Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/37392e3137342e382e302f32322d3232203d3e203138353330.roa
File:                     37392e3137342e382e302f32322d3232203d3e203138353330.roa (raw, json)
Hash identifier:          9OIlCI7hPA+59ydihBGneQffyC0uMAhPj6N3OO9941Y=
Subject key identifier:   68:DE:14:AD:B7:2A:4E:80:93:02:D9:A3:D8:78:D3:0F:DE:2F:34:46
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       53CCDB2272E7DA70DA1AB16312D98F9CB2085ABA
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/37392e3137342e382e302f32322d3232203d3e203138353330.roa
Signing time:             Fri 27 Nov 2020 15:10:24 +0000
ROA not before:           Fri 27 Nov 2020 15:05:24 +0000
ROA not after:            Fri 26 Nov 2021 15:10:24 +0000
asID:                     18530
IP address blocks:        79.174.8.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:cc:db:22:72:e7:da:70:da:1a:b1:63:12:d9:8f:9c:b2:08:5a:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Nov 27 15:05:24 2020 GMT
            Not After : Nov 26 15:10:24 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e8:d6:01:98:f9:99:87:50:30:e3:1c:42:5d:
                    01:1c:40:83:8e:6e:e3:e6:aa:cd:62:32:23:5d:60:
                    f2:44:6d:fe:90:b3:14:69:75:44:ed:ec:6d:68:8f:
                    24:14:6b:70:6e:30:44:04:61:a3:4b:e6:c5:17:e7:
                    17:b4:77:c4:07:3e:50:a8:e3:77:b1:eb:6b:2f:e3:
                    0f:f0:f6:77:82:8c:6e:2b:06:a1:f1:de:72:11:c3:
                    3d:ee:f4:2f:9e:71:c4:bf:46:c6:c0:5a:67:1b:2e:
                    56:c4:2d:f1:a5:f8:82:db:1d:9a:da:98:13:17:c7:
                    83:d7:42:85:c7:0c:80:0b:ea:10:32:07:79:62:bb:
                    25:cb:14:16:3b:a7:07:b4:b5:af:a2:ff:c7:ab:2a:
                    13:90:5c:f6:c8:5d:26:8f:86:74:96:08:44:a2:ca:
                    2f:27:c1:9f:77:3e:ab:54:47:db:7b:81:73:31:70:
                    25:f0:bb:40:7c:52:5a:b5:3f:c4:2b:23:27:72:4f:
                    ba:6e:7d:a0:94:c0:5d:41:dd:b5:86:4f:c0:9a:d6:
                    f3:3a:5c:3d:6c:87:d6:8f:98:be:c1:e6:f0:0c:e8:
                    63:95:45:87:93:3e:eb:ba:7d:30:c4:0f:53:97:59:
                    41:55:93:8c:40:7f:d1:0b:b6:84:98:3c:a7:44:ff:
                    1f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:DE:14:AD:B7:2A:4E:80:93:02:D9:A3:D8:78:D3:0F:DE:2F:34:46
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/37392e3137342e382e302f32322d3232203d3e203138353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.174.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:75:64:e1:19:d2:6c:88:3f:4b:1c:1b:ab:30:1a:98:37:a8:
         ff:92:bc:7c:cb:77:5b:4d:fc:b5:3d:98:f8:7c:55:6e:60:e8:
         98:95:d1:29:a1:bf:d4:22:47:e8:76:73:cf:55:7b:61:8d:64:
         cb:09:de:83:ac:7c:d0:2c:21:0d:1e:0d:02:89:2a:e5:a4:c9:
         e9:ef:96:9e:a0:a6:79:3c:a6:e1:5e:64:b3:54:d5:a4:fa:49:
         e5:64:bf:b1:54:56:a4:16:dc:93:98:1c:48:af:90:41:9c:d8:
         53:a2:6c:49:12:09:cf:4b:d3:de:bf:cb:55:76:55:a9:fb:e5:
         16:14:9e:01:06:01:de:f6:11:ac:97:14:a5:84:cc:40:96:99:
         bc:e2:c6:76:8f:61:15:e4:76:f2:2a:a1:40:61:17:c4:b5:8b:
         fc:26:92:5c:57:1f:8d:e4:51:fc:52:65:88:d2:76:9e:07:71:
         4c:27:0e:09:3c:11:23:c4:d6:b8:2a:f0:62:a8:16:f9:e8:db:
         46:d7:fa:0d:14:66:6a:7b:7a:5a:56:1f:a8:49:fe:ad:26:a1:
         a0:0a:fd:6e:54:97:99:fb:e6:ca:2e:2e:32:e2:f6:0d:ed:7b:
         42:00:63:a8:b0:39:c2:6e:21:90:6a:ab:21:ab:8f:1b:c4:3a:
         af:b0:3a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----