Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37382e302f32342d3234203d3e203631333137.roa
File:                     33312e3138372e37382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          IIRxO96TJ9NjnjXKHfkes8CaJIr0HFakGB9+x8jmlgE=
Subject key identifier:   04:56:BF:34:C4:EA:08:4F:0D:60:5B:EF:1C:5F:94:FF:74:70:60:DA
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       3050533F7BE9F8DB0B61482C6AE9BA6E1E0D910F
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37382e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 27 Nov 2020 15:10:29 +0000
ROA not before:           Fri 27 Nov 2020 15:05:29 +0000
ROA not after:            Fri 26 Nov 2021 15:10:29 +0000
asID:                     61317
IP address blocks:        31.187.78.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:50:53:3f:7b:e9:f8:db:0b:61:48:2c:6a:e9:ba:6e:1e:0d:91:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 27 15:05:29 2020 GMT
            Not After : Nov 26 15:10:29 2021 GMT
        Subject: CN=3082010A0282010100B7243BB35E12C19F37DB6D9D943858B2FB8ECDEA37AB93F974E496B2297173B875FF9648E5478DAFDE1DD07F2E9C6D3236607102D0465385E8C3AE759092591EA5648A4D7796F35EC9767CC8C7B2A8E4A6402F918C7B10EC979C94F8CD40AB79E5C6D79753986FFAADD2702F6F08D5FF50A360A7643C43E3BB4E5563F7406136DEDA8E742BF62C59D4E4E99E7B1F64AB34FF530B31BF9C68B209DF0ECFEFCBCCF7EE63D9F24B7396ECEE3A5DB9A1562381AC8A969CDD051325E9ECAC47FA979DCA38478104EB22BE6F1D19FAA5C45FA99FEEB56F55BE2AA5047FB5374BD33D2951DF167FC695857E83EA135C9456C884BF222418BF4A674CD3184A7E2E54228B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:24:3b:b3:5e:12:c1:9f:37:db:6d:9d:94:38:
                    58:b2:fb:8e:cd:ea:37:ab:93:f9:74:e4:96:b2:29:
                    71:73:b8:75:ff:96:48:e5:47:8d:af:de:1d:d0:7f:
                    2e:9c:6d:32:36:60:71:02:d0:46:53:85:e8:c3:ae:
                    75:90:92:59:1e:a5:64:8a:4d:77:96:f3:5e:c9:76:
                    7c:c8:c7:b2:a8:e4:a6:40:2f:91:8c:7b:10:ec:97:
                    9c:94:f8:cd:40:ab:79:e5:c6:d7:97:53:98:6f:fa:
                    ad:d2:70:2f:6f:08:d5:ff:50:a3:60:a7:64:3c:43:
                    e3:bb:4e:55:63:f7:40:61:36:de:da:8e:74:2b:f6:
                    2c:59:d4:e4:e9:9e:7b:1f:64:ab:34:ff:53:0b:31:
                    bf:9c:68:b2:09:df:0e:cf:ef:cb:cc:f7:ee:63:d9:
                    f2:4b:73:96:ec:ee:3a:5d:b9:a1:56:23:81:ac:8a:
                    96:9c:dd:05:13:25:e9:ec:ac:47:fa:97:9d:ca:38:
                    47:81:04:eb:22:be:6f:1d:19:fa:a5:c4:5f:a9:9f:
                    ee:b5:6f:55:be:2a:a5:04:7f:b5:37:4b:d3:3d:29:
                    51:df:16:7f:c6:95:85:7e:83:ea:13:5c:94:56:c8:
                    84:bf:22:24:18:bf:4a:67:4c:d3:18:4a:7e:2e:54:
                    22:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:56:BF:34:C4:EA:08:4F:0D:60:5B:EF:1C:5F:94:FF:74:70:60:DA
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37382e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.187.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:76:52:bd:ca:d6:5b:af:da:c3:3f:60:44:ae:23:d9:e8:2e:
         b1:6c:a9:06:0d:ce:f2:99:d1:81:e0:09:8a:28:af:31:94:97:
         67:f1:1e:3c:48:bc:d7:bb:00:28:d8:01:68:41:45:dc:37:98:
         dd:2d:bd:1f:c3:c3:6f:5b:38:39:b1:2a:3e:00:6d:b0:6a:73:
         2d:56:ff:5a:00:c4:0c:25:9a:77:7a:23:1e:0b:c6:14:ef:f3:
         f6:c0:30:fe:9c:0b:1b:98:96:46:2f:7e:b6:0e:e9:3b:08:63:
         d5:3b:48:b5:c2:b8:46:a6:a3:ab:22:51:96:a3:f5:ab:ce:c9:
         65:97:43:0a:be:83:14:8a:a8:47:88:eb:48:ef:89:e6:63:a6:
         21:65:9e:75:2f:63:eb:46:2d:7a:82:07:1e:c4:4d:8f:91:42:
         fe:57:6f:86:8b:96:bb:4c:f1:2d:cc:41:c7:e6:c0:f5:ec:eb:
         93:24:a6:ec:2b:d2:84:1a:f8:d5:3b:bc:eb:1e:e5:7a:a0:60:
         52:5c:34:f8:37:f9:be:b9:d3:82:d2:27:45:8f:41:a0:b5:3f:
         a5:ad:67:b3:c3:94:99:85:53:bd:69:23:01:04:71:9e:68:a7:
         86:6a:9d:99:7d:a4:fd:91:7a:7a:e0:8f:ff:54:a5:3a:2e:ca:
         fc:d2:68:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----