Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139352e38382e38362e302f32342d3234203d3e20323133303335.roa
File:                     3139352e38382e38362e302f32342d3234203d3e20323133303335.roa (raw, json)
Hash identifier:          kO+kw/eOGzJVGbeLUlf8T1VpUjA7XkbmthIwyatkSbI=
Subject key identifier:   F5:79:DD:FA:94:19:B1:FF:CB:DA:36:A6:64:AD:43:62:C3:B0:B4:F2
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       5BD8CCD14B453B9DD64F2075EDFA0BB800362177
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139352e38382e38362e302f32342d3234203d3e20323133303335.roa
Signing time:             Tue 29 Dec 2020 13:09:09 +0000
ROA not before:           Tue 29 Dec 2020 13:04:09 +0000
ROA not after:            Tue 28 Dec 2021 13:09:09 +0000
asID:                     213035
IP address blocks:        195.88.86.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d8:cc:d1:4b:45:3b:9d:d6:4f:20:75:ed:fa:0b:b8:00:36:21:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Dec 29 13:04:09 2020 GMT
            Not After : Dec 28 13:09:09 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e1:a9:ab:b5:0e:bc:72:4c:5c:58:52:be:b6:
                    72:7f:8a:03:1a:0b:8e:f6:64:31:c2:c9:d1:80:9d:
                    7e:20:fb:cc:31:a1:a2:43:09:c1:2a:ec:8e:ce:60:
                    0f:e0:fd:08:ba:3d:6b:7a:bb:f8:df:3f:79:d3:d5:
                    ba:4e:fc:ce:1c:02:28:01:2b:81:df:8e:2c:85:b4:
                    f0:ae:70:90:46:9e:78:c2:a6:57:40:1f:04:e2:e0:
                    2c:51:6f:46:91:7c:80:a1:2d:ac:7c:64:9b:ce:0b:
                    16:6d:60:7f:24:d9:83:f1:81:4c:7c:52:fb:cb:f4:
                    5d:99:3e:50:0e:4e:5a:d1:fb:2c:46:7b:3a:f2:9f:
                    40:ac:ac:7c:1c:70:52:0f:0f:0e:20:c4:51:59:ef:
                    03:17:ca:b2:f7:7a:bb:40:eb:42:e2:50:bd:2f:e1:
                    26:ef:d4:16:4a:62:72:f0:3d:90:2f:98:b7:2b:e1:
                    91:20:7a:97:6c:93:d2:d5:54:2e:b8:ca:7d:06:d5:
                    ca:2b:51:e4:2d:f5:6a:01:91:6b:ff:e0:0e:0b:76:
                    d4:1b:9e:9d:5e:3e:f6:bb:51:d2:f3:79:28:9f:2b:
                    d4:7b:82:5b:b3:77:bf:46:b1:0c:92:56:b2:9e:10:
                    43:2c:47:88:71:40:d8:f1:f8:76:9d:7e:dc:89:99:
                    d9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:79:DD:FA:94:19:B1:FF:CB:DA:36:A6:64:AD:43:62:C3:B0:B4:F2
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139352e38382e38362e302f32342d3234203d3e20323133303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.88.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:bf:19:fa:30:11:fc:73:ae:38:68:84:b1:d3:c2:8a:5c:bf:
         5a:64:fe:16:d3:3e:f6:3f:63:e6:13:eb:64:9a:62:63:ba:f6:
         79:39:94:6b:0d:f8:ac:b7:88:df:b3:17:47:ad:e1:d0:f7:13:
         f1:6b:24:33:9b:35:0f:f8:77:7b:4c:ba:6b:91:b9:bc:d4:f5:
         1b:a9:7c:97:36:f9:2a:f1:ac:b9:85:b3:42:56:0d:a5:83:2c:
         ee:a5:cf:90:c7:83:c4:a7:fe:6b:83:b8:f1:74:d8:77:87:b2:
         07:97:1f:b3:c7:ba:12:e8:b3:62:7a:8b:23:77:20:8a:bb:cb:
         f4:29:71:e3:8a:42:48:5d:97:9c:55:c6:2c:cf:30:76:b4:68:
         f4:87:d0:f5:6c:2f:02:96:f4:f5:12:39:f5:33:29:f3:97:c5:
         88:83:3c:49:33:f5:87:9f:e8:8e:f7:7b:ee:62:48:9f:e0:f6:
         f5:15:cd:8b:73:10:29:68:29:11:01:e1:ab:72:4e:d0:16:f8:
         33:e9:0a:cf:f4:f3:6b:e7:07:21:b1:4a:27:12:e9:97:d6:1f:
         70:bd:98:30:c9:cf:04:d7:e9:36:3f:5f:63:8e:06:f2:30:0f:
         62:43:5c:df:d9:2c:2d:d1:9a:2a:30:0a:ef:46:0c:e6:2f:11:
         7f:34:9e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----