Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139332e34322e39372e302f32342d3234203d3e20323132303730.roa
File:                     3139332e34322e39372e302f32342d3234203d3e20323132303730.roa (raw, json)
Hash identifier:          GHGj4WrF02FhJ1wAO0LTnrFiSq58D0MGXdGZghWY2q8=
Subject key identifier:   5E:F7:13:BF:35:F7:80:B1:70:BA:CF:C4:86:84:82:58:D2:76:DD:ED
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       526EA0B8B25D030FA38A829B5D7765AE7204612D
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e34322e39372e302f32342d3234203d3e20323132303730.roa
Signing time:             Mon 04 Jan 2021 14:53:45 +0000
ROA not before:           Mon 04 Jan 2021 14:48:45 +0000
ROA not after:            Mon 03 Jan 2022 14:53:45 +0000
asID:                     212070
IP address blocks:        193.42.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:6e:a0:b8:b2:5d:03:0f:a3:8a:82:9b:5d:77:65:ae:72:04:61:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Jan  4 14:48:45 2021 GMT
            Not After : Jan  3 14:53:45 2022 GMT
        Subject: CN=3082010A0282010100A9958C5B16629BD7FA7CF368281F1F8E00A0F3D2EBAAD227786DB21819651B93420D127E710D5047248E0AB1833859762917AE79489BA67EA95BEAC61A3E1428C24F7A1D7513B55A925B48466B1021ED8C55805840DA93FCE0E51AF691056829F7B05A3B657D998EA8F1FB1C67F5A2D89B20F3D7BE5ED7BB9D5D037F1C1E7CD9DA8B1FF60462E72899F6E136CB6E6E311F4E6DBFD53107A0FB148F17C0F7049B02AF509909445B14EB93ED7EF7F6AF827A75E419E04F35E70B4E4D2892FDD56C9C2156FAAAEAEBAEC5BB4AB7D3C39B273FCBD4B3E481950AB46B5E5AEF0AD55E0EEBB1E735117C13BAD03AD248237DE7A0EC342E84D1EB10B63BDE822D97D6670203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:95:8c:5b:16:62:9b:d7:fa:7c:f3:68:28:1f:
                    1f:8e:00:a0:f3:d2:eb:aa:d2:27:78:6d:b2:18:19:
                    65:1b:93:42:0d:12:7e:71:0d:50:47:24:8e:0a:b1:
                    83:38:59:76:29:17:ae:79:48:9b:a6:7e:a9:5b:ea:
                    c6:1a:3e:14:28:c2:4f:7a:1d:75:13:b5:5a:92:5b:
                    48:46:6b:10:21:ed:8c:55:80:58:40:da:93:fc:e0:
                    e5:1a:f6:91:05:68:29:f7:b0:5a:3b:65:7d:99:8e:
                    a8:f1:fb:1c:67:f5:a2:d8:9b:20:f3:d7:be:5e:d7:
                    bb:9d:5d:03:7f:1c:1e:7c:d9:da:8b:1f:f6:04:62:
                    e7:28:99:f6:e1:36:cb:6e:6e:31:1f:4e:6d:bf:d5:
                    31:07:a0:fb:14:8f:17:c0:f7:04:9b:02:af:50:99:
                    09:44:5b:14:eb:93:ed:7e:f7:f6:af:82:7a:75:e4:
                    19:e0:4f:35:e7:0b:4e:4d:28:92:fd:d5:6c:9c:21:
                    56:fa:aa:ea:eb:ae:c5:bb:4a:b7:d3:c3:9b:27:3f:
                    cb:d4:b3:e4:81:95:0a:b4:6b:5e:5a:ef:0a:d5:5e:
                    0e:eb:b1:e7:35:11:7c:13:ba:d0:3a:d2:48:23:7d:
                    e7:a0:ec:34:2e:84:d1:eb:10:b6:3b:de:82:2d:97:
                    d6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F7:13:BF:35:F7:80:B1:70:BA:CF:C4:86:84:82:58:D2:76:DD:ED
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e34322e39372e302f32342d3234203d3e20323132303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.42.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:05:b5:60:08:8f:32:f0:35:3d:e1:18:f6:02:b1:e1:e8:81:
         1c:4d:19:82:bc:ce:c0:ec:70:f3:5b:14:88:ce:bb:5e:ca:c4:
         86:fc:45:cf:c8:9b:3e:37:68:16:95:ca:a7:a9:81:b1:e6:ca:
         95:76:5d:42:2c:94:63:1a:be:ae:21:50:0d:eb:7c:3b:e0:ed:
         ab:f0:5a:eb:58:50:4e:17:28:37:27:8e:56:05:dc:5a:0b:69:
         c5:ef:03:f8:7d:3a:a8:f8:a4:f1:6b:45:a0:6d:69:5a:91:ba:
         f1:35:3e:64:34:5c:05:5b:d8:02:4a:f1:2d:00:eb:b3:44:4f:
         aa:0e:e7:d0:0f:61:c0:38:6a:cd:ea:0b:ad:fe:e7:8c:f1:06:
         a6:d1:44:02:91:ce:12:0c:b9:f5:53:c9:8b:e2:b6:bf:81:43:
         14:29:83:d7:13:41:1c:d6:d6:c7:90:6f:a6:7f:47:2a:b6:d4:
         da:c9:b2:bc:a0:77:9a:5a:20:81:0d:36:1a:a6:fb:6f:2f:35:
         a5:d7:c0:25:fb:a9:6c:06:f8:cd:55:14:c2:5e:ea:b0:8d:5a:
         e9:a6:21:ef:a1:6d:0d:cf:6d:e9:a2:93:1a:31:39:07:12:96:
         a3:29:9c:5f:ee:2c:bf:98:6a:cb:d7:61:78:7e:0d:f1:8c:3f:
         7b:a7:ea:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----