Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3235302e33362e302f32332d3234203d3e20333938393939.roa
File:                     3138352e3235302e33362e302f32332d3234203d3e20333938393939.roa (raw, json)
Hash identifier:          /QrMTukS62SndMIf5UiQy/hLaUSw6JEwD2jwsyDdec4=
Subject key identifier:   1C:7E:0B:93:AD:D3:C7:9C:07:23:93:FB:38:06:F9:ED:D7:F5:11:97
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       415D777F16C8F85336489EE7CC4F72C48168EC8A
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3235302e33362e302f32332d3234203d3e20333938393939.roa
Signing time:             Fri 27 Nov 2020 15:10:10 +0000
ROA not before:           Fri 27 Nov 2020 15:05:10 +0000
ROA not after:            Fri 26 Nov 2021 15:10:10 +0000
asID:                     398999
IP address blocks:        185.250.36.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:5d:77:7f:16:c8:f8:53:36:48:9e:e7:cc:4f:72:c4:81:68:ec:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Nov 27 15:05:10 2020 GMT
            Not After : Nov 26 15:10:10 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a8:6d:e3:82:df:fa:c2:a8:53:8c:ee:39:73:
                    48:20:15:ae:95:65:81:ca:27:ae:76:c7:90:94:11:
                    59:0a:6a:67:cc:f2:02:fc:d0:52:d0:eb:9c:01:c5:
                    38:d1:22:99:81:77:16:1b:bb:36:97:61:8d:0c:7a:
                    54:82:f4:9c:5a:c7:37:7a:db:cc:f2:46:78:cc:3b:
                    dd:b6:ce:6b:8e:d4:b3:b8:97:10:15:0e:34:0f:f7:
                    a1:c2:d6:25:4c:8f:20:ad:4f:40:d1:d4:e4:a4:22:
                    f7:42:e8:a4:9d:ea:27:7b:c7:c6:d5:e3:c7:13:99:
                    54:f0:d5:68:37:d4:d3:e6:67:75:a2:3d:c7:fc:85:
                    bc:78:cf:47:06:6f:fe:44:c7:9f:f6:cc:bd:a6:ae:
                    a5:08:d1:f3:81:de:f7:29:3f:49:56:ab:1e:d5:63:
                    cb:27:1c:9f:f3:f0:1f:4e:f1:0a:f2:4f:4f:8f:b9:
                    8a:9c:88:5a:bc:07:a5:fc:f2:bb:36:7d:4e:59:1c:
                    ab:95:b2:e1:9c:fd:26:b2:1c:ba:31:c2:9a:e3:e1:
                    2f:71:01:4e:0a:57:b4:d3:5c:5f:72:91:4c:f8:ad:
                    85:b9:b2:29:89:12:ea:f2:3e:2a:e8:ee:4f:1b:ff:
                    3a:e7:4d:31:b0:67:22:0a:ef:7f:27:da:7e:9a:ad:
                    69:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:7E:0B:93:AD:D3:C7:9C:07:23:93:FB:38:06:F9:ED:D7:F5:11:97
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3235302e33362e302f32332d3234203d3e20333938393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.250.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:66:19:01:a9:13:97:e2:dc:75:b5:87:d0:ac:db:e4:49:ee:
         f7:4e:b8:0a:d7:28:67:af:1c:dc:ad:77:bb:6c:6e:4a:7e:be:
         75:5b:fb:69:48:89:ba:68:f7:2c:36:9f:e4:20:4c:67:a3:2e:
         98:4c:09:fe:6c:b5:02:68:11:17:36:a4:88:79:30:99:2e:2f:
         39:51:a1:05:67:ec:7b:0c:b3:2f:24:93:c4:9b:e3:9d:d0:25:
         ac:38:db:a6:33:03:6e:1b:75:ef:8d:80:05:4b:ed:84:27:ed:
         2e:24:19:ba:e2:cc:bb:d5:ae:e9:5b:fb:e1:5c:96:6d:a4:7c:
         78:e7:15:ff:8e:2f:08:3f:61:34:04:77:3a:4e:50:83:8c:ef:
         ca:86:e9:bc:08:60:9a:db:b6:2c:f0:65:d0:ee:91:81:ad:5b:
         6b:0e:0a:b5:51:4b:3d:5d:c6:6f:d8:b8:8f:e4:57:78:20:64:
         fd:e3:cb:e0:78:c8:bc:58:29:61:ca:d7:c4:53:ec:7e:c4:5d:
         0d:ed:33:80:fc:8e:ed:dc:0d:b6:69:21:67:8a:90:a0:37:61:
         99:ba:88:fa:90:eb:e7:56:be:fd:9c:4e:6c:1b:00:9a:40:cd:
         bd:d1:ba:e6:9a:e0:18:29:35:be:ac:44:12:1b:fc:1b:90:2c:
         46:f9:24:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----