Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139352e38382e38372e302f32342d3234203d3e20323132323133.roa
File:                     3139352e38382e38372e302f32342d3234203d3e20323132323133.roa (raw, json)
Hash identifier:          Qjq5mTSzs5xziTnxClT+uEFizzVPx5cKdd4SJ+0c/v8=
Subject key identifier:   58:7B:C9:EE:05:71:FA:9D:73:0A:6B:6E:A6:93:76:3C:1A:05:08:C6
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       778853709F6F1376DD5C60AB1E41FF858EB8AB44
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139352e38382e38372e302f32342d3234203d3e20323132323133.roa
Signing time:             Mon 14 Dec 2020 18:06:38 +0000
ROA not before:           Mon 14 Dec 2020 18:01:38 +0000
ROA not after:            Mon 13 Dec 2021 18:06:38 +0000
asID:                     212213
IP address blocks:        195.88.87.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:88:53:70:9f:6f:13:76:dd:5c:60:ab:1e:41:ff:85:8e:b8:ab:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Dec 14 18:01:38 2020 GMT
            Not After : Dec 13 18:06:38 2021 GMT
        Subject: CN=3082010A0282010100DD1C7C88F453EEDDC5DFFE98590E793E20BB59EB9BB364597B3AFD914B2616FF93109429E65D20DBC51DA9C03E1D730127C08A9A699C33ED0FAD1465471D3F48B57CB8D1DE1DF4A83FF8FE6934D7D0187F9694211E859DF371F1799803D97F2E6CBCDBBF9967BF3E8FEA785EC14D64567600E5105040A755BE66828934FCB86B4A7AFF5118EF6E82BBEB50D0CB93A6B8C56DAEDE22102BD94B993FE7FC34D2E0C73EDF8B4C1C05B6552A442C4E027AA415BC781189A3AC5254ECFED9C71993929D7FF87FB4B9E6C54674232CF1E6E14C79BA69746B3D86AE1108FACABAA9947472C258CEB4DD435A09A393D831B57A36C36372E0A3D11E5B491D9C067EA088A30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1c:7c:88:f4:53:ee:dd:c5:df:fe:98:59:0e:
                    79:3e:20:bb:59:eb:9b:b3:64:59:7b:3a:fd:91:4b:
                    26:16:ff:93:10:94:29:e6:5d:20:db:c5:1d:a9:c0:
                    3e:1d:73:01:27:c0:8a:9a:69:9c:33:ed:0f:ad:14:
                    65:47:1d:3f:48:b5:7c:b8:d1:de:1d:f4:a8:3f:f8:
                    fe:69:34:d7:d0:18:7f:96:94:21:1e:85:9d:f3:71:
                    f1:79:98:03:d9:7f:2e:6c:bc:db:bf:99:67:bf:3e:
                    8f:ea:78:5e:c1:4d:64:56:76:00:e5:10:50:40:a7:
                    55:be:66:82:89:34:fc:b8:6b:4a:7a:ff:51:18:ef:
                    6e:82:bb:eb:50:d0:cb:93:a6:b8:c5:6d:ae:de:22:
                    10:2b:d9:4b:99:3f:e7:fc:34:d2:e0:c7:3e:df:8b:
                    4c:1c:05:b6:55:2a:44:2c:4e:02:7a:a4:15:bc:78:
                    11:89:a3:ac:52:54:ec:fe:d9:c7:19:93:92:9d:7f:
                    f8:7f:b4:b9:e6:c5:46:74:23:2c:f1:e6:e1:4c:79:
                    ba:69:74:6b:3d:86:ae:11:08:fa:ca:ba:a9:94:74:
                    72:c2:58:ce:b4:dd:43:5a:09:a3:93:d8:31:b5:7a:
                    36:c3:63:72:e0:a3:d1:1e:5b:49:1d:9c:06:7e:a0:
                    88:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:7B:C9:EE:05:71:FA:9D:73:0A:6B:6E:A6:93:76:3C:1A:05:08:C6
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139352e38382e38372e302f32342d3234203d3e20323132323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.88.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:75:34:20:1d:4c:a7:80:8e:20:71:1e:b4:de:0a:b7:f2:93:
         a3:9a:17:5e:2e:4b:b6:b0:fd:c4:76:ae:54:f5:04:49:45:a2:
         ac:a2:15:a9:5f:63:88:84:1c:0b:07:6d:6c:c1:50:cd:4a:f9:
         74:14:8c:28:2b:12:bf:cf:e9:e2:f1:f2:5c:82:78:f2:f8:d9:
         21:df:b3:6b:04:fa:a0:e1:4a:6c:87:dc:9b:31:69:47:fa:57:
         4b:64:64:5f:cb:b8:d5:1b:b5:41:96:d2:38:8f:94:cc:c2:a5:
         4a:fe:ad:2f:22:be:df:71:45:e4:1e:6a:1a:d9:b0:02:0a:65:
         59:9a:4e:fd:7c:51:4f:26:f4:75:12:50:7e:66:df:e6:c8:a6:
         c7:86:9a:51:67:cd:04:62:e3:04:ad:75:c9:d2:ca:97:84:00:
         1e:87:88:19:5c:fa:8d:27:6d:2c:1e:42:26:73:a7:61:4a:ae:
         4e:d0:2b:ee:ae:18:c9:63:13:72:da:9e:ad:91:90:e4:9e:7c:
         ab:29:d0:0b:76:e5:18:a1:18:ad:c5:42:69:85:8c:65:4d:92:
         9f:ed:66:1f:81:54:0e:04:78:9b:f2:8b:ba:f1:43:5d:24:1d:
         98:98:42:06:78:da:3d:2d:7a:60:f9:b1:22:35:96:ae:b6:9f:
         5a:3e:b3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----