Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139372e3234382e302f32342d3234203d3e20323132363330.roa
File:                     3138352e3139372e3234382e302f32342d3234203d3e20323132363330.roa (raw, json)
Hash identifier:          9tYKF8+m1hAois41tbOJ1nshe40X6v1N6dtFRa7XdmE=
Subject key identifier:   85:16:94:4C:05:2F:12:0F:0C:A0:AB:DB:90:4C:47:F7:BC:60:92:E4
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       3CF11625A924EDE6A18DEC80438CED2CDA26AE5A
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139372e3234382e302f32342d3234203d3e20323132363330.roa
Signing time:             Fri 27 Nov 2020 15:10:32 +0000
ROA not before:           Fri 27 Nov 2020 15:05:32 +0000
ROA not after:            Fri 26 Nov 2021 15:10:32 +0000
asID:                     212630
IP address blocks:        185.197.248.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f1:16:25:a9:24:ed:e6:a1:8d:ec:80:43:8c:ed:2c:da:26:ae:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 27 15:05:32 2020 GMT
            Not After : Nov 26 15:10:32 2021 GMT
        Subject: CN=3082010A0282010100AF22138785B393DD12C1344CF26B379B25BD45D0B3C0A570D65DAA6FBF7F41641868B16F8C1442E1343C524217B6581F226941FCB52775B6FD1355D99FACB45808A8AFE8A8DC6A8A027A4F3D88D2A3CF152C2F624E06A33B8260FF8DAB6DB04175A83984E72D4B903912A1B0045F211192AB81E7253DD70FD70BD0FD90B0086FF9EFE4FB1E589A2F0D6741444D0576331713E88860E7B5F413245850CEE025A4D896510710597F24CB275B701A6E3D474E5117BDD97AA0D623E3562E1AD1E53324579364368E42ED20618185F2E53B7004256D29CF50A7B0C4B65F57DB6E26681B85632B4C34FBD169472C029F5B8A8249E47811E26F3F0163A28AC288767E5F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:22:13:87:85:b3:93:dd:12:c1:34:4c:f2:6b:
                    37:9b:25:bd:45:d0:b3:c0:a5:70:d6:5d:aa:6f:bf:
                    7f:41:64:18:68:b1:6f:8c:14:42:e1:34:3c:52:42:
                    17:b6:58:1f:22:69:41:fc:b5:27:75:b6:fd:13:55:
                    d9:9f:ac:b4:58:08:a8:af:e8:a8:dc:6a:8a:02:7a:
                    4f:3d:88:d2:a3:cf:15:2c:2f:62:4e:06:a3:3b:82:
                    60:ff:8d:ab:6d:b0:41:75:a8:39:84:e7:2d:4b:90:
                    39:12:a1:b0:04:5f:21:11:92:ab:81:e7:25:3d:d7:
                    0f:d7:0b:d0:fd:90:b0:08:6f:f9:ef:e4:fb:1e:58:
                    9a:2f:0d:67:41:44:4d:05:76:33:17:13:e8:88:60:
                    e7:b5:f4:13:24:58:50:ce:e0:25:a4:d8:96:51:07:
                    10:59:7f:24:cb:27:5b:70:1a:6e:3d:47:4e:51:17:
                    bd:d9:7a:a0:d6:23:e3:56:2e:1a:d1:e5:33:24:57:
                    93:64:36:8e:42:ed:20:61:81:85:f2:e5:3b:70:04:
                    25:6d:29:cf:50:a7:b0:c4:b6:5f:57:db:6e:26:68:
                    1b:85:63:2b:4c:34:fb:d1:69:47:2c:02:9f:5b:8a:
                    82:49:e4:78:11:e2:6f:3f:01:63:a2:8a:c2:88:76:
                    7e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:16:94:4C:05:2F:12:0F:0C:A0:AB:DB:90:4C:47:F7:BC:60:92:E4
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139372e3234382e302f32342d3234203d3e20323132363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.197.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:23:70:71:87:5f:57:50:c8:b2:ba:65:53:38:fd:87:4f:2f:
         ee:4a:56:1c:83:c1:85:be:ff:11:28:6e:45:b4:eb:32:26:2f:
         90:99:ee:41:cf:00:8d:3a:27:5f:ea:8e:30:89:9d:9c:6b:d1:
         82:2a:b2:a1:e3:71:23:2f:72:e8:52:11:8e:1a:0f:fc:4d:19:
         7e:87:77:93:48:b9:9e:85:67:f2:b9:16:ce:e7:f6:c1:4f:ca:
         dd:52:fd:f5:07:82:dd:36:3b:38:67:70:4b:a5:67:b5:df:69:
         74:45:04:2c:05:0d:a2:52:56:e5:65:22:78:13:e9:55:2b:12:
         d7:b1:55:1f:ce:e9:87:b1:6e:74:84:0c:43:e1:c4:a0:b9:cc:
         03:ad:7e:be:e0:0e:9d:22:01:24:f0:b2:7c:61:82:7b:a4:34:
         4d:72:af:c8:71:f1:bf:fb:44:e4:49:17:af:03:b7:82:10:8d:
         52:90:84:3e:e0:04:6a:54:ef:a7:95:40:02:5f:70:47:12:2e:
         3a:30:ca:de:ab:1a:49:03:8d:48:16:1e:98:fd:57:8e:24:6f:
         bb:4a:d0:8c:40:27:70:49:21:09:db:49:ac:30:20:b4:1b:ac:
         8d:da:a7:6e:d5:5e:bc:3d:2a:7e:61:21:a2:56:fa:90:1c:23:
         27:d8:43:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----