Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/99/39312e3233302e3131302e302f32342d3234203d3e20323132373434.roa
File:                     39312e3233302e3131302e302f32342d3234203d3e20323132373434.roa (raw, json)
Hash identifier:          fkWjr7w+RsNKJZps2uo21AkJpHllEp+lo+MNWJzeMSE=
Subject key identifier:   35:29:8B:5D:05:F8:2B:EA:E5:DF:6D:74:BA:7E:AE:1C:9D:EE:A9:1D
Certificate issuer:       /CN=aac035144ef01fea05cb97862c36968f2f74b711
Certificate serial:       4229BED0FDA4B23681AE379207B724E45DF4D78D
Authority key identifier: AA:C0:35:14:4E:F0:1F:EA:05:CB:97:86:2C:36:96:8F:2F:74:B7:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qsA1FE7wH-oFy5eGLDaWjy90txE.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/99/39312e3233302e3131302e302f32342d3234203d3e20323132373434.roa
Signing time:             Sat 23 Jan 2021 12:50:40 +0000
ROA not before:           Sat 23 Jan 2021 12:45:40 +0000
ROA not after:            Sat 22 Jan 2022 12:50:40 +0000
asID:                     212744
IP address blocks:        91.230.110.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:29:be:d0:fd:a4:b2:36:81:ae:37:92:07:b7:24:e4:5d:f4:d7:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac035144ef01fea05cb97862c36968f2f74b711
        Validity
            Not Before: Jan 23 12:45:40 2021 GMT
            Not After : Jan 22 12:50:40 2022 GMT
        Subject: CN=3082010A0282010100F9700429FEF6491D32D53586783EAAEB67D7BBBD24B2AE20CF2BBCE306DA86A9D75D6A2C714D4B797E26B33747A08B6E54C46F76CA4CC76E1AC151DD3A15380D91548F2D6AF4B10DE05BB29ED767F12519DC9CFF3B2D875699316F131579E16CB7C247764B28D13D3AC8FA6104C2A8BD2E90B6D0F8E2B93814EDAFD90ADA8DC94BAF57248D8A3D6C93DD2FC968208812167FDAF51536350B379CE43E220228981E96123ACABEA12A42B20506BCECB7E85CF837220AE5340FF8B68DA3BFF1144B70928CFEB15B6CF34B4AD48FB760D8365AFACC7B56DBABA88CC592920F78DE1A99BEF60E8D89C4276BFA0E25F6757A76AC93A6B50C9853032D9D3EF4B927CEF30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:70:04:29:fe:f6:49:1d:32:d5:35:86:78:3e:
                    aa:eb:67:d7:bb:bd:24:b2:ae:20:cf:2b:bc:e3:06:
                    da:86:a9:d7:5d:6a:2c:71:4d:4b:79:7e:26:b3:37:
                    47:a0:8b:6e:54:c4:6f:76:ca:4c:c7:6e:1a:c1:51:
                    dd:3a:15:38:0d:91:54:8f:2d:6a:f4:b1:0d:e0:5b:
                    b2:9e:d7:67:f1:25:19:dc:9c:ff:3b:2d:87:56:99:
                    31:6f:13:15:79:e1:6c:b7:c2:47:76:4b:28:d1:3d:
                    3a:c8:fa:61:04:c2:a8:bd:2e:90:b6:d0:f8:e2:b9:
                    38:14:ed:af:d9:0a:da:8d:c9:4b:af:57:24:8d:8a:
                    3d:6c:93:dd:2f:c9:68:20:88:12:16:7f:da:f5:15:
                    36:35:0b:37:9c:e4:3e:22:02:28:98:1e:96:12:3a:
                    ca:be:a1:2a:42:b2:05:06:bc:ec:b7:e8:5c:f8:37:
                    22:0a:e5:34:0f:f8:b6:8d:a3:bf:f1:14:4b:70:92:
                    8c:fe:b1:5b:6c:f3:4b:4a:d4:8f:b7:60:d8:36:5a:
                    fa:cc:7b:56:db:ab:a8:8c:c5:92:92:0f:78:de:1a:
                    99:be:f6:0e:8d:89:c4:27:6b:fa:0e:25:f6:75:7a:
                    76:ac:93:a6:b5:0c:98:53:03:2d:9d:3e:f4:b9:27:
                    ce:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:29:8B:5D:05:F8:2B:EA:E5:DF:6D:74:BA:7E:AE:1C:9D:EE:A9:1D
            X509v3 Authority Key Identifier:
                keyid:AA:C0:35:14:4E:F0:1F:EA:05:CB:97:86:2C:36:96:8F:2F:74:B7:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/99/AAC035144EF01FEA05CB97862C36968F2F74B711.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsA1FE7wH-oFy5eGLDaWjy90txE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/99/39312e3233302e3131302e302f32342d3234203d3e20323132373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.230.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:a2:51:69:8f:7c:bc:11:10:3c:45:0b:53:34:ba:2a:5a:92:
         3c:17:2b:5a:49:ec:9c:83:62:15:96:71:b8:7c:f5:4f:88:66:
         10:7f:b9:3f:d8:a9:7d:5b:c8:8b:dd:ad:e2:36:fc:3e:3b:01:
         f9:2d:bf:4b:71:f0:55:a1:99:81:15:2f:89:87:03:6d:4a:5b:
         47:d2:b9:ba:57:0c:2c:28:35:43:be:fa:14:53:3e:ec:e2:e4:
         f4:96:53:07:57:28:04:8b:ed:b0:2d:3e:41:e5:d6:19:93:4a:
         34:ed:81:2e:b4:09:44:72:11:e7:1c:b3:a9:64:f2:57:21:c2:
         0d:fe:f6:41:4a:9c:01:20:0c:c1:2c:7c:56:dd:8f:b7:f6:59:
         6d:45:ce:b7:4e:bd:be:d9:b5:a1:a2:bb:37:58:df:14:c1:cf:
         5b:29:da:ab:47:5b:f4:52:1d:a6:f6:3a:f4:f0:81:2b:76:b6:
         0b:6a:c0:a1:0d:0e:d7:94:aa:10:e5:8b:57:12:23:08:a1:a0:
         45:ba:ab:b5:42:7a:a2:aa:98:de:dc:aa:18:82:bc:b1:bc:83:
         d3:a0:66:27:5a:85:6e:cc:2c:db:f8:b3:dc:1b:25:51:4e:9a:
         02:1f:4f:92:45:86:01:24:a5:1c:d2:bf:9a:79:74:5d:63:e5:
         4a:6a:9e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----