Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3231312e33332e302f32342d3234203d3e20323132323331.roa
File:                     3138352e3231312e33332e302f32342d3234203d3e20323132323331.roa (raw, json)
Hash identifier:          wbCOeX4NKqVxG8bI5A6KBN8vVaojsAyHkMwUTAKDasA=
Subject key identifier:   92:6D:1B:5F:48:30:91:7C:29:C2:3F:EA:47:CF:97:FA:57:D5:05:4F
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       1B1CBBDF48B8E6046CF96BD92B4ED727CE36E07D
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3231312e33332e302f32342d3234203d3e20323132323331.roa
Signing time:             Sun 27 Dec 2020 21:07:55 +0000
ROA not before:           Sun 27 Dec 2020 21:02:55 +0000
ROA not after:            Sun 26 Dec 2021 21:07:55 +0000
asID:                     212231
IP address blocks:        185.211.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:1c:bb:df:48:b8:e6:04:6c:f9:6b:d9:2b:4e:d7:27:ce:36:e0:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Dec 27 21:02:55 2020 GMT
            Not After : Dec 26 21:07:55 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5e:5b:76:d3:f5:17:60:99:d4:35:b2:b5:af:
                    07:16:9d:89:c3:d7:ab:2d:a9:78:9f:57:c2:35:ff:
                    85:16:80:d3:88:3e:82:28:b6:b0:50:a8:1f:8a:c3:
                    60:21:c4:48:60:07:59:1e:ea:f7:68:26:d1:0b:1d:
                    53:fa:8c:ec:b2:18:13:8a:6f:d6:04:e8:00:04:33:
                    f3:a6:cc:bc:26:33:c8:37:da:e1:e2:07:05:bf:c5:
                    36:d3:4a:79:57:02:03:6f:fe:9a:97:68:cb:47:7e:
                    ad:89:62:a3:dc:c2:64:4f:08:69:5b:09:a7:26:28:
                    9f:42:42:62:0d:8c:58:a3:e0:04:48:25:47:ab:d0:
                    0a:b3:67:7d:32:38:ec:71:2e:46:3c:29:1c:3d:39:
                    5f:f4:2c:67:02:89:44:ce:4f:24:4f:15:a2:7e:5d:
                    46:9f:1e:b4:84:e4:57:ef:98:dc:fe:9a:7c:33:0b:
                    ed:a6:b1:60:5b:02:82:07:7a:a9:53:c8:22:54:3e:
                    b6:16:b0:dc:06:e8:a2:b6:32:16:8c:10:07:e2:26:
                    d4:d9:62:e1:5d:ed:9d:e6:5a:a4:cd:19:ed:74:f6:
                    a4:9f:70:6f:c5:88:a8:ca:41:bf:64:ca:7f:d0:38:
                    d6:92:63:e6:77:cf:1c:4a:13:8d:57:15:52:7c:14:
                    c0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:6D:1B:5F:48:30:91:7C:29:C2:3F:EA:47:CF:97:FA:57:D5:05:4F
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3231312e33332e302f32342d3234203d3e20323132323331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.211.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:5f:6b:31:e0:c4:07:3e:3e:c9:7f:8f:55:12:71:ae:af:04:
         0b:fd:1e:91:a3:e9:b9:ff:90:18:5f:d3:b7:ed:41:ec:4a:9c:
         30:37:ef:bb:c2:97:7f:94:d0:85:3f:82:8e:45:a4:8a:48:a1:
         c9:ab:6d:3e:f8:c1:10:90:f9:72:f0:03:fc:8e:cc:9d:67:06:
         90:05:48:eb:04:24:e2:07:c8:01:41:2b:5f:4c:2e:f8:43:3d:
         6f:e1:aa:60:98:c0:52:e9:fe:bd:bc:cf:ab:2f:a4:c5:d1:b5:
         6d:3b:a0:52:de:2a:01:62:4a:bc:d7:57:a2:a6:d3:3c:60:af:
         a1:43:d2:03:e0:18:5c:59:21:c0:a4:48:97:80:a3:4f:1d:eb:
         73:34:8c:ca:61:86:aa:00:86:e4:55:6d:43:cc:f4:7f:d3:9f:
         21:f3:25:c4:d7:9b:93:da:9f:ec:bf:19:1a:51:a7:9e:29:09:
         4d:99:3b:c9:02:f7:13:36:f9:d7:b8:79:00:48:88:d3:a7:ea:
         84:82:2a:8c:14:9e:08:38:95:3f:e3:d1:29:89:87:fe:02:bb:
         47:7a:a8:c5:e3:63:73:bc:37:ad:6e:bb:5b:09:1f:b5:dc:32:
         83:bb:d2:e4:6d:4e:20:4e:b3:59:f8:90:e6:c8:69:63:74:3a:
         55:ba:b2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----