Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/38/3139342e3234322e35362e302f32342d3234203d3e203330383233.roa
File:                     3139342e3234322e35362e302f32342d3234203d3e203330383233.roa (raw, json)
Hash identifier:          9LInN3Pc58Ac8+83mnRaOWXEygqlO1GXBiBGP55g7DM=
Subject key identifier:   D1:A7:52:01:A6:0F:38:66:CF:92:4F:4D:B9:A2:D4:F3:8C:FC:55:04
Certificate issuer:       /CN=e9fc48331f2e461a51bcf68c86c0f1c52df5b50f
Certificate serial:       642C9E950A6BD0CB7F54F678B363C04CAB25A8EA
Authority key identifier: E9:FC:48:33:1F:2E:46:1A:51:BC:F6:8C:86:C0:F1:C5:2D:F5:B5:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6fxIMx8uRhpRvPaMhsDxxS31tQ8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/38/3139342e3234322e35362e302f32342d3234203d3e203330383233.roa
Signing time:             Wed 09 Dec 2020 09:41:21 +0000
ROA not before:           Wed 09 Dec 2020 09:36:21 +0000
ROA not after:            Wed 08 Dec 2021 09:41:21 +0000
asID:                     30823
IP address blocks:        194.242.56.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:2c:9e:95:0a:6b:d0:cb:7f:54:f6:78:b3:63:c0:4c:ab:25:a8:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9fc48331f2e461a51bcf68c86c0f1c52df5b50f
        Validity
            Not Before: Dec  9 09:36:21 2020 GMT
            Not After : Dec  8 09:41:21 2021 GMT
        Subject: CN=3082010A028201010097962643DAFC787ABC4AF728A0D0FB428D3D796609A70C8EC58BA8E5F6F101A0E5306D42D5F38EA2511F6B1375881A1FB8AFE5C781EA854E02D0F8DB041107909CABF0501FC7DE1B8D5E9234DFC63AEDDB1D0FE8601A5C7933C70FA11EC1A1C498A625A44EA2E88F5CB2F94EEE502D7963DEDFBA49542B927596CA37301B364954CE91EA1F9991A8CC9DF2BFB953B9E5B06BD12A260FA2F2788DB39DDF7F0A105F2AC87F70052D272A92E814CD8A79716FBFA22AC463D85ACAB4A7838022AF604E4DF215540E9581D32E38443F0DEB75DAF844B3FCB3389138C6CF3AF0695E23DD0170F7BA8A836D518598BE5E22C030251B93BA6690FE9D833FC8D6D64349A30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:96:26:43:da:fc:78:7a:bc:4a:f7:28:a0:d0:
                    fb:42:8d:3d:79:66:09:a7:0c:8e:c5:8b:a8:e5:f6:
                    f1:01:a0:e5:30:6d:42:d5:f3:8e:a2:51:1f:6b:13:
                    75:88:1a:1f:b8:af:e5:c7:81:ea:85:4e:02:d0:f8:
                    db:04:11:07:90:9c:ab:f0:50:1f:c7:de:1b:8d:5e:
                    92:34:df:c6:3a:ed:db:1d:0f:e8:60:1a:5c:79:33:
                    c7:0f:a1:1e:c1:a1:c4:98:a6:25:a4:4e:a2:e8:8f:
                    5c:b2:f9:4e:ee:50:2d:79:63:de:df:ba:49:54:2b:
                    92:75:96:ca:37:30:1b:36:49:54:ce:91:ea:1f:99:
                    91:a8:cc:9d:f2:bf:b9:53:b9:e5:b0:6b:d1:2a:26:
                    0f:a2:f2:78:8d:b3:9d:df:7f:0a:10:5f:2a:c8:7f:
                    70:05:2d:27:2a:92:e8:14:cd:8a:79:71:6f:bf:a2:
                    2a:c4:63:d8:5a:ca:b4:a7:83:80:22:af:60:4e:4d:
                    f2:15:54:0e:95:81:d3:2e:38:44:3f:0d:eb:75:da:
                    f8:44:b3:fc:b3:38:91:38:c6:cf:3a:f0:69:5e:23:
                    dd:01:70:f7:ba:8a:83:6d:51:85:98:be:5e:22:c0:
                    30:25:1b:93:ba:66:90:fe:9d:83:3f:c8:d6:d6:43:
                    49:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A7:52:01:A6:0F:38:66:CF:92:4F:4D:B9:A2:D4:F3:8C:FC:55:04
            X509v3 Authority Key Identifier:
                keyid:E9:FC:48:33:1F:2E:46:1A:51:BC:F6:8C:86:C0:F1:C5:2D:F5:B5:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/38/E9FC48331F2E461A51BCF68C86C0F1C52DF5B50F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6fxIMx8uRhpRvPaMhsDxxS31tQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/38/3139342e3234322e35362e302f32342d3234203d3e203330383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.242.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:82:2d:0e:82:ec:2d:cf:f3:cb:68:7f:a3:15:c4:52:e3:16:
