Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3137342e3230372e302f32342d3234203d3e203434363835.roa
File:                     3138352e3137342e3230372e302f32342d3234203d3e203434363835.roa (raw, json)
Hash identifier:          lyWRYJJT1AKzAoi2WsGID+THX2aEFyKu4WYVis+aZlU=
Subject key identifier:   17:99:3F:1E:42:8F:BF:24:44:7B:78:77:0F:DD:37:D7:48:DD:62:CF
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       4FB4169357FA283305A4A1BDDE4AF55AC442860E
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3137342e3230372e302f32342d3234203d3e203434363835.roa
Signing time:             Fri 27 Nov 2020 15:10:40 +0000
ROA not before:           Fri 27 Nov 2020 15:05:40 +0000
ROA not after:            Fri 26 Nov 2021 15:10:40 +0000
asID:                     44685
IP address blocks:        185.174.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:b4:16:93:57:fa:28:33:05:a4:a1:bd:de:4a:f5:5a:c4:42:86:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 27 15:05:40 2020 GMT
            Not After : Nov 26 15:10:40 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0b:b2:25:32:d9:45:b1:56:27:81:f3:84:24:
                    ee:94:be:1f:bf:f8:79:5f:d2:ba:02:11:61:d8:75:
                    2d:a9:33:f7:4c:cf:35:ca:c8:74:17:e4:e7:a6:24:
                    2f:11:6a:90:8d:90:3e:73:c8:2b:ba:8e:0d:52:3d:
                    c5:4a:85:77:87:5f:49:34:8c:88:12:85:ef:cb:a5:
                    2c:1c:c3:6b:28:8d:c4:ec:bb:1e:f5:04:b9:fc:d9:
                    bd:53:f1:e4:42:c8:65:00:41:22:31:87:83:b6:77:
                    12:d3:71:59:28:1f:86:d8:3e:bc:dd:0a:c3:f9:3f:
                    3f:b9:f4:b0:c3:fa:1a:18:90:20:67:6d:a3:cb:cf:
                    26:c9:08:c6:2d:d2:61:c3:9f:b0:1d:d7:b1:d2:42:
                    93:b0:6d:56:bf:d9:45:e3:94:31:2a:c7:84:50:de:
                    4e:5b:6e:33:5b:4e:7c:08:12:c8:a3:25:6e:03:ad:
                    dd:13:de:aa:3b:84:a4:1b:ad:9a:07:15:d7:cc:25:
                    87:ae:a4:35:c6:a3:f6:3c:9b:4a:86:81:2e:05:18:
                    b4:ef:0d:2f:08:07:21:5d:fd:ce:cf:88:03:bd:e8:
                    cd:0c:37:25:f2:ec:8e:b9:72:3a:5c:4f:aa:ac:88:
                    d2:e5:c0:3a:a9:36:c2:eb:90:1b:4f:19:38:40:bd:
                    6a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:99:3F:1E:42:8F:BF:24:44:7B:78:77:0F:DD:37:D7:48:DD:62:CF
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3137342e3230372e302f32342d3234203d3e203434363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.174.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:6e:2b:59:7e:c2:c1:6d:03:f5:57:69:e2:c4:87:b5:00:a9:
         23:be:e3:79:fd:22:4b:c9:2b:f9:ef:9b:b4:e5:8d:c3:bd:bc:
         db:d6:ef:fd:97:b4:7d:0e:d4:61:6f:ad:ac:90:8f:8c:a5:ce:
         6d:5c:5f:c3:9f:c9:a7:bb:66:88:cf:f3:5b:43:4d:4d:47:49:
         34:36:1c:42:7e:71:c4:b6:42:6c:5d:1d:7d:4d:49:1b:ac:22:
         72:99:3a:d9:d8:7e:dd:ef:1e:0f:d1:14:b3:69:05:7b:52:34:
         63:90:83:87:61:c5:79:68:5b:9a:c6:e2:7f:f7:55:04:43:1f:
         9a:3c:7e:e5:66:e8:f1:ec:6d:c5:a8:9d:c4:d0:f3:9f:67:4a:
         f6:db:88:b7:c1:39:99:6f:e3:c4:df:2b:8b:88:72:ee:49:8b:
         e2:e3:63:8b:51:56:9b:2a:fe:81:bf:86:45:ed:b9:b5:38:1d:
         53:df:e8:7e:a7:6f:15:35:92:7b:08:f6:7d:6c:62:48:11:13:
         8d:0f:fe:8a:10:24:ff:5f:31:43:03:53:76:3c:2e:d1:c9:f2:
         02:9f:b6:d8:7e:89:4b:9a:4e:a4:3d:56:4d:37:61:05:b8:55:
         19:af:63:1a:78:d9:95:73:da:f5:2d:b5:92:e5:77:94:e4:6d:
         16:6f:b2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----