Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/3139342e36312e32382e302f32342d3234203d3e20323132333832.roa
File:                     3139342e36312e32382e302f32342d3234203d3e20323132333832.roa (raw, json)
Hash identifier:          8fAfErKHp88v4fwuEsHSDZFlM8b82TvKg+deWsAX4AY=
Subject key identifier:   F5:06:D8:79:CF:D0:F4:2F:8C:88:E5:52:D7:79:A3:C6:BA:37:6B:76
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       3CFEBB45CB022BF0A257BD7EE3DB1E6A89860ADB
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/3139342e36312e32382e302f32342d3234203d3e20323132333832.roa
Signing time:             Fri 29 Oct 2021 16:00:09 +0000
ROA not before:           Fri 29 Oct 2021 15:55:09 +0000
ROA not after:            Fri 28 Oct 2022 16:00:09 +0000
asID:                     212382
IP address blocks:        194.61.28.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:fe:bb:45:cb:02:2b:f0:a2:57:bd:7e:e3:db:1e:6a:89:86:0a:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Oct 29 15:55:09 2021 GMT
            Not After : Oct 28 16:00:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:38:7f:2b:32:6e:7a:fd:eb:44:46:2e:df:e5:
                    45:46:3f:1f:74:0a:b1:3e:7d:00:bd:b4:bb:df:74:
                    61:69:00:4c:14:ba:b6:85:7c:ea:94:31:97:38:4b:
                    03:e1:26:b4:bd:38:d8:58:17:ca:1e:46:2a:01:56:
                    91:05:ac:00:26:f3:73:a7:85:91:8d:ee:a9:4a:71:
                    aa:e7:50:cf:5e:a5:f6:e7:d3:e1:39:b3:69:e6:e1:
                    b0:5e:bf:02:c2:65:13:6e:c8:ef:c9:5a:82:4f:08:
                    09:07:71:48:ff:48:37:4a:a8:6f:52:5a:65:a2:22:
                    c2:a4:27:d9:97:fd:bb:89:24:ab:b5:50:f0:64:7c:
                    cb:8f:c0:db:b9:e9:b5:a9:fb:4f:dd:c1:cf:bb:ee:
                    f3:6e:e2:66:d2:98:68:42:58:4a:a9:d7:20:55:d5:
                    53:41:7c:e4:b1:85:a4:95:9f:b1:b3:81:c1:41:18:
                    f9:6c:01:6e:eb:7c:46:b7:25:27:c2:6c:6f:a5:8f:
                    93:44:47:49:ee:36:e0:11:36:27:f8:58:58:c8:f6:
                    8d:6b:51:06:d8:1e:90:f1:13:a3:6b:c3:9a:18:25:
                    2a:dc:bf:c4:99:1d:91:76:5a:36:a8:88:7a:93:86:
                    98:70:af:8c:ae:89:32:cd:fc:7d:bd:e7:ca:96:34:
                    b3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:06:D8:79:CF:D0:F4:2F:8C:88:E5:52:D7:79:A3:C6:BA:37:6B:76
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/3139342e36312e32382e302f32342d3234203d3e20323132333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.61.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:93:6f:33:7a:87:7d:7d:54:f1:70:01:65:72:ba:fd:ad:06:
         51:b0:fb:b7:ac:7a:28:ab:e8:a3:f1:16:51:5d:c4:e2:b9:ab:
         d5:1a:d2:31:16:8e:73:93:7a:bf:39:c8:5c:ee:11:a9:0b:4d:
         bd:e8:54:bb:40:6f:5c:b3:c6:ec:c6:5b:e4:e9:b7:35:63:fa:
         b2:0c:cd:35:a4:64:fe:33:89:e2:ba:f0:ae:30:e0:d2:3c:2c:
         bd:82:fc:06:a7:8d:1b:3e:4d:95:5f:d0:5c:14:92:b8:4a:4a:
         af:4d:0b:f5:3b:75:b0:2c:52:74:c2:11:b2:8a:a6:a2:9a:9e:
         38:37:1b:19:12:2a:70:86:b8:e6:f2:16:86:a5:9a:12:2f:4a:
         b8:cb:e0:d9:fc:cd:4c:9c:85:49:a0:3f:68:18:1c:55:d8:26:
         ec:b9:9f:c9:1c:fc:bc:3f:32:6e:5a:6e:99:ed:ac:fb:62:71:
         8b:da:ef:f9:90:48:3e:26:20:6b:8a:3e:8e:d6:5e:e9:e0:c4:
         5b:9f:4c:1b:ed:08:86:e6:21:7c:56:39:25:a7:57:cc:87:f6:
         1a:79:81:83:8b:98:8a:71:ae:46:4d:02:30:9c:43:2a:68:e3:
         ce:eb:dc:8d:e2:13:d9:97:1c:18:81:99:5a:d7:4e:f7:f4:53:
         2f:0a:ce:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----