Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37332e302f32342d3234203d3e20323035383134.roa
File:                     33312e3138372e37332e302f32342d3234203d3e20323035383134.roa (raw, json)
Hash identifier:          j4o++MWrUtM1corgWsy1zGTsYoG229HsCPPxYzsfuns=
Subject key identifier:   D3:10:15:4C:2B:F9:AC:5C:EE:65:A4:89:9E:6C:AC:C8:36:0A:CF:9A
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       316AC102A4BAF943A91414C995CCA182041941EE
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37332e302f32342d3234203d3e20323035383134.roa
Signing time:             Fri 29 Oct 2021 16:00:20 +0000
ROA not before:           Fri 29 Oct 2021 15:55:20 +0000
ROA not after:            Fri 28 Oct 2022 16:00:20 +0000
asID:                     205814
IP address blocks:        31.187.73.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:6a:c1:02:a4:ba:f9:43:a9:14:14:c9:95:cc:a1:82:04:19:41:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 29 15:55:20 2021 GMT
            Not After : Oct 28 16:00:20 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2b:90:31:b1:fd:39:98:4e:18:c4:8c:c0:1f:
                    b2:4c:ca:1d:c8:0c:ff:fc:33:5d:0b:5a:44:0b:28:
                    ba:50:e9:01:e6:94:04:c7:4b:8a:5e:6a:39:8c:30:
                    ce:cb:b5:14:b2:1d:ec:39:e3:0d:d9:7c:3f:68:df:
                    09:00:14:17:5c:3d:b6:63:78:19:6d:a4:da:8a:01:
                    e1:d2:60:67:56:3d:90:7d:f8:48:3c:55:2e:51:4a:
                    37:cb:ed:c6:6f:e3:7b:5b:20:c1:fe:6f:9b:56:3c:
                    6e:5c:09:e4:9c:46:3b:e8:29:e2:04:91:a2:11:85:
                    33:29:ab:a7:d1:57:dd:d3:db:c9:5c:ba:c5:4f:54:
                    25:72:8a:ac:74:fa:99:0a:aa:1f:f5:c4:53:2b:a3:
                    f6:1e:c1:5f:ba:69:a9:2f:06:53:4f:b0:58:87:12:
                    9a:4d:68:85:29:ae:b1:5a:0c:c2:11:68:aa:89:93:
                    3b:b4:bb:fc:d6:6e:a0:00:72:c8:fe:4a:f8:65:9e:
                    9e:36:2a:1b:e7:24:71:27:1d:34:8c:9a:57:41:a9:
                    8b:eb:77:78:6a:19:21:10:2f:48:81:20:9f:76:64:
                    bb:d4:96:87:91:01:e2:fd:fc:af:f2:f7:15:79:11:
                    3e:07:46:c7:9d:85:c8:b1:0d:e0:50:b3:59:24:33:
                    84:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:10:15:4C:2B:F9:AC:5C:EE:65:A4:89:9E:6C:AC:C8:36:0A:CF:9A
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37332e302f32342d3234203d3e20323035383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.187.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:fa:c5:d1:27:f5:4a:9a:db:4a:22:28:c9:f8:1d:6c:ce:a8:
         90:71:b9:4c:89:f5:bf:45:ed:b3:5b:d9:71:03:36:32:08:e5:
         0a:a9:b3:ac:97:c1:a4:6f:64:7f:11:1b:36:dc:22:4c:c7:73:
         59:ad:ff:fb:8f:6b:2b:5b:e7:1b:76:2c:17:c4:96:14:e3:6d:
         f7:04:1d:fe:98:1e:6f:2d:49:81:56:a5:4f:38:32:29:e3:f9:
         51:4a:c0:86:19:93:81:c8:10:31:89:5d:d1:61:ac:be:05:d7:
         c8:38:77:b1:a9:27:6b:36:00:85:3c:14:2c:cc:cc:eb:ae:3b:
         0d:47:c8:86:a8:61:77:84:ca:3f:3f:bc:26:e6:78:2c:8b:cd:
         a1:70:02:5c:91:f1:7a:fb:c9:f1:47:4f:6c:cd:5f:f5:c9:75:
         58:a2:4f:50:42:7c:62:4b:a5:26:96:7d:c7:8b:0e:52:21:2f:
         58:59:72:3d:08:72:37:83:0c:20:d4:f9:53:8d:e6:d1:1b:c4:
         16:bc:f9:15:9b:e7:fe:55:21:ad:7a:58:4f:53:e2:e4:0e:85:
         7c:3c:65:86:66:5f:6b:fe:d5:f8:92:6e:f3:60:3b:5b:43:ee:
         fa:6f:68:e0:78:12:bb:9d:7b:79:75:c5:20:cd:81:1d:07:77:
         01:91:1f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----