Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3136302e3233382e33382e302f32342d3234203d3e203631333137.roa
File:                     3136302e3233382e33382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          JqtOWaEJQ8AI+gKl7YVkj4rfbcgSTILvdZjCfHI6TVg=
Subject key identifier:   3C:88:04:07:76:D7:5A:8F:2B:DB:57:5C:06:A9:0F:51:99:5B:B0:EF
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       05CB934E1A68C0D0469D7B6032313C0622368F61
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3136302e3233382e33382e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 27 Nov 2020 15:10:22 +0000
ROA not before:           Fri 27 Nov 2020 15:05:22 +0000
ROA not after:            Fri 26 Nov 2021 15:10:22 +0000
asID:                     61317
IP address blocks:        160.238.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:cb:93:4e:1a:68:c0:d0:46:9d:7b:60:32:31:3c:06:22:36:8f:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Nov 27 15:05:22 2020 GMT
            Not After : Nov 26 15:10:22 2021 GMT
        Subject: CN=3082010A0282010100CB8AB7BF1EAB635DA78233A3CB58914FDE36B4A300CD7D35DAB14BFFA8478B226764598D2D35FE79F7071D30BEF8D38591EB1D882B3836617350CDD331D6806EE2D8549EB7948C1E414CA79F447B154B66CAB18AA93E85629DA0746A45F21497B6ED70DEA214AC15C0DCEC91E3A70A630E791092BE577CA7426FDD92B554F256C2D0A005FEEF73F880266E59DC3568319EB41F28D525D2C0767894D9433C455E833AAE17900BCE1CEDCEE02865FAC6F944A5D9E61CD14631E08BEC232FFAB180FD531426FE3786D1D6867B693C63DFC4F053056F75452B194CED63DB6576902E1BEC482AF508C9604AD161DE84515A323437D34D4618D97B2EC739C0DE0060450203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8a:b7:bf:1e:ab:63:5d:a7:82:33:a3:cb:58:
                    91:4f:de:36:b4:a3:00:cd:7d:35:da:b1:4b:ff:a8:
                    47:8b:22:67:64:59:8d:2d:35:fe:79:f7:07:1d:30:
                    be:f8:d3:85:91:eb:1d:88:2b:38:36:61:73:50:cd:
                    d3:31:d6:80:6e:e2:d8:54:9e:b7:94:8c:1e:41:4c:
                    a7:9f:44:7b:15:4b:66:ca:b1:8a:a9:3e:85:62:9d:
                    a0:74:6a:45:f2:14:97:b6:ed:70:de:a2:14:ac:15:
                    c0:dc:ec:91:e3:a7:0a:63:0e:79:10:92:be:57:7c:
                    a7:42:6f:dd:92:b5:54:f2:56:c2:d0:a0:05:fe:ef:
                    73:f8:80:26:6e:59:dc:35:68:31:9e:b4:1f:28:d5:
                    25:d2:c0:76:78:94:d9:43:3c:45:5e:83:3a:ae:17:
                    90:0b:ce:1c:ed:ce:e0:28:65:fa:c6:f9:44:a5:d9:
                    e6:1c:d1:46:31:e0:8b:ec:23:2f:fa:b1:80:fd:53:
                    14:26:fe:37:86:d1:d6:86:7b:69:3c:63:df:c4:f0:
                    53:05:6f:75:45:2b:19:4c:ed:63:db:65:76:90:2e:
                    1b:ec:48:2a:f5:08:c9:60:4a:d1:61:de:84:51:5a:
                    32:34:37:d3:4d:46:18:d9:7b:2e:c7:39:c0:de:00:
                    60:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:88:04:07:76:D7:5A:8F:2B:DB:57:5C:06:A9:0F:51:99:5B:B0:EF
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3136302e3233382e33382e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:6b:a6:46:ca:de:9e:8c:63:aa:e4:6f:fe:e7:54:56:93:92:
         16:15:a4:7f:f5:46:c5:f5:59:b3:62:87:ea:0a:4b:45:78:82:
         fd:5c:2b:9e:f9:e7:4d:05:9c:ae:71:32:b6:2e:30:a1:0e:68:
         48:79:63:83:40:2e:0d:03:3e:0c:ee:02:46:5a:dc:8e:ae:19:
         f9:e3:d3:15:b6:40:95:31:45:2d:08:12:89:2f:62:ee:40:db:
         f7:d2:ce:6d:13:59:1f:d8:ab:97:67:37:14:0a:9b:53:1d:d2:
         ab:28:c1:98:90:33:b5:27:bc:28:0d:4e:ae:e7:78:c0:48:3d:
         55:6e:a6:9c:88:73:cf:39:62:ee:77:8d:e0:68:ac:e9:ec:94:
         85:20:a8:66:04:a1:ea:bd:2e:e2:f7:51:ef:7f:dc:c8:ac:ac:
         b7:3d:85:6d:b0:11:73:80:c4:89:14:91:b2:5e:89:85:ae:3a:
         06:e9:d0:8e:3a:38:f6:f3:10:10:ec:40:36:e7:83:b1:3d:f0:
         bc:2e:38:60:28:d5:04:24:38:de:f8:d8:d7:ce:21:bf:0c:4a:
         17:e1:ae:99:bf:d0:b3:d8:29:bc:69:21:f2:2e:1a:1d:4f:fb:
         e4:66:d5:82:70:2e:6e:d6:60:2f:22:2b:22:92:16:e2:5e:a9:
         c5:1a:79:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----