Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139332e32322e3135332e302f32342d3234203d3e20323037373837.roa
File:                     3139332e32322e3135332e302f32342d3234203d3e20323037373837.roa (raw, json)
Hash identifier:          pD1mKhA7swz4cLOld0fFkIR/nvXQUurQUUOm4NjHT44=
Subject key identifier:   37:14:8C:78:2C:68:BF:7E:E1:97:CA:A8:34:B8:4D:7D:3E:0E:2D:AB
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       4C818DF550B651613E77F088C279248A33F631E3
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e32322e3135332e302f32342d3234203d3e20323037373837.roa
Signing time:             Fri 27 Nov 2020 15:10:20 +0000
ROA not before:           Fri 27 Nov 2020 15:05:20 +0000
ROA not after:            Fri 26 Nov 2021 15:10:20 +0000
asID:                     207787
IP address blocks:        193.22.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:81:8d:f5:50:b6:51:61:3e:77:f0:88:c2:79:24:8a:33:f6:31:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Nov 27 15:05:20 2020 GMT
            Not After : Nov 26 15:10:20 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:73:03:e4:b4:3c:68:85:9a:e4:fa:2b:13:14:
                    ce:27:e4:c0:40:b8:72:99:1f:f4:06:e7:5e:d0:49:
                    69:69:71:03:7a:c0:be:1c:c7:75:e2:9f:d6:c4:2c:
                    79:b6:8f:5a:e1:47:02:ab:12:17:88:8f:bc:26:a6:
                    75:f3:05:98:ac:b6:10:d6:09:3a:44:14:d1:4f:c8:
                    eb:ff:a3:0e:57:13:8c:ad:65:d9:41:6d:eb:4b:c9:
                    ce:f9:49:88:88:8e:27:5c:33:4c:6a:ce:75:32:88:
                    50:17:40:16:54:8f:dc:9b:fa:1a:c4:51:8a:ce:7a:
                    a4:3d:1e:cd:0f:46:c0:c4:08:41:c2:e9:02:2c:33:
                    20:5e:1b:db:22:a3:69:74:69:94:45:93:ce:fb:c4:
                    bd:ce:02:e7:6c:3d:43:58:89:07:92:d4:7a:1d:21:
                    f8:82:e7:77:23:12:cb:8d:ac:11:5f:41:02:6d:34:
                    a1:26:de:ab:b7:e5:08:9e:f4:54:ab:a3:2f:dc:8f:
                    43:73:9b:7b:db:33:4a:2a:16:c6:7f:3f:b3:99:bc:
                    66:64:fb:9f:b6:75:bb:17:6c:1d:b0:31:4a:77:a2:
                    c8:a7:21:4f:d5:45:50:96:ec:af:98:a2:1f:c9:14:
                    55:b2:28:8a:e2:76:c0:80:bb:84:e9:07:8f:6a:5b:
                    bc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:14:8C:78:2C:68:BF:7E:E1:97:CA:A8:34:B8:4D:7D:3E:0E:2D:AB
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e32322e3135332e302f32342d3234203d3e20323037373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.22.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:fa:28:64:34:52:e7:2f:f7:26:d9:ca:06:e2:bb:a1:8c:02:
         74:86:e4:40:5e:44:6c:2d:41:ab:e4:b0:fa:56:82:2b:33:0b:
         1a:1c:6a:72:15:4b:05:30:91:13:d5:e8:51:90:38:c3:86:c0:
         b4:61:1e:09:92:ee:92:03:83:39:d2:f9:b4:8f:f3:4c:64:09:
         40:21:6c:4d:01:97:25:ec:09:c4:58:a2:5b:b9:b7:54:da:67:
         68:27:a3:11:ac:09:38:1b:be:88:e1:71:c2:14:15:9b:90:4e:
         eb:60:d7:13:51:2b:97:56:cc:95:f2:bf:d5:79:40:15:fb:33:
         33:d4:08:a6:a5:50:8f:4a:81:3a:7a:3a:fa:8e:9e:49:fd:7c:
         3d:40:d3:bd:63:41:b5:9f:cb:8b:a3:e0:a4:89:ef:37:c2:be:
         f5:8a:59:09:04:6d:f4:65:74:42:cf:5d:03:5b:54:ae:6e:65:
         be:1e:ec:f5:74:ef:8a:98:1a:00:ab:4a:39:bc:f6:3c:2f:8b:
         09:2e:60:d2:dc:75:78:88:0d:9b:cf:f6:75:24:70:13:3e:cb:
         5a:1a:8b:c9:1b:10:3c:65:63:2e:4a:0b:6f:fd:57:61:cb:bd:
         fe:f8:f4:1c:a8:0e:dc:26:90:c1:ab:fd:e6:ec:14:95:19:6b:
         79:9b:d5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----