Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3139332e32322e3134342e302f32342d3234203d3e20323132303737.roa
File:                     3139332e32322e3134342e302f32342d3234203d3e20323132303737.roa (raw, json)
Hash identifier:          o0ncsswrcDn0VWLx2Ct+8miK9KK7lMxK4LfCTIzqyjI=
Subject key identifier:   68:09:A3:DB:6B:24:18:A4:C7:5B:ED:45:95:78:28:EC:CF:79:A5:32
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       1F2B6797978632BFBADFE73D718F4A676949BB17
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139332e32322e3134342e302f32342d3234203d3e20323132303737.roa
Signing time:             Thu 31 Dec 2020 18:51:38 +0000
ROA not before:           Thu 31 Dec 2020 18:46:38 +0000
ROA not after:            Thu 30 Dec 2021 18:51:38 +0000
asID:                     212077
IP address blocks:        193.22.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:2b:67:97:97:86:32:bf:ba:df:e7:3d:71:8f:4a:67:69:49:bb:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Dec 31 18:46:38 2020 GMT
            Not After : Dec 30 18:51:38 2021 GMT
        Subject: CN=3082010A0282010100BECF0529CD7E222F73F938BA68E08CF840DA4463079587E481420ED6C742F563EB07B70EF517E1252A5A617807E4B38AC0DC4C22F2BB0ED07AE452BC28E2BE4CB7A34DA75BE0453257A6FD43E904291EDBAE6941A8C752A296A8FB058084BAAE03C28BB4004FC2E0305918E49A82AE6A7708D2404815AC23731ADD3E4E81418D776AC27CCE3EB3320C33221791FA38B374E09EFA6121444F8F47A5EA4090EF2543B940983E806FC5C084E04DCD59B9447E4A9A1232EB2C71E766BA6C11B499A24BDFD05BA359857E4C87E24D37F4AFD1CE5A82033C2B2FA6F944C3F071D379EC4451CD19E79E43240C2AB02EE3735074C0BAE3521EC5CAFA4863E91EF5B276E90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cf:05:29:cd:7e:22:2f:73:f9:38:ba:68:e0:
                    8c:f8:40:da:44:63:07:95:87:e4:81:42:0e:d6:c7:
                    42:f5:63:eb:07:b7:0e:f5:17:e1:25:2a:5a:61:78:
                    07:e4:b3:8a:c0:dc:4c:22:f2:bb:0e:d0:7a:e4:52:
                    bc:28:e2:be:4c:b7:a3:4d:a7:5b:e0:45:32:57:a6:
                    fd:43:e9:04:29:1e:db:ae:69:41:a8:c7:52:a2:96:
                    a8:fb:05:80:84:ba:ae:03:c2:8b:b4:00:4f:c2:e0:
                    30:59:18:e4:9a:82:ae:6a:77:08:d2:40:48:15:ac:
                    23:73:1a:dd:3e:4e:81:41:8d:77:6a:c2:7c:ce:3e:
                    b3:32:0c:33:22:17:91:fa:38:b3:74:e0:9e:fa:61:
                    21:44:4f:8f:47:a5:ea:40:90:ef:25:43:b9:40:98:
                    3e:80:6f:c5:c0:84:e0:4d:cd:59:b9:44:7e:4a:9a:
                    12:32:eb:2c:71:e7:66:ba:6c:11:b4:99:a2:4b:df:
                    d0:5b:a3:59:85:7e:4c:87:e2:4d:37:f4:af:d1:ce:
                    5a:82:03:3c:2b:2f:a6:f9:44:c3:f0:71:d3:79:ec:
                    44:51:cd:19:e7:9e:43:24:0c:2a:b0:2e:e3:73:50:
                    74:c0:ba:e3:52:1e:c5:ca:fa:48:63:e9:1e:f5:b2:
                    76:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:09:A3:DB:6B:24:18:A4:C7:5B:ED:45:95:78:28:EC:CF:79:A5:32
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139332e32322e3134342e302f32342d3234203d3e20323132303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.22.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:da:98:e9:aa:93:81:41:ef:49:47:96:6b:d4:a6:6b:03:9e:
         74:77:d7:16:8a:0d:4b:8d:29:4f:b6:88:6a:56:b7:28:aa:dc:
         25:04:0b:65:21:ec:ec:5b:56:b7:d3:28:12:1a:fe:ee:59:00:
         23:d4:bc:91:af:95:4e:3d:54:e8:5f:8a:eb:50:0c:30:a0:62:
         20:27:11:8d:e0:d1:03:c6:c2:63:7b:50:31:63:a7:9c:90:32:
         0d:77:66:b8:4b:3a:7f:3c:24:8a:97:0e:2b:7d:81:ba:fa:c9:
         ec:6f:77:23:e9:fb:dc:68:7a:ca:73:6b:14:54:5e:3b:77:0d:
         20:83:8b:17:70:dd:63:1d:ab:74:a7:a9:b2:91:aa:1c:6b:1b:
         1d:8c:0c:b8:56:e9:05:e5:a1:87:ae:d6:07:37:7c:a8:fe:4c:
         9b:51:d1:04:55:71:7e:15:b8:cc:a3:6c:8c:1e:8e:8c:7d:08:
         f5:e4:19:41:55:d8:3f:c1:6d:24:b8:99:d7:2f:9b:f0:f7:09:
         2b:1f:c3:59:57:0e:dd:ff:1b:94:b5:c5:66:b9:68:90:9c:e5:
         97:a3:27:1d:95:2d:33:e8:e6:46:bb:bf:f5:2f:e9:d4:d6:ce:
         97:00:4d:55:94:2a:90:81:36:b7:a7:b2:b8:de:21:1a:5c:64:
         4f:c8:1b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----