Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139372e3234382e302f32342d3234203d3e203631333137.roa
File:                     3138352e3139372e3234382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          RsQPiHu7ZArA/TQhP3VDjCOl5eJByKZNILWfYisnuz0=
Subject key identifier:   93:31:F6:CC:8F:F8:BC:78:8F:02:62:A0:E5:4E:40:B6:97:B9:BF:DA
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       303B306BCB974F7970FB226F20283C55CD8C670A
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139372e3234382e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 27 Nov 2020 15:10:31 +0000
ROA not before:           Fri 27 Nov 2020 15:05:31 +0000
ROA not after:            Fri 26 Nov 2021 15:10:31 +0000
asID:                     61317
IP address blocks:        185.197.248.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:3b:30:6b:cb:97:4f:79:70:fb:22:6f:20:28:3c:55:cd:8c:67:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 27 15:05:31 2020 GMT
            Not After : Nov 26 15:10:31 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cb:bd:30:67:fc:d4:33:eb:1e:11:3d:68:38:
                    bf:18:6e:83:f8:8e:f8:a4:35:34:d7:7e:15:4a:c3:
                    66:28:b5:44:aa:bd:69:ec:f6:10:89:e4:28:82:8a:
                    67:d1:7f:6d:ed:be:43:ef:22:30:b6:f0:44:3b:7a:
                    78:84:13:71:22:fe:70:4d:db:2e:bb:aa:c6:31:9e:
                    06:95:cc:af:8d:d0:e7:5f:8b:ba:b8:fe:75:b4:b2:
                    59:a5:6b:f0:fc:af:66:35:ce:ec:05:33:5d:54:92:
                    8a:c6:f4:c2:8c:b7:55:5d:81:88:fb:17:7d:87:6a:
                    7a:72:a7:98:c7:ea:fb:e8:90:1f:cd:d8:49:f7:27:
                    0c:92:c2:30:05:2a:8c:7c:e8:72:66:d5:e4:0a:76:
                    ff:35:67:4f:fd:b2:ba:01:69:10:3d:8c:35:06:a7:
                    15:93:a7:41:c4:26:a1:ba:75:6d:3e:c7:de:69:a8:
                    e2:3a:1a:50:91:31:f8:bb:a6:49:29:c7:b4:90:48:
                    2b:d9:65:43:61:cd:eb:24:c2:41:f9:84:ea:9d:80:
                    fb:fb:de:af:41:5e:90:fd:af:1b:3d:b6:19:45:ab:
                    75:a7:d5:70:f8:30:94:70:20:7c:bc:f8:04:ed:40:
                    ca:68:e7:8c:f5:39:51:ee:18:13:49:8b:7c:58:73:
                    57:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:31:F6:CC:8F:F8:BC:78:8F:02:62:A0:E5:4E:40:B6:97:B9:BF:DA
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139372e3234382e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.197.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:c7:c2:58:8b:4b:8d:56:62:17:a5:7e:f2:cb:a6:ed:85:e8:
         f4:f6:ef:a6:52:a3:d0:85:68:79:85:02:73:73:c0:6f:4c:e9:
         4f:fb:19:b3:24:a0:97:6f:cd:2f:ed:1a:86:9e:1d:27:b4:b8:
         0e:e4:0f:97:2a:b5:e9:cc:16:b7:42:b3:3f:0c:07:4d:e9:f7:
         97:e7:b3:5e:b1:19:b4:4a:fc:85:8e:8d:90:45:e6:24:a0:38:
         7c:fc:32:c5:1a:1d:5c:a4:a3:76:61:5b:ab:4d:8f:8e:42:90:
         d0:11:16:f8:e7:25:62:db:83:20:b6:45:42:ad:61:0f:1e:48:
         5f:bc:80:34:61:af:b4:57:a3:c0:17:38:27:f7:5d:b6:2e:29:
         7c:94:47:24:b6:1f:38:a1:b5:7c:29:20:36:ea:cd:87:df:94:
         24:cb:34:43:38:23:a5:bf:86:47:f7:b2:38:6d:b5:21:da:19:
         ab:5b:8b:81:03:07:f8:d6:53:42:a3:ae:9b:68:f7:d3:0d:f0:
         cd:ca:d4:3e:63:4e:b2:60:4c:8b:1a:54:fe:16:97:d7:69:f1:
         a5:41:38:27:22:79:fd:c1:de:50:53:8a:48:24:ae:73:58:28:
         ae:59:21:9a:0c:cb:a3:af:b2:7e:17:a7:07:e5:1e:01:a6:07:
         3f:f3:02:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----