Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139332e34322e39372e302f32342d3234203d3e20323132383738.roa
File:                     3139332e34322e39372e302f32342d3234203d3e20323132383738.roa (raw, json)
Hash identifier:          S38VOIgWft06mhFSSmBoTWlqWMMDhflGmnaEwUcTd4U=
Subject key identifier:   21:43:C9:C0:FE:E4:35:E5:42:E4:67:EA:72:D4:23:BB:9D:A5:F2:80
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       67DC36E65865A42AA1F0C7A2656B55FF4EA4D8AC
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e34322e39372e302f32342d3234203d3e20323132383738.roa
Signing time:             Fri 27 Nov 2020 15:10:20 +0000
ROA not before:           Fri 27 Nov 2020 15:05:20 +0000
ROA not after:            Fri 26 Nov 2021 15:10:20 +0000
asID:                     212878
IP address blocks:        193.42.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:dc:36:e6:58:65:a4:2a:a1:f0:c7:a2:65:6b:55:ff:4e:a4:d8:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Nov 27 15:05:20 2020 GMT
            Not After : Nov 26 15:10:20 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4c:af:b5:06:7f:22:e0:cd:07:9c:e6:2c:6f:
                    58:70:5b:10:d1:3f:7d:0a:bc:d9:c5:12:82:7f:c1:
                    78:72:02:a8:3b:85:74:82:68:55:04:88:89:50:39:
                    26:d1:23:57:83:2e:20:03:ed:bf:66:08:8c:72:fb:
                    c5:a2:27:f2:da:16:6d:e5:e1:82:af:ec:e7:52:4c:
                    44:d1:20:60:43:d3:fd:94:6b:97:ac:81:29:66:2f:
                    ad:c1:9a:23:4f:22:87:96:7c:0e:06:2d:d0:61:85:
                    39:29:f8:ca:62:54:5a:1b:d9:af:25:b4:a3:47:70:
                    fa:33:8e:5e:b5:2d:0c:c8:63:d5:8e:b5:37:22:1b:
                    82:5e:a9:65:5c:6b:3f:c7:dc:3a:5f:a4:b2:ed:eb:
                    6e:da:5f:1c:91:1a:37:57:2d:77:55:70:0a:46:c0:
                    59:45:de:d5:d6:a7:0d:a4:67:8e:cf:86:7d:b3:fe:
                    b0:ab:c3:11:b5:3c:1d:e4:c7:00:ca:c4:68:4e:55:
                    9e:b0:48:1f:e4:d9:f6:bb:e0:4d:5a:97:cf:22:f3:
                    07:aa:e3:6f:a2:41:3b:07:a6:d9:b7:11:c3:b5:e4:
                    23:c8:3b:c6:fa:e8:74:09:8c:cf:a5:0d:ad:03:b1:
                    2b:51:60:0a:37:30:63:c5:4e:91:f3:12:98:8e:4b:
                    7a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:43:C9:C0:FE:E4:35:E5:42:E4:67:EA:72:D4:23:BB:9D:A5:F2:80
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e34322e39372e302f32342d3234203d3e20323132383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.42.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:7d:ff:a3:78:54:76:9f:c3:15:00:81:d8:e5:2f:4b:4e:53:
         83:6d:2e:87:f8:e0:86:52:2c:22:89:b5:de:47:a7:ce:70:c8:
         89:0e:e7:ef:19:dd:74:1e:c0:f6:38:2a:a5:cc:b1:6d:23:9c:
         cc:b3:3b:f7:26:90:9e:b2:6a:97:5f:69:65:73:23:74:d2:1f:
         39:f8:86:e0:d2:ab:19:a9:2d:07:a4:ff:08:25:bd:97:05:60:
         98:d9:44:02:47:95:5b:d8:b7:84:9e:83:fb:8a:18:8f:ec:45:
         9b:19:7a:e3:91:37:cc:16:10:74:05:4e:51:94:30:6c:f9:eb:
         7a:82:21:8d:17:11:ea:2d:4e:4f:60:cc:3c:d3:b6:14:fa:76:
         af:42:03:5d:af:91:24:f8:f7:f5:ae:6b:d6:ee:fe:cb:b7:9b:
         c8:35:13:2a:b3:65:7a:86:55:1f:9b:cc:5e:71:7f:ec:91:a9:
         27:f9:40:e1:9c:e1:d0:d4:00:cb:99:22:8b:f9:43:e9:fc:a5:
         cd:3d:16:e2:6f:f3:76:eb:4d:e2:88:ee:7a:18:23:d2:0e:54:
         08:c8:3f:3c:19:c4:f0:f2:e4:2c:b1:81:7e:a9:ed:69:f7:00:
         72:cf:56:df:ae:88:cb:46:d5:06:8f:96:2f:c6:bd:04:f1:19:
         49:66:c9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----