Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/3139332e3134382e37322e302f32342d3234203d3e203631333137.roa
File:                     3139332e3134382e37322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          jdx1ivSB4z7yslbhQlHFZ46ElwLgSh89Q01q6ZgszPM=
Subject key identifier:   5E:52:83:6E:C2:F5:02:C4:36:35:41:AC:E8:32:39:91:6E:CC:66:0F
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       376C454B76E089D5D818A031B7DC0B1A3E3CCE6C
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/3139332e3134382e37322e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 18 Dec 2020 08:57:41 +0000
ROA not before:           Fri 18 Dec 2020 08:52:41 +0000
ROA not after:            Fri 17 Dec 2021 08:57:41 +0000
asID:                     61317
IP address blocks:        193.148.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:6c:45:4b:76:e0:89:d5:d8:18:a0:31:b7:dc:0b:1a:3e:3c:ce:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Dec 18 08:52:41 2020 GMT
            Not After : Dec 17 08:57:41 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:52:45:30:57:b1:15:9a:59:7a:92:a0:00:fd:
                    c2:c8:26:a2:23:6f:32:c1:23:59:6f:01:6f:b0:87:
                    a3:65:cd:82:ff:ef:b8:a9:6d:c1:26:04:da:86:e6:
                    ab:a8:c5:b4:9a:25:a7:b0:0e:fa:c3:c5:d0:bc:6f:
                    4d:e5:22:37:0e:14:af:28:d7:ee:c7:88:eb:b5:9a:
                    6a:b3:8d:85:f1:6c:90:29:20:1c:04:5e:e6:f6:f2:
                    d3:d6:af:dd:e9:ad:71:d5:5b:88:8b:60:bd:e6:9d:
                    ae:0c:bf:67:b9:d3:d8:8d:51:a5:75:74:89:b4:02:
                    67:ea:ce:eb:97:dc:75:84:d2:37:94:73:1f:42:b6:
                    11:8f:e0:3d:8e:af:86:61:91:0f:aa:51:1c:50:01:
                    20:f8:cd:e1:cd:20:2b:65:74:a6:b8:63:c2:5f:78:
                    cd:9d:b0:87:ca:fe:a2:3b:f2:9f:a1:a5:67:2e:9e:
                    b1:52:e5:bb:6c:85:c3:6d:9b:f1:ca:7c:2a:8d:44:
                    90:b6:a4:da:25:21:55:1d:93:a5:fa:d8:07:d1:3c:
                    8a:a4:10:c0:89:37:fc:10:8e:f2:55:b7:be:fa:36:
                    c8:6a:a7:f9:31:3b:3e:81:8d:bc:71:68:40:29:10:
                    54:75:e1:ab:5f:03:27:fa:47:e4:a1:3d:8e:2c:6c:
                    41:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:52:83:6E:C2:F5:02:C4:36:35:41:AC:E8:32:39:91:6E:CC:66:0F
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/3139332e3134382e37322e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.148.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:16:67:8c:21:f9:82:03:cd:15:79:d7:67:9b:ce:36:b0:ad:
         82:d5:5d:91:04:c7:89:cd:2d:90:c2:11:0e:70:e2:5a:91:94:
         07:86:db:e5:cc:94:17:e6:a7:a0:46:70:16:42:4b:df:c6:84:
         06:30:be:16:a2:86:99:f0:64:bb:98:c7:94:fc:b2:a3:ff:0c:
         d2:2b:6a:21:1a:9c:82:e9:3e:8f:4e:97:fb:f1:3d:e1:21:be:
         13:fc:54:e4:2b:21:a9:48:67:e4:28:40:c6:64:da:eb:75:28:
         d8:9b:5e:97:39:c6:6f:8e:4a:50:c7:29:ad:fc:f9:c4:06:8c:
         d1:6b:d1:2f:de:f8:5d:28:d5:21:04:48:f3:26:b8:75:e5:b3:
         2d:d5:e1:ac:06:e0:dc:08:8d:4a:7c:d5:39:91:d5:31:0c:10:
         78:4b:03:18:49:c4:8d:6b:08:34:d6:5d:69:95:8e:fa:18:a4:
         4d:69:88:8a:5d:60:12:42:d3:85:f1:d4:cc:bb:82:4b:3c:37:
         10:d1:2d:56:c4:54:37:26:44:8c:53:04:5b:b1:be:a3:d9:af:
         03:c8:dd:c8:7a:6a:83:5e:7d:2c:53:0d:48:4d:a4:35:de:3a:
         91:59:14:01:d1:44:bf:2f:77:d8:4e:05:ef:bd:e5:15:8b:cf:
         ae:51:26:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----