Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3233392e302f32342d3234203d3e20323131383330.roa
File:                     3138352e3230322e3233392e302f32342d3234203d3e20323131383330.roa (raw, json)
Hash identifier:          U4tBDU4E5Syogy7mq46J691kxZWxZrwSv/tLoWef9og=
Subject key identifier:   CD:91:B3:C9:8D:5D:49:8A:A7:A4:D6:24:D8:00:79:71:94:33:6F:F1
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       3136293E29AEA55AC254CD6B5DF5A9C9C31891DD
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3233392e302f32342d3234203d3e20323131383330.roa
Signing time:             Sat 13 Feb 2021 18:27:26 +0000
ROA not before:           Sat 13 Feb 2021 18:22:26 +0000
ROA not after:            Sat 12 Feb 2022 18:27:26 +0000
asID:                     211830
IP address blocks:        185.202.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:36:29:3e:29:ae:a5:5a:c2:54:cd:6b:5d:f5:a9:c9:c3:18:91:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Feb 13 18:22:26 2021 GMT
            Not After : Feb 12 18:27:26 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6c:c9:80:6d:21:1a:93:84:b4:bc:61:d9:66:
                    be:7f:c6:ff:0a:e3:f5:05:ea:b8:e2:58:98:07:67:
                    07:6a:5d:38:81:77:c7:d4:d9:0a:d3:a1:0e:f9:49:
                    c1:b1:b9:21:7c:00:71:f7:e1:fa:d0:f1:83:97:94:
                    10:c4:ee:0d:1b:a6:8a:cd:1d:7d:87:c7:0d:1a:9f:
                    ed:db:68:66:91:15:1c:7c:31:21:d9:bf:d0:ff:8e:
                    71:77:91:ff:9c:f7:c1:df:2e:a0:ae:b5:da:28:cd:
                    a3:03:61:a2:a7:4f:84:f6:a3:b3:47:fa:ce:42:65:
                    3f:cf:9b:77:65:cc:4e:0e:8f:65:4c:28:2d:cd:9a:
                    ae:be:47:52:e9:c9:27:69:77:d6:20:c2:3a:35:66:
                    62:ed:ff:29:3e:3b:c9:88:ed:e7:45:91:fb:af:9f:
                    7d:9b:8b:be:78:ae:88:6f:34:59:ac:1a:0f:28:fc:
                    46:ce:da:0b:92:16:b9:b4:ef:f4:bb:e3:13:8f:bc:
                    8a:68:22:ac:84:a0:4b:e2:85:f4:85:51:1f:b5:76:
                    fc:e4:11:25:4a:91:4a:f9:a1:00:ea:79:2b:3c:6b:
                    f2:32:24:fc:b8:b4:61:63:4c:5b:4d:20:6d:ed:3c:
                    c9:fe:e2:3b:26:ad:dc:01:21:92:ec:4e:de:e6:c0:
                    25:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:91:B3:C9:8D:5D:49:8A:A7:A4:D6:24:D8:00:79:71:94:33:6F:F1
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3233392e302f32342d3234203d3e20323131383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:2f:7e:fe:8d:f8:64:75:a0:2a:d4:d0:78:ed:d6:a4:e6:4b:
         ca:14:74:15:b1:87:40:42:df:63:43:0b:9d:d7:6c:2d:48:a5:
         52:23:85:74:c8:9f:c3:06:94:3c:46:80:38:b8:1b:0d:dd:0b:
         00:fa:68:af:30:4d:59:c7:97:a5:28:cc:4f:a0:82:8d:9f:c1:
         bf:70:0d:d0:06:1f:5d:32:9e:09:39:4f:6c:14:36:c8:c2:69:
         ff:da:91:b4:b2:3f:40:5c:5a:97:fd:48:47:74:af:22:dc:4c:
         8b:6a:7b:ea:0f:cc:b4:f5:1d:28:a2:61:ba:40:16:ab:15:c7:
         2c:a0:32:fa:59:87:05:d4:d2:ce:57:1c:f2:4e:88:74:26:d2:
         ec:fa:b5:c0:ee:6e:0d:75:8e:99:07:5a:af:7a:e2:45:79:8c:
         47:61:79:6c:8e:8b:ed:aa:a7:f9:ed:57:ec:0a:cc:e2:fc:81:
         97:89:98:93:5a:ae:1b:1a:c4:6b:ff:89:bb:ef:97:dd:44:7e:
         4b:c8:54:8f:a8:a8:7b:71:d2:5f:94:60:ac:7c:db:a2:11:10:
         be:e2:d1:7a:fa:3b:f7:60:fe:44:42:c7:d5:71:e4:ad:6a:48:
         66:f8:fc:dd:02:8c:5a:47:47:61:1d:93:b3:1b:73:ab:c5:1f:
         67:84:57:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----