Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138352e38332e302f32342d3234203d3e20323132363330.roa
File:                     3138352e3138352e38332e302f32342d3234203d3e20323132363330.roa (raw, json)
Hash identifier:          fK7iYpBN2skgFpkqucIn/E0iidobqgvXtwLC4sjZk5o=
Subject key identifier:   B0:E1:D1:DB:25:AD:1E:C4:D4:DC:B9:FF:62:B3:D6:E2:D1:4B:67:A0
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       4ABF180D9A2ED4FC7EC50B80E6FBB4724988CFC7
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138352e38332e302f32342d3234203d3e20323132363330.roa
Signing time:             Fri 27 Nov 2020 15:10:33 +0000
ROA not before:           Fri 27 Nov 2020 15:05:33 +0000
ROA not after:            Fri 26 Nov 2021 15:10:33 +0000
asID:                     212630
IP address blocks:        185.185.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:bf:18:0d:9a:2e:d4:fc:7e:c5:0b:80:e6:fb:b4:72:49:88:cf:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 27 15:05:33 2020 GMT
            Not After : Nov 26 15:10:33 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8b:0b:00:3b:35:33:82:8b:a5:00:71:58:d0:
                    88:5d:a4:ba:c2:28:68:5c:2d:9d:ae:76:36:dd:c6:
                    20:ca:e2:07:a2:50:b1:07:5e:16:c3:d5:9f:59:8b:
                    bf:a2:33:e1:3b:f3:3f:cc:9c:b1:d8:26:8a:c3:cd:
                    f8:ea:2f:a1:b9:eb:b9:21:1f:65:71:97:8e:7e:6d:
                    e8:f8:84:46:ec:5e:4c:ab:79:30:34:5b:80:20:76:
                    69:91:7a:3b:b1:56:62:65:e2:2a:b3:dc:dc:27:4a:
                    cc:c8:86:9e:a5:1c:72:f2:e7:04:28:f8:e1:d2:99:
                    16:fa:00:92:1e:86:bc:d3:0e:37:ac:8e:b8:6c:92:
                    47:7f:03:53:3f:25:a6:b1:75:97:14:34:ea:07:79:
                    ef:23:87:15:e6:5a:d6:6a:d4:fe:97:f5:ab:32:9a:
                    38:5a:2f:ad:c6:f8:69:76:7b:b0:2c:7d:bc:13:ce:
                    e9:71:a9:d0:36:e4:d2:32:15:06:e7:bc:ba:88:1a:
                    b1:df:f7:cf:18:13:2a:6a:b1:b9:41:ef:af:c0:e1:
                    06:65:1b:ec:05:8c:a7:6c:7a:9c:9a:4b:d4:60:70:
                    6b:c0:2e:66:ff:67:75:d7:38:ff:e0:01:d5:d5:2f:
                    be:46:60:3c:32:26:ae:96:d7:d3:78:e0:5c:77:3c:
                    07:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E1:D1:DB:25:AD:1E:C4:D4:DC:B9:FF:62:B3:D6:E2:D1:4B:67:A0
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138352e38332e302f32342d3234203d3e20323132363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.185.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:fb:46:c1:c3:e4:1a:6f:95:69:76:39:08:7d:fc:fc:de:bd:
         6e:75:ec:d3:a4:f7:72:ac:38:7e:f4:02:46:97:2d:a3:9b:7f:
         53:01:63:73:d1:ae:d9:66:a1:00:7a:e2:c9:d8:09:02:ba:c6:
         3a:f1:f6:b2:c9:d4:f0:78:98:79:26:6d:e5:8d:f9:fa:44:66:
         44:0e:8a:ae:57:7b:85:5f:36:e1:3b:37:ef:2c:2d:fb:7b:6e:
         9b:a8:87:ec:41:52:b5:4a:bc:ad:97:87:48:05:ce:e3:45:fb:
         6d:89:b4:16:cd:0b:3d:78:45:ef:ff:a0:dd:ff:d8:fe:0a:da:
         e7:92:80:3a:66:a2:d2:5e:7c:70:e8:27:ce:e8:a0:fe:95:7c:
         96:66:70:fc:35:0e:f9:4f:a0:d5:75:f6:7c:95:a1:54:83:8b:
         d9:e4:71:ac:37:ad:1d:f9:bc:90:14:5d:54:da:15:9c:eb:34:
         36:fd:6a:68:63:b2:a9:83:d0:a9:f4:33:c5:67:4a:7a:b3:13:
         ca:8f:a0:71:95:ee:31:96:69:58:9a:46:09:82:59:93:66:40:
         80:4c:b8:16:5b:db:e0:96:bd:3a:f5:bf:c8:ec:c7:97:76:bb:
         f1:d7:06:9f:54:60:0d:50:8d:29:07:10:7b:99:55:ae:58:66:
         0b:93:ca:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----