Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e34382e302f32342d3234203d3e20323132383532.roa
File:                     38352e3230382e34382e302f32342d3234203d3e20323132383532.roa (raw, json)
Hash identifier:          /LtvgVQfgXC+KpGCTGx9amN5LYvVbPohVEabnjOZLPs=
Subject key identifier:   62:D7:F2:BA:A7:71:A9:16:95:88:6E:AB:1B:04:56:1A:2A:C8:E9:8E
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       18C8F7686CC8674956B9B4300C4CC7AC888DB1A6
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e34382e302f32342d3234203d3e20323132383532.roa
Signing time:             Fri 27 Nov 2020 15:10:09 +0000
ROA not before:           Fri 27 Nov 2020 15:05:09 +0000
ROA not after:            Fri 26 Nov 2021 15:10:09 +0000
asID:                     212852
IP address blocks:        85.208.48.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c8:f7:68:6c:c8:67:49:56:b9:b4:30:0c:4c:c7:ac:88:8d:b1:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Nov 27 15:05:09 2020 GMT
            Not After : Nov 26 15:10:09 2021 GMT
        Subject: CN=3082010A0282010100BD59F08231E5B78331158B2D4C569D30CBE2F10A9E9430B4C0F60B28DDE0DBB9BEBC493276B599ECBA7C1381E648CD268FC51D80B07A866BDD5D492E7CF759103E4B49807CC26B09F6AF844233E7EF3FFAD588E007B7F6FF6AE7AC501565EF6D9C16F9D8B8F454135B07FB27F1D785810475994AF02765F3C7FAD5432DB56DC25275156E2356B5C1AD4DAF82A269E8330EFA7D631B6DC5A9EC3E5E9B98E1CDEE70BFC2AC3D469D9500F6377D83C284614F0D510245451FD063AF7221139C09F6820CE9CF789D2F867D21A29C2512A3FE671751A425070978F6204643594521B5511492A3AE0520E6370E4AD6F9462F5D1549276076226CF66AF6DB182D32FE590203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:59:f0:82:31:e5:b7:83:31:15:8b:2d:4c:56:
                    9d:30:cb:e2:f1:0a:9e:94:30:b4:c0:f6:0b:28:dd:
                    e0:db:b9:be:bc:49:32:76:b5:99:ec:ba:7c:13:81:
                    e6:48:cd:26:8f:c5:1d:80:b0:7a:86:6b:dd:5d:49:
                    2e:7c:f7:59:10:3e:4b:49:80:7c:c2:6b:09:f6:af:
                    84:42:33:e7:ef:3f:fa:d5:88:e0:07:b7:f6:ff:6a:
                    e7:ac:50:15:65:ef:6d:9c:16:f9:d8:b8:f4:54:13:
                    5b:07:fb:27:f1:d7:85:81:04:75:99:4a:f0:27:65:
                    f3:c7:fa:d5:43:2d:b5:6d:c2:52:75:15:6e:23:56:
                    b5:c1:ad:4d:af:82:a2:69:e8:33:0e:fa:7d:63:1b:
                    6d:c5:a9:ec:3e:5e:9b:98:e1:cd:ee:70:bf:c2:ac:
                    3d:46:9d:95:00:f6:37:7d:83:c2:84:61:4f:0d:51:
                    02:45:45:1f:d0:63:af:72:21:13:9c:09:f6:82:0c:
                    e9:cf:78:9d:2f:86:7d:21:a2:9c:25:12:a3:fe:67:
                    17:51:a4:25:07:09:78:f6:20:46:43:59:45:21:b5:
                    51:14:92:a3:ae:05:20:e6:37:0e:4a:d6:f9:46:2f:
                    5d:15:49:27:60:76:22:6c:f6:6a:f6:db:18:2d:32:
                    fe:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D7:F2:BA:A7:71:A9:16:95:88:6E:AB:1B:04:56:1A:2A:C8:E9:8E
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e34382e302f32342d3234203d3e20323132383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.208.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:15:de:d0:62:42:b6:fb:e8:7f:1e:ec:3c:c1:c0:4a:d7:89:
         6d:70:9e:fc:9f:e0:77:5f:f4:37:91:62:a8:ab:81:8f:5b:a7:
         53:2c:31:26:be:a7:24:4a:0e:47:62:a9:6f:e5:de:72:53:42:
         b1:96:fb:aa:87:cf:f0:e4:9e:3f:bf:ba:ac:91:16:54:6e:fe:
         46:2e:b8:42:aa:3e:8a:96:54:98:2b:b5:02:42:39:d0:bb:44:
         3c:19:a9:28:09:f2:0f:90:3e:94:0e:5c:cf:9f:3d:f4:de:70:
         a1:8a:98:eb:76:82:0a:3a:06:27:b7:1d:ca:fc:07:04:a8:dc:
         79:7a:68:a5:1c:81:7a:a9:45:35:96:54:8f:ee:8e:ad:40:a5:
         51:55:98:8c:23:4c:29:fc:7c:e4:6a:50:3c:5f:d4:93:33:d4:
         cc:a1:cc:6f:2b:13:ca:f5:3c:3a:eb:4f:ea:59:4d:dd:fd:8b:
         ee:7a:56:2c:8c:1b:1f:85:6c:78:3a:a7:3e:5d:22:71:54:6b:
         a7:d9:24:fc:12:0d:fa:bc:94:f8:e7:eb:23:08:09:e3:f4:99:
         65:32:ce:bb:6a:fe:00:d5:a5:62:39:fd:8f:df:5d:df:2e:75:
         ee:28:7e:31:a8:2d:77:9f:f6:d3:3a:cf:ad:d6:95:9d:ef:e3:
         1a:f9:f6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----