8:d2:e1:b2:90:dc:4c:31:35:f3:50:32:46:f8:fd:
         83:4e:b6:6d:51:46:3e:12:f2:9e:ce:2c:0f:ad:cb:ae:5e:ee:
         37:0f:2a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----