Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234312e3135302e302f32332d3234203d3e203631333137.roa
File:                     3138352e3234312e3135302e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          hT8y1HkwRmw6Ge/ZbhA1DKObJkjOpeqmCZm/4w+Kl/Q=
Subject key identifier:   02:5B:A5:94:62:06:C2:CE:F0:3C:39:B7:46:E0:CE:3D:40:72:3A:93
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       457537DC4AF6EEC661CEDDCDC25DD0DC6C686DE5
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234312e3135302e302f32332d3234203d3e203631333137.roa
Signing time:             Fri 27 Nov 2020 15:10:16 +0000
ROA not before:           Fri 27 Nov 2020 15:05:16 +0000
ROA not after:            Fri 26 Nov 2021 15:10:16 +0000
asID:                     61317
IP address blocks:        185.241.150.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:75:37:dc:4a:f6:ee:c6:61:ce:dd:cd:c2:5d:d0:dc:6c:68:6d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Nov 27 15:05:16 2020 GMT
            Not After : Nov 26 15:10:16 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ab:ed:96:68:f4:2b:6b:59:81:2a:dc:b2:b7:
                    59:6f:61:10:9e:c1:56:7a:6c:e1:04:17:cf:56:17:
                    f4:42:90:8b:27:5e:58:0c:1b:39:9b:00:67:23:d2:
                    46:38:ba:12:00:f6:b1:f8:78:26:7f:98:9b:8c:f5:
                    c2:5f:13:c0:b5:dc:51:83:2f:94:e8:af:96:42:84:
                    f7:98:16:49:99:5b:76:c7:a1:d5:19:88:ff:4f:31:
                    39:12:66:0f:c1:4c:2a:fb:cb:03:7d:1b:d2:82:b1:
                    47:3d:7a:46:d3:d8:00:bc:15:ed:ee:42:20:2d:98:
                    59:b3:7c:00:e0:ad:e6:c7:06:13:8d:69:26:8a:f9:
                    ba:61:b3:87:a0:cf:8d:f7:b4:82:f8:2e:a1:66:18:
                    21:86:81:1b:30:45:e4:76:ca:19:bc:e7:d3:bf:a7:
                    ce:10:c7:d5:a4:9b:ed:9d:56:45:87:d8:dc:87:75:
                    df:d8:32:89:a5:91:d2:ee:6f:50:4f:fa:27:02:13:
                    63:2b:6a:a0:f5:9f:16:0a:7e:38:20:7e:e6:f8:be:
                    29:ed:2a:30:1d:9e:5f:d4:b7:53:8f:b0:f5:b9:a1:
                    f8:ab:4e:37:f5:4f:d0:0d:7d:09:af:2c:c9:83:aa:
                    66:4e:43:d0:97:cd:9f:9e:21:d0:83:1b:7f:10:eb:
                    90:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:5B:A5:94:62:06:C2:CE:F0:3C:39:B7:46:E0:CE:3D:40:72:3A:93
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234312e3135302e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.241.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:aa:9e:3c:a6:e9:65:8c:3c:35:48:1d:b3:85:e1:3b:23:b1:
         7e:44:95:0a:e6:5b:8d:f1:ed:f0:19:a0:d8:bf:c6:31:64:e8:
         5e:69:83:5c:10:1e:7e:bf:e8:d8:b3:c4:2e:c5:78:6a:d0:0e:
         db:b6:94:0b:11:11:2a:22:64:ea:38:81:fa:92:e3:fb:30:91:
         2d:6e:6f:26:94:e6:92:0a:e0:9a:58:ea:d6:00:db:8b:c8:7e:
         db:34:db:b9:7e:6b:dc:87:d3:c4:ed:9e:81:5e:18:d6:e3:8a:
         ab:7b:ae:2e:52:2b:f2:df:d4:a0:06:41:cb:23:24:c4:b8:95:
         ee:54:b8:a1:78:27:f2:f2:13:77:4f:38:82:47:4c:f6:6e:b4:
         74:64:0e:39:aa:36:05:22:2e:09:a8:1d:a6:43:f1:89:a9:9e:
         be:70:c6:8c:e9:be:4c:38:cd:bf:e4:87:de:93:43:71:ce:fa:
         65:5f:24:cc:ef:d4:13:cb:03:81:ad:6d:5e:2a:ec:43:cb:e7:
         37:1d:35:cc:7f:ee:1d:a8:1a:d4:2a:12:11:06:2c:3e:c2:d4:
         e4:67:c7:f8:c5:27:ae:03:62:0e:b6:13:47:5c:e0:3b:42:e8:
         75:b4:18:41:bf:91:ec:2f:6e:2f:b5:8c:d9:7f:c7:ba:c0:7e:
         2c:9f:cf:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----