         cf:9e:ab:bb:71:a7:87:cc:c7:f1:de:da:9c:57:a3:bb:48:21:
         69:3f:ce:b9:e2:62:24:96:f8:6f:59:be:b2:25:d5:b2:40:a6:
         1c:5c:d1:b8:ca:08:f4:81:f4:6e:3b:13:d2:e4:b3:b8:4f:12:
         8d:97:9a:95:4f:48:4e:be:c5:b4:0c:6c:c6:4d:af:ef:66:e3:
         2f:0a:d3:6b:85:98:9a:27:97:9c:e1:ac:20:5e:c3:f4:95:c9:
         d1:b6:da:1d:d5:d1:6b:cf:f2:58:39:6c:50:cc:8c:74:d1:e7:
         ec:16:10:ae:7f:17:8f:19:7d:75:d8:49:64:be:90:76:c0:09:
         cb:de:0f:5a:f6:1b:87:8e:76:10:41:8f:7d:f9:6f:b8:94:61:
         e0:9b:c8:c6:07:2a:83:95:fe:f4:ae:fb:ac:12:c4:55:aa:d3:
         76:85:69:0a:fa:9e:38:a0:2b:f2:1a:9e:68:69:22:b9:f8:be:
         10:80:83:4a:6b:82:71:8b:41:20:8d:ca:1b:85:cc:cc:03:e6:
         03:a7:34:5c:18:39:09:ec:e9:60:5c:c7:dd:59:fb:ea:54:36:
         2a:d0:83:87:4a:cf:a4:b5:d5:09:40:a6:33:bb:79:a5:3a:4b:
         cf:a1:5f:ba
-----BEGIN CERTIFICATE-----
MIIG5TCCBc2gAwIBAgIUZCyelQpr0Mt/VPZ4s2PATKslqOowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTlmYzQ4MzMxZjJlNDYxYTUxYmNmNjhjODZjMGYxYzUy
ZGY1YjUwZjAeFw0yMDEyMDkwOTM2MjFaFw0yMTEyMDgwOTQxMjFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOTc5NjI2NDNEQUZDNzg3QUJD
NEFGNzI4QTBEMEZCNDI4RDNENzk2NjA5QTcwQzhFQzU4QkE4RTVGNkYxMDFBMEU1
MzA2RDQyRDVGMzhFQTI1MTFGNkIxMzc1ODgxQTFGQjhBRkU1Qzc4MUVBODU0RTAy
RDBGOERCMDQxMTA3OTA5Q0FCRjA1MDFGQzdERTFCOEQ1RTkyMzRERkM2M0FFRERC
MUQwRkU4NjAxQTVDNzkzM0M3MEZBMTFFQzFBMUM0OThBNjI1QTQ0RUEyRTg4RjVD
QjJGOTRFRUU1MDJENzk2M0RFREZCQTQ5NTQyQjkyNzU5NkNBMzczMDFCMzY0OTU0
Q0U5MUVBMUY5OTkxQThDQzlERjJCRkI5NTNCOUU1QjA2QkQxMkEyNjBGQTJGMjc4
OERCMzlEREY3RjBBMTA1RjJBQzg3RjcwMDUyRDI3MkE5MkU4MTRDRDhBNzk3MTZG
QkZBMjJBQzQ2M0Q4NUFDQUI0QTc4MzgwMjJBRjYwNEU0REYyMTU1NDBFOTU4MUQz
MkUzODQ0M0YwREVCNzVEQUY4NDRCM0ZDQjMzODkxMzhDNkNGM0FGMDY5NUUyM0RE
MDE3MEY3QkE4QTgzNkQ1MTg1OThCRTVFMjJDMDMwMjUxQjkzQkE2NjkwRkU5RDgz
M0ZDOEQ2RDY0MzQ5QTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAl5YmQ9r8eHq8SvcooND7Qo09eWYJpwyOxYuo5fbxAaDlMG1C1fOO
olEfaxN1iBofuK/lx4HqhU4C0PjbBBEHkJyr8FAfx94bjV6SNN/GOu3bHQ/oYBpc
eTPHD6EewaHEmKYlpE6i6I9csvlO7lAteWPe37pJVCuSdZbKNzAbNklUzpHqH5mR
qMyd8r+5U7nlsGvRKiYPovJ4jbOd338KEF8qyH9wBS0nKpLoFM2KeXFvv6IqxGPY
Wsq0p4OAIq9gTk3yFVQOlYHTLjhEPw3rddr4RLP8sziROMbPOvBpXiPdAXD3uoqD
bVGFmL5eIsAwJRuTumaQ/p2DP8jW1kNJowIDAQABo4IB8zCCAe8wHQYDVR0OBBYE
FNGnUgGmDzhmz5JPTbmi1POM/FUEMB8GA1UdIwQYMBaAFOn8SDMfLkYaUbz2jIbA
8cUt9bUPMA4GA1UdDwEB/wQEAwIHgDBwBgNVHR8EaTBnMGWgY6Bhhl9yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8zOC9FOUZD
NDgzMzFGMkU0NjFBNTFCQ0Y2OEM4NkMwRjFDNTJERjVCNTBGLmNybDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmZ4SU14OHVSaHBSdlBhTWhzRHh4UzMxdFE4LmNlcjCB
iQYIKwYBBQUHAQsEfTB7MHkGCCsGAQUFBzALhm1yc3luYzovL3Jwa2kxLnRlcnJh
dHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8zOC8zMTM5MzQyZTMyMzQzMjJl
MzUzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzAzODMyMzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADC8jgwDQYJKoZIhvcNAQELBQADggEBAL6CLQ6C7C3P88tof6MVxFLjFs+eq7tx
p4fMx/He2pxXo7tIIWk/zrniYiSW+G9ZvrIl1bJAphxc0bjKCPSB9G47E9Lks7hP
Eo2XmpVPSE6+xbQMbMZNr+9m4y8K02uFmJonl5zhrCBew/SVydG22h3V0WvP8lg5
bFDMjHTR5+wWEK5/F48ZfXXYSWS+kHbACcveD1r2G4eOdhBBj335b7iUYeCbyMYH
KoOV/vSu+6wSxFWq03aFaQr6njigK/IanmhpIrn4vhCAg0prgnGLQSCNyhuFzMwD
5gOnNFwYOQns6WBcx91Z++pUNirQg4dKz6S11QlApjO7eaU6S8+hX7o=
-----END CERTIFICATE-----