Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139332e32322e3135332e302f32342d3234203d3e20313334353132.roa
File:                     3139332e32322e3135332e302f32342d3234203d3e20313334353132.roa (raw, json)
Hash identifier:          4mG8wxzpsK8RBVrz9vQVjecbgoauuXspRBtC+hT7fzc=
Subject key identifier:   36:C8:A1:9C:BC:2F:CA:BC:3E:9A:57:49:25:1B:DA:2B:F3:F5:AB:F4
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       7D14D55922C9A4E0066AED213985D22C3BF1D01E
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e32322e3135332e302f32342d3234203d3e20313334353132.roa
Signing time:             Fri 27 Nov 2020 15:10:20 +0000
ROA not before:           Fri 27 Nov 2020 15:05:20 +0000
ROA not after:            Fri 26 Nov 2021 15:10:20 +0000
asID:                     134512
IP address blocks:        193.22.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:14:d5:59:22:c9:a4:e0:06:6a:ed:21:39:85:d2:2c:3b:f1:d0:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Nov 27 15:05:20 2020 GMT
            Not After : Nov 26 15:10:20 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f9:e7:49:6b:15:78:35:ea:49:d2:fd:ab:5e:
                    94:fa:07:b8:f0:79:93:34:d3:f2:98:7a:28:f8:b7:
                    02:86:b2:74:e0:22:9c:57:6c:e7:76:91:2e:9b:35:
                    02:14:a1:50:39:af:f9:e8:43:7f:f1:2e:ac:44:da:
                    d7:a4:42:0e:31:92:4b:c6:69:09:47:aa:b2:48:66:
                    b0:03:6b:51:90:0b:54:ff:65:db:e6:3d:fa:f7:2b:
                    03:47:75:9b:ae:26:e6:10:dc:b4:cf:3d:f2:cc:95:
                    41:71:b9:59:a1:18:81:f4:c6:f6:3b:f0:0c:49:c1:
                    8d:15:9e:74:e7:42:5c:57:1c:91:ce:b7:ca:bc:dc:
                    ec:85:2b:3a:3e:25:07:c0:0a:57:97:85:89:84:bb:
                    1b:58:63:30:d6:63:6e:c8:b3:2b:5e:c2:e6:3c:c6:
                    19:75:5a:b3:b9:46:8c:9c:73:ea:68:79:75:1e:c4:
                    0b:a4:e8:92:be:bd:4d:07:44:6e:94:88:60:93:3a:
                    74:5c:2b:91:48:62:b9:54:46:39:1b:69:50:5a:30:
                    0c:a2:a5:b1:2d:87:52:89:3f:a4:31:a2:50:5e:72:
                    aa:99:2b:5c:7a:48:dc:fd:3c:d8:a1:f1:b6:6d:ab:
                    db:1d:9f:c4:36:9b:d4:14:de:00:4d:89:e1:64:ed:
                    88:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C8:A1:9C:BC:2F:CA:BC:3E:9A:57:49:25:1B:DA:2B:F3:F5:AB:F4
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e32322e3135332e302f32342d3234203d3e20313334353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.22.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:52:3d:6e:09:9e:3b:51:c0:60:a6:c5:d1:c1:45:50:d2:94:
         84:03:21:f9:37:d8:1c:2c:d3:79:eb:61:0c:d0:42:2c:ae:50:
         da:54:e2:81:48:ba:0f:16:97:d0:5a:ac:9b:34:6f:29:40:ad:
         f0:33:71:42:69:40:3c:a4:57:ad:4e:cb:db:03:86:68:19:6d:
         73:16:25:ee:b3:f4:75:4b:dc:89:37:a8:e6:f2:c7:20:b4:8f:
         46:75:83:1a:d6:be:9f:8d:dc:d8:bf:d7:b4:2c:b3:1e:e2:01:
         60:e2:f3:2a:b2:26:29:33:ab:d8:ac:c4:47:5c:ef:78:3f:f7:
         d9:20:c5:51:f7:2c:f1:f0:3f:3c:66:e1:b6:ff:fb:bf:dd:eb:
         0e:53:2a:e7:85:c8:0b:f2:fe:48:c7:4a:eb:f6:42:b6:a2:7b:
         4a:0b:1b:d5:c2:cd:9e:39:10:18:c4:31:bd:54:10:8f:0e:4f:
         72:f0:b0:14:bc:ef:15:4f:9a:c7:b5:0e:82:08:b9:00:a3:80:
         ef:6a:3b:5f:f9:38:c2:90:6b:18:c6:0d:49:a7:03:a5:f1:58:
         e6:30:29:9c:ae:e8:9c:b8:d3:f7:2c:b5:e2:e6:e4:16:57:5f:
         a4:a1:fe:56:92:8c:c4:66:5f:a1:9d:40:d0:60:b9:84:c1:ab:
         f6:6b:c6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----