Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3139342e3135362e3133362e302f32342d3234203d3e2038313030.roa
File:                     3139342e3135362e3133362e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier:          m2XmF/49ROOaGC3k1zJ3a26RTNTkUNuEtaujvYP9uYE=
Subject key identifier:   0B:47:F7:54:98:26:56:4F:35:4C:1B:76:F8:59:C4:32:7B:26:07:E1
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       5E24F74604117A97343AD2B94434F70AC40132CB
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e3135362e3133362e302f32342d3234203d3e2038313030.roa
Signing time:             Tue 26 Jan 2021 18:38:33 +0000
ROA not before:           Tue 26 Jan 2021 18:33:33 +0000
ROA not after:            Tue 25 Jan 2022 18:38:33 +0000
asID:                     8100
IP address blocks:        194.156.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:24:f7:46:04:11:7a:97:34:3a:d2:b9:44:34:f7:0a:c4:01:32:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Jan 26 18:33:33 2021 GMT
            Not After : Jan 25 18:38:33 2022 GMT
        Subject: CN=3082010A0282010100B355E6CBF9560E305B01CD46F46A3D55D1DEEA5A429350EDC2760EEF4E81175E4A11E4F132A9DE0478D1A20B5FB507A286CB57904ECBC9400EDBDF032090BA24CEA89FEC86D5DE7855124BB7B73B36F799FFCC7F07AAAE770FF974C22D75906AEDE4E4EDDFDFFF688F673831518D6C0CEDCB5019FF3FF7C282B24A9E9D9CD2FD766C09AC0679A4CD6FC23543EE248874BCA5BCC350820FBE58D6B45323E4943392A1D438351AF51AE741FD116B6CA715BA0283FAC78679464D19DCA42369DD9037EFDE7C4BD4F6EE034689AA9F3D5681221BAAF8A1C4314392570954CE89C5DC0E74A29BB55D86121971A9E7F3C6F5F10CAEADB332EEEF7E1F5845F3BD3D7FB70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:55:e6:cb:f9:56:0e:30:5b:01:cd:46:f4:6a:
                    3d:55:d1:de:ea:5a:42:93:50:ed:c2:76:0e:ef:4e:
                    81:17:5e:4a:11:e4:f1:32:a9:de:04:78:d1:a2:0b:
                    5f:b5:07:a2:86:cb:57:90:4e:cb:c9:40:0e:db:df:
                    03:20:90:ba:24:ce:a8:9f:ec:86:d5:de:78:55:12:
                    4b:b7:b7:3b:36:f7:99:ff:cc:7f:07:aa:ae:77:0f:
                    f9:74:c2:2d:75:90:6a:ed:e4:e4:ed:df:df:ff:68:
                    8f:67:38:31:51:8d:6c:0c:ed:cb:50:19:ff:3f:f7:
                    c2:82:b2:4a:9e:9d:9c:d2:fd:76:6c:09:ac:06:79:
                    a4:cd:6f:c2:35:43:ee:24:88:74:bc:a5:bc:c3:50:
                    82:0f:be:58:d6:b4:53:23:e4:94:33:92:a1:d4:38:
                    35:1a:f5:1a:e7:41:fd:11:6b:6c:a7:15:ba:02:83:
                    fa:c7:86:79:46:4d:19:dc:a4:23:69:dd:90:37:ef:
                    de:7c:4b:d4:f6:ee:03:46:89:aa:9f:3d:56:81:22:
                    1b:aa:f8:a1:c4:31:43:92:57:09:54:ce:89:c5:dc:
                    0e:74:a2:9b:b5:5d:86:12:19:71:a9:e7:f3:c6:f5:
                    f1:0c:ae:ad:b3:32:ee:ef:7e:1f:58:45:f3:bd:3d:
                    7f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:47:F7:54:98:26:56:4F:35:4C:1B:76:F8:59:C4:32:7B:26:07:E1
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e3135362e3133362e302f32342d3234203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.156.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:2e:40:f7:85:18:58:33:5c:72:33:0a:d1:6c:29:db:2a:72:
         51:5f:47:67:ff:ba:35:d8:46:5b:26:41:da:d9:14:c1:c3:78:
         4b:ae:12:06:2a:31:e9:14:74:de:46:f6:2b:38:aa:9f:d7:70:
         4e:cd:63:4d:cc:fa:d0:ae:87:8e:cb:ac:38:2a:59:82:1e:5a:
         83:9f:f1:e9:53:7d:03:6b:13:3e:38:00:bd:16:20:8c:4a:cb:
         05:e8:8d:5c:dc:e6:6c:22:ed:2f:1a:7a:b8:65:fe:6f:96:70:
         0f:ae:16:24:c0:f8:07:d4:4f:9b:a0:0d:d8:35:29:90:ad:c5:
         e1:98:19:6a:54:23:20:75:fd:40:71:a7:1b:99:c1:55:32:41:
         8c:d1:69:7d:64:7a:c3:a6:08:5a:eb:a8:e0:7c:d7:03:eb:d1:
         fa:d9:5a:67:fe:6c:ae:b5:fe:1c:36:7f:e3:08:a6:93:b4:4e:
         2d:fc:21:89:13:fd:f4:14:1d:cd:6a:b2:2e:47:d1:1e:af:f9:
         19:ac:cb:2d:b6:63:64:01:c5:69:9c:40:12:71:4a:32:39:03:
         0f:b3:05:88:00:6f:76:04:da:e2:2b:9b:4b:f7:83:04:ca:bc:
         e4:d6:e9:78:4c:45:78:12:84:93:83:8b:6e:08:30:06:d2:74:
         a2:41:69:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----