Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e34382e302f32342d3234203d3e20323131383331.roa
File:                     38352e3230382e34382e302f32342d3234203d3e20323131383331.roa (raw, json)
Hash identifier:          oxnCnBmomBBhGdTdDSgD2LyJCevLTbz+UK+bnUhDzp0=
Subject key identifier:   2C:9F:08:E8:FC:FB:B4:0D:4D:F0:74:3B:E9:4A:68:66:2F:37:08:D4
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       366316DD49C195A9191C19120D1BB5EFBCAA5101
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e34382e302f32342d3234203d3e20323131383331.roa
Signing time:             Sat 13 Feb 2021 18:30:11 +0000
ROA not before:           Sat 13 Feb 2021 18:25:11 +0000
ROA not after:            Sat 12 Feb 2022 18:30:11 +0000
asID:                     211831
IP address blocks:        85.208.48.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:63:16:dd:49:c1:95:a9:19:1c:19:12:0d:1b:b5:ef:bc:aa:51:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Feb 13 18:25:11 2021 GMT
            Not After : Feb 12 18:30:11 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:73:78:29:76:74:35:43:d9:93:0b:29:07:ca:
                    31:8a:d4:75:7e:9d:d2:b7:0f:61:82:ee:ca:3f:21:
                    1c:36:97:25:71:93:1c:4e:7a:67:f0:b9:39:17:52:
                    64:ae:f1:a2:97:a6:72:56:ec:03:e7:4d:1a:93:e6:
                    a1:8c:01:14:8f:6a:53:83:2d:58:cc:f4:fd:51:8d:
                    9a:42:99:36:d7:0e:dd:45:14:df:87:aa:2b:ed:14:
                    90:e8:41:ed:48:05:99:bd:3f:d1:1b:2a:36:22:2b:
                    f0:55:de:41:93:9e:e0:98:7d:e4:f0:47:e5:aa:65:
                    28:54:3e:03:a5:3a:53:a7:b0:30:f3:9c:35:3a:88:
                    e2:4b:19:93:b5:57:e6:29:1e:52:a2:39:d6:06:72:
                    a2:32:3f:42:fe:3a:e7:87:23:a0:20:5f:e3:bf:ae:
                    69:08:45:fa:50:43:06:6d:61:f4:bd:b2:1b:ed:78:
                    38:99:29:f2:37:89:23:50:f6:d2:5a:a2:a6:44:19:
                    52:4c:b0:8f:19:96:d0:ea:38:74:56:47:26:1c:d8:
                    62:dd:5c:c2:4d:db:bd:59:d3:76:3f:3f:91:72:8e:
                    0b:60:39:34:ab:21:77:ba:80:ca:34:bf:8c:64:ee:
                    27:40:d1:15:50:83:a3:0e:14:70:41:c3:ab:a8:cb:
                    98:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9F:08:E8:FC:FB:B4:0D:4D:F0:74:3B:E9:4A:68:66:2F:37:08:D4
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e34382e302f32342d3234203d3e20323131383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.208.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:7c:78:54:86:81:3f:15:be:45:36:ca:ed:ed:ae:5b:52:7a:
         2d:d1:90:86:7a:e9:9b:24:e9:25:50:03:a9:db:07:60:cd:61:
         ec:79:7e:de:ff:57:25:f0:47:d3:fe:3e:f6:f6:bf:7c:b8:d1:
         54:2a:da:bf:db:8c:33:b6:77:74:df:22:24:36:90:a7:97:21:
         19:53:26:4b:b6:10:1d:bf:f4:3e:bd:29:cb:41:e3:93:a5:a7:
         1f:b6:90:f7:2a:39:27:c4:06:48:2c:69:9f:af:91:3e:04:03:
         2f:c1:e3:73:d4:0d:43:01:b1:15:89:af:5d:be:f3:2a:fc:58:
         9f:c9:6f:6f:ae:87:48:24:81:a8:1d:b4:b3:cd:fb:0b:1f:2e:
         a6:94:6a:81:0c:b4:1d:fc:02:c9:dc:d7:6a:be:75:16:85:04:
         10:15:68:1f:9d:ad:67:7e:2d:52:11:e4:0c:ca:66:9b:82:e1:
         8e:7a:40:50:e7:6f:30:94:34:3c:16:6f:30:56:db:46:33:7a:
         28:aa:71:d7:02:57:33:7f:5c:a3:20:c6:e4:72:46:04:47:8c:
         7a:1b:94:1d:0e:07:60:f5:d9:9b:ea:9a:c6:c5:c2:f4:a4:42:
         f0:93:c6:68:d0:d0:62:2d:66:76:6b:d3:b2:7f:28:f7:d7:cf:
         62:28:82:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----