Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3139342e3135362e3133362e302f32342d3234203d3e203432333737.roa
File:                     3139342e3135362e3133362e302f32342d3234203d3e203432333737.roa (raw, json)
Hash identifier:          wo8u7tqp07Xj1TwLAMEaMSZ7YaRD/3+o3iCJXptVoq4=
Subject key identifier:   70:93:E3:D2:08:C6:32:B9:94:A9:65:02:A7:DE:91:E5:68:1D:31:D5
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       2079BA6AFC0C019C41CFD87B1ED7E6E789F83790
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e3135362e3133362e302f32342d3234203d3e203432333737.roa
Signing time:             Fri 22 Jan 2021 14:31:52 +0000
ROA not before:           Fri 22 Jan 2021 14:26:52 +0000
ROA not after:            Fri 21 Jan 2022 14:31:52 +0000
asID:                     42377
IP address blocks:        194.156.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:79:ba:6a:fc:0c:01:9c:41:cf:d8:7b:1e:d7:e6:e7:89:f8:37:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Jan 22 14:26:52 2021 GMT
            Not After : Jan 21 14:31:52 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:22:12:83:37:ba:9d:fc:06:af:f3:54:37:5a:
                    f1:00:f7:f7:16:dd:59:5d:61:e3:72:fe:a3:b2:57:
                    c3:96:78:64:69:93:5a:96:a0:52:a1:e3:af:12:96:
                    23:a8:4b:16:37:a3:3d:e0:14:2a:b4:ff:e9:2b:eb:
                    fa:16:9e:aa:ae:98:66:5e:15:1d:65:cf:dd:6f:51:
                    ea:e5:bb:80:4c:34:39:62:b6:99:c7:9f:e5:aa:7d:
                    24:8b:f5:33:76:fe:89:90:7d:22:63:2e:d2:ce:dd:
                    0c:41:b5:4c:a9:a2:3c:c8:60:17:37:ce:24:ae:e6:
                    ca:55:cd:cc:64:fe:8a:f2:34:54:b4:cf:1d:ab:5c:
                    93:9b:f7:91:fb:85:8c:5d:81:9d:6e:88:e9:ca:90:
                    40:11:ed:8e:cc:63:45:e8:c2:db:2f:80:9e:dc:cd:
                    10:ba:ac:d3:16:53:fa:5b:3a:cf:4d:ff:70:c7:b0:
                    21:f5:5b:82:b8:22:fb:bd:98:6f:9c:3a:12:43:5e:
                    7b:20:bc:d7:9b:60:83:e1:eb:17:1b:7a:be:96:fe:
                    be:f1:cc:a1:4b:8d:17:29:f7:da:7f:61:4e:e2:24:
                    83:85:07:1f:d9:67:66:32:c8:f4:69:48:ed:3b:e1:
                    88:be:df:23:7a:31:5e:d3:0a:8b:4f:3a:52:f9:08:
                    c3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:93:E3:D2:08:C6:32:B9:94:A9:65:02:A7:DE:91:E5:68:1D:31:D5
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e3135362e3133362e302f32342d3234203d3e203432333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.156.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:5f:1b:d0:28:d6:88:d2:23:70:ec:3a:b7:eb:80:bb:8f:a3:
         f4:28:56:dd:9f:e5:67:2d:45:23:94:e7:1b:3e:61:57:9a:05:
         c4:9d:9a:bc:15:5f:64:7d:c7:af:b4:fc:26:18:7d:bc:9d:87:
         7d:de:b5:af:8d:69:e3:85:0d:68:c6:07:f5:6b:c1:d7:e8:b5:
         58:36:94:7c:26:34:ba:1c:00:74:34:f0:37:9c:47:81:c5:91:
         94:14:83:20:33:73:11:89:12:7e:65:72:0d:3f:28:21:5f:a6:
         fb:cd:16:a5:95:f4:19:17:bb:fa:58:83:0c:d9:45:5d:ff:12:
         c3:c3:90:f1:a4:7a:d5:28:f8:35:39:40:fe:8c:2d:19:6c:7e:
         bd:d0:ab:10:46:9e:b5:17:23:d9:96:3a:52:a3:4b:c5:25:50:
         7a:6f:f8:e2:98:44:92:7f:73:66:8d:5c:0b:79:0d:62:ac:36:
         79:ca:69:17:86:40:81:68:a5:f7:00:15:36:07:48:34:6a:22:
         5a:b8:9b:2f:12:08:6f:4e:11:82:3a:10:7e:14:d0:4d:b3:97:
         20:37:2c:bd:d5:47:1c:98:33:b9:2f:34:d6:51:04:91:2e:d3:
         c0:6f:23:e6:f1:af:52:25:e9:1f:dc:6a:d9:a0:78:17:b4:d7:
         16:65:c5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----