Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230372e3235312e302f32342d3234203d3e203531353539.roa
File:                     3138352e3230372e3235312e302f32342d3234203d3e203531353539.roa (raw, json)
Hash identifier:          Go0wvOfzBcFucgzlDece//aEqueRbHm+wJnv91C0AvQ=
Subject key identifier:   3E:20:D7:7A:EB:CC:31:6C:15:78:9F:BD:69:F9:82:FC:C6:21:F2:05
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       324B6C7828ABE08F1059EE71548B6AB9BBABE519
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230372e3235312e302f32342d3234203d3e203531353539.roa
Signing time:             Fri 27 Nov 2020 15:10:10 +0000
ROA not before:           Fri 27 Nov 2020 15:05:10 +0000
ROA not after:            Fri 26 Nov 2021 15:10:10 +0000
asID:                     51559
IP address blocks:        185.207.251.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:4b:6c:78:28:ab:e0:8f:10:59:ee:71:54:8b:6a:b9:bb:ab:e5:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Nov 27 15:05:10 2020 GMT
            Not After : Nov 26 15:10:10 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bc:fd:3e:cd:14:ea:98:22:2b:35:e6:d3:87:
                    35:c4:91:6f:74:7b:77:76:40:22:c1:95:20:8b:3f:
                    65:a6:f9:37:5d:48:fc:7e:5a:cf:7d:23:25:3a:7c:
                    ed:fb:45:6c:68:e0:d0:14:47:63:90:51:0c:cd:04:
                    c6:b0:c9:aa:f9:79:c6:74:a9:c8:67:6c:b8:b5:7b:
                    d1:ee:8f:df:f8:21:d7:cb:67:8f:da:42:93:79:6f:
                    5f:ee:f3:c1:cf:9f:c8:af:26:73:5d:1b:f1:cc:16:
                    6e:9b:4c:ca:e8:79:c9:b2:74:33:d8:cc:73:89:d1:
                    ee:cf:e0:4c:09:7e:52:56:be:ce:f6:a1:73:85:f3:
                    f2:f1:7c:48:1f:3b:bb:bf:ff:4e:43:d1:3c:da:60:
                    d5:48:95:e9:0c:75:f1:7d:1c:0e:ce:32:44:7c:c9:
                    b5:07:de:c3:3a:5a:da:d2:cd:30:65:fc:35:53:42:
                    ad:5c:01:f4:36:2c:50:99:fb:98:96:b0:b4:37:57:
                    04:f1:17:a6:49:1b:37:ef:53:79:76:80:2b:ba:a9:
                    24:dd:20:62:39:f6:6b:6e:bc:29:f4:0f:53:06:c7:
                    57:fe:87:e8:7f:79:f8:62:0f:f7:60:45:41:f6:55:
                    bf:f7:8e:97:ad:f6:c9:86:9f:24:e2:ac:05:fe:30:
                    20:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:20:D7:7A:EB:CC:31:6C:15:78:9F:BD:69:F9:82:FC:C6:21:F2:05
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230372e3235312e302f32342d3234203d3e203531353539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.207.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:87:b8:06:4d:14:fd:a2:19:f1:ea:12:2c:5b:56:8e:ad:51:
         52:83:bd:99:2e:50:53:eb:11:d9:33:5d:00:43:68:e0:10:2b:
         ef:6a:13:93:f4:46:af:6f:0c:7a:40:d8:33:21:39:00:3d:bc:
         1f:e8:f2:52:b8:5f:28:08:80:31:fe:42:3f:fa:3a:d5:1f:4e:
         2b:33:75:5a:a5:ed:bd:45:3b:d3:32:f5:7e:d3:7e:e2:75:8d:
         51:95:3a:fc:ad:2f:cb:4b:cd:87:c2:7e:6f:8b:93:74:00:b5:
         e5:c8:b9:e5:e2:89:00:bb:83:31:d9:fe:c2:11:c0:25:f6:d3:
         58:de:cb:d5:ee:d4:d1:16:b8:d4:c3:ba:df:f7:ec:e5:ef:35:
         4b:9e:ea:a6:d6:2d:1d:a5:e1:da:15:ea:40:37:94:e2:52:4c:
         fb:69:0e:42:f4:10:00:46:73:22:8d:1d:b0:d9:3a:8e:c1:f9:
         9a:56:44:d1:9e:e2:74:19:ad:19:2e:33:99:a2:77:d2:05:80:
         ba:36:f6:28:c6:bd:64:97:01:5d:ae:8f:99:81:0d:2d:bf:d8:
         2e:f1:ea:67:d9:3f:bc:38:0d:a1:a6:bc:70:18:c1:23:86:b2:
         b0:69:82:38:26:5f:a8:d5:4d:d6:4c:ec:62:7e:ad:07:28:47:
         1c:56:ed:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----