Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230352e3234342e302f32342d3234203d3e203631333137.roa
File:                     3138352e3230352e3234342e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          jHwQPME7KzX1mSbexKeFSeS/n0/WWr126+Ci8KgriH4=
Subject key identifier:   A2:DC:CE:24:42:88:4D:21:68:E3:A2:10:0A:8E:E8:E7:52:60:16:69
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       718636C89531A87D71E5D54C98329B8995FA8F9C
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230352e3234342e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 29 Oct 2021 16:00:12 +0000
ROA not before:           Fri 29 Oct 2021 15:55:12 +0000
ROA not after:            Fri 28 Oct 2022 16:00:12 +0000
asID:                     61317
IP address blocks:        185.205.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:86:36:c8:95:31:a8:7d:71:e5:d5:4c:98:32:9b:89:95:fa:8f:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 29 15:55:12 2021 GMT
            Not After : Oct 28 16:00:12 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:38:ce:cc:e8:4f:d3:d7:a4:04:8b:82:b8:81:
                    60:2f:2b:a1:92:03:6e:f2:00:57:91:17:99:9a:43:
                    f4:de:00:bf:a7:9f:38:7d:a2:1d:97:49:c3:78:c5:
                    6f:82:3a:93:b6:f1:ea:b6:97:cf:77:bc:05:24:db:
                    a5:e8:c9:80:15:7e:fc:9d:7b:ab:b1:c1:b6:78:04:
                    2a:ab:e9:80:d7:e0:4a:c8:84:46:57:fa:1e:81:e6:
                    d2:90:36:79:65:20:4b:db:45:87:9c:ff:ef:46:5b:
                    f8:20:65:d7:7e:72:f6:3f:6f:82:01:94:ad:1b:67:
                    27:87:ac:15:9e:6a:ea:1a:1e:b3:22:97:af:ab:f6:
                    a8:ac:29:84:f2:37:ad:42:7e:2f:b4:52:54:81:15:
                    d8:d0:86:22:0e:cb:69:f1:f5:7a:5d:1f:a2:a7:e2:
                    3c:de:4a:fc:3f:16:92:2c:4e:2d:18:0c:8c:40:8e:
                    52:ad:b8:4c:98:1a:6c:61:d5:70:a5:b5:7e:37:ca:
                    5c:05:9a:6b:6a:64:9a:b2:48:ee:ab:7e:a8:5a:b2:
                    7e:7f:4c:ba:a3:f6:36:77:17:f3:b2:c5:45:1b:a8:
                    69:02:53:4e:d5:84:00:25:88:8f:02:86:b6:a3:e5:
                    6b:8c:36:e7:c6:e3:05:2f:41:5a:c1:7f:f5:b3:ba:
                    da:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:DC:CE:24:42:88:4D:21:68:E3:A2:10:0A:8E:E8:E7:52:60:16:69
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230352e3234342e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.205.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:fc:b7:d9:5a:51:ba:34:93:20:66:2a:ad:38:26:a4:e1:0d:
         ce:19:25:92:fe:68:f5:d0:99:f6:e1:f5:ef:e6:c0:63:7c:27:
         1a:f5:f2:3f:d2:81:8d:0e:35:ff:9d:d6:9c:76:68:7b:0d:e2:
         f1:49:c9:82:c6:8d:d1:3d:7d:ee:27:52:d4:33:50:21:30:ae:
         da:e3:bd:a4:d8:31:b8:e4:50:18:de:7c:f3:f3:52:ea:7b:11:
         aa:b4:ff:a1:25:8d:4b:55:ab:41:89:5f:54:d2:99:b8:7b:e3:
         5b:60:12:27:fa:d6:d7:77:b4:3a:75:5d:af:55:a6:2a:f7:4d:
         22:d3:dc:4e:87:0f:bb:a0:07:0b:4b:f5:f0:1d:0c:be:b3:b6:
         3a:de:db:60:3e:93:e8:3d:d7:46:13:69:89:c0:86:7a:b5:d6:
         da:78:10:81:6c:33:3b:bb:c4:ef:39:fd:b2:2d:dd:47:df:6f:
         78:9e:97:89:92:40:27:51:88:1e:94:44:35:b9:99:6a:f1:dd:
         db:44:c7:4c:56:ba:e1:9a:c9:03:6d:74:e2:6b:10:54:1e:2c:
         ce:5e:7f:1b:05:6f:38:f8:7a:62:d6:5a:58:4e:5d:1a:ea:40:
         18:06:54:16:89:9a:9c:51:bf:3a:4f:00:15:bf:ff:da:a7:c0:
         40:5b:7c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----