Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233352e302f32342d3234203d3e203236363336.roa
File:                     3138352e3138372e3233352e302f32342d3234203d3e203236363336.roa (raw, json)
Hash identifier:          DYAisdFzfYY3GPoVvJsP8/Hk43SRshrz9Rh7HheM+8w=
Subject key identifier:   26:99:66:37:88:59:27:FF:4B:D3:A0:D7:A4:7E:9F:BF:F6:13:35:A2
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       123466B5C1D0487063BE271AEBE88DA1A7816FB3
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233352e302f32342d3234203d3e203236363336.roa
Signing time:             Fri 27 Nov 2020 15:10:15 +0000
ROA not before:           Fri 27 Nov 2020 15:05:15 +0000
ROA not after:            Fri 26 Nov 2021 15:10:15 +0000
asID:                     26636
IP address blocks:        185.187.235.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:34:66:b5:c1:d0:48:70:63:be:27:1a:eb:e8:8d:a1:a7:81:6f:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Nov 27 15:05:15 2020 GMT
            Not After : Nov 26 15:10:15 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9b:46:fa:7a:b7:fb:43:c9:f6:79:ac:f6:e4:
                    f7:f4:20:d9:25:c9:79:43:59:ad:1e:41:a4:76:dc:
                    23:85:85:ce:44:a2:f0:64:07:1c:75:7b:6e:cc:da:
                    3b:9f:d7:b0:36:e3:5c:4c:cd:01:88:36:25:61:a1:
                    7e:3e:b8:2c:ff:0c:fa:c0:10:3c:cf:c4:f1:5d:05:
                    2a:8b:97:8e:17:67:c2:9f:24:e3:e3:b6:98:c2:cc:
                    d3:8e:83:0e:73:5f:38:e7:a4:0e:56:4a:90:57:11:
                    d9:11:3f:b8:48:c9:bc:94:e6:59:f2:08:7b:8a:4b:
                    22:5d:25:ef:cf:7b:06:a2:b9:a0:57:d8:c1:a2:a4:
                    d9:25:a7:57:9d:08:27:ba:1e:a7:88:80:59:75:2b:
                    4f:a1:90:aa:09:dd:13:ca:40:af:fd:7c:29:fd:a8:
                    7b:02:5f:63:c1:af:b1:3a:3f:57:fa:1e:a9:c5:1e:
                    1b:4c:c7:23:3a:55:3b:e0:33:fb:d1:ea:cc:81:fd:
                    73:cf:40:d9:25:5f:0b:0b:03:98:26:33:e0:76:43:
                    fb:05:42:6f:6a:ee:7a:93:5a:52:2a:81:77:38:44:
                    88:df:28:ad:54:51:2c:89:12:74:a6:8a:51:1f:53:
                    a0:4e:d7:bf:e1:0c:7d:8b:f8:bb:ae:91:90:06:c7:
                    03:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:99:66:37:88:59:27:FF:4B:D3:A0:D7:A4:7E:9F:BF:F6:13:35:A2
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233352e302f32342d3234203d3e203236363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:e6:88:56:ad:03:48:39:64:3d:08:aa:ed:06:53:1e:8e:e8:
         38:88:27:e7:36:6e:1b:3a:83:9e:1a:cd:a1:4a:de:d0:1c:9a:
         c4:f3:7d:21:a1:07:4c:50:72:04:0e:5b:bf:dc:74:0d:a6:3d:
         99:3e:c6:a7:9d:66:d9:9d:79:89:41:0f:f1:e1:e3:22:27:db:
         32:ea:40:e3:c0:2d:42:66:6e:94:8e:4f:f0:15:89:b9:65:56:
         c8:af:4e:b7:27:69:9a:00:04:13:17:80:9e:56:7c:c6:17:30:
         2d:7e:84:10:da:bf:71:ea:df:23:01:da:94:ef:ca:8f:f3:d5:
         fe:63:f2:a1:ee:f7:0e:d6:3c:a7:f0:7b:d5:e6:4f:54:48:91:
         af:5c:1f:04:39:47:e0:f9:80:8c:4e:31:95:09:29:38:c7:86:
         c8:90:c4:9e:54:24:e8:70:b2:70:5a:71:ad:b8:f0:c9:92:67:
         42:5b:ad:fa:64:ab:3d:b1:c8:c4:ad:b0:04:0a:3d:b8:e1:80:
         35:01:58:86:d2:62:18:ed:45:43:1b:ee:2b:69:23:32:07:6c:
         fd:e4:6a:67:02:42:ae:11:60:4d:dc:3a:33:6e:43:da:9f:62:
         a9:c2:01:8b:1d:20:04:ba:26:56:2d:f5:a5:01:cc:e1:d3:ee:
         07:dd:41:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----