Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231342e39392e302f32342d3234203d3e203630373231.roa
File:                     3138352e3231342e39392e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          jCwP2U9PNAcazdB7/x72DEQ9FFgw2k5OxdP8wHkEkIg=
Subject key identifier:   46:FE:95:C9:76:D0:54:0E:39:29:F2:EB:E9:50:E2:6A:DE:0A:25:5B
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       5859C9AA661C3246EA5AA38CF220AA7A9504892F
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231342e39392e302f32342d3234203d3e203630373231.roa
Signing time:             Fri 27 Nov 2020 15:10:35 +0000
ROA not before:           Fri 27 Nov 2020 15:05:35 +0000
ROA not after:            Fri 26 Nov 2021 15:10:35 +0000
asID:                     60721
IP address blocks:        185.214.99.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:59:c9:aa:66:1c:32:46:ea:5a:a3:8c:f2:20:aa:7a:95:04:89:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 27 15:05:35 2020 GMT
            Not After : Nov 26 15:10:35 2021 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7a:b7:86:e7:36:7d:92:05:9b:bb:0e:86:56:
                    4e:ba:81:f1:ce:30:f3:26:91:04:50:0a:39:6c:15:
                    12:55:3b:b7:b6:0f:8b:57:67:77:10:99:82:1c:4a:
                    d2:a5:61:73:9e:83:22:c4:1c:9c:0d:85:0e:d2:91:
                    97:aa:6a:54:98:75:08:54:38:d4:ed:f2:6f:9a:90:
                    64:08:ce:1c:62:0a:21:0e:98:74:8a:3a:19:e9:08:
                    d3:b4:92:29:85:bc:e3:83:62:64:53:a9:51:91:c7:
                    87:0b:ad:4d:57:19:63:2e:e8:0b:98:a6:07:c4:25:
                    96:c1:c7:54:00:4c:70:70:70:00:44:c5:6a:97:f0:
                    55:14:01:ba:9e:56:f4:6d:e7:c7:c3:14:32:54:84:
                    4f:82:55:3f:c0:88:d7:41:a1:5f:17:53:de:90:6e:
                    c8:88:11:83:54:b2:7a:f2:ac:c7:71:03:6f:42:7d:
                    3e:91:96:5c:c5:f8:55:3b:82:e8:b5:03:ac:85:00:
                    89:9a:21:e3:a5:98:60:19:cc:00:db:5a:f4:03:26:
                    8e:0a:a2:1f:03:f5:00:54:e3:20:62:c6:7f:7d:59:
                    d6:e3:72:69:24:a5:c1:90:5f:e1:04:d6:92:e3:81:
                    45:f6:d8:61:31:39:c8:5f:76:82:c1:24:89:c1:ba:
                    18:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FE:95:C9:76:D0:54:0E:39:29:F2:EB:E9:50:E2:6A:DE:0A:25:5B
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231342e39392e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.214.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:d0:10:71:b9:75:1d:9c:84:f7:97:c8:32:37:4f:ff:3e:32:
         d3:ab:90:c4:80:3f:d1:90:3f:32:26:34:c5:30:6b:e2:bf:2f:
         79:6e:49:1d:ac:18:14:32:5e:5a:fb:9c:e9:64:82:32:aa:3a:
         60:fb:1e:e6:ad:1c:9d:33:fe:76:cb:2a:a2:10:ed:b5:14:e4:
         99:cb:49:b3:35:54:7b:2c:bd:6a:51:34:34:04:c4:02:6c:f2:
         5c:ac:b7:85:b4:88:01:9b:ca:1b:28:4e:80:28:8e:5f:0b:75:
         a8:48:6a:bd:fc:df:3e:0a:08:a3:29:0a:9e:d7:33:b9:a0:11:
         19:d8:aa:61:5c:b5:2d:4b:04:ef:2e:15:6b:89:58:c6:ab:e8:
         56:3b:ae:12:1a:60:a3:0f:0f:95:0b:1c:42:b0:d5:30:50:b0:
         22:0b:1f:c8:19:6b:52:7f:c7:52:ae:39:5a:0c:ab:98:26:97:
         2d:f3:03:72:03:21:ed:8d:30:2e:0b:2a:8d:eb:d1:99:37:1f:
         ef:45:40:bd:52:d2:8f:f4:a9:0f:3b:90:56:35:db:5c:6d:06:
         4c:c9:e6:08:29:77:7b:97:dd:32:ed:58:93:a9:df:56:ca:65:
         05:cc:b8:8c:00:34:64:83:c0:2b:01:68:87:90:4e:25:26:7e:
         1c:3c:9d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----