Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/AS50673.roa
File:                     AS50673.roa (raw, json)
Hash identifier:          AkNtZeK1vY4jC072awgv1QmAov0odvRLNN3fQH/D1Ho=
Subject key identifier:   9A:AF:D7:A8:F7:13:42:2D:71:89:68:A8:56:C1:08:AF:97:05:60:79
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       742E2207C75F8B92F1F556E8328729FAF8435D07
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/AS50673.roa
Signing time:             Thu 26 Nov 2020 17:56:37 +0000
ROA not before:           Thu 26 Nov 2020 17:51:37 +0000
ROA not after:            Thu 25 Nov 2021 17:56:37 +0000
asID:                     50673
IP address blocks:        31.187.64.0/24 maxlen: 24
                          31.187.76.0/24 maxlen: 24
                          31.220.4.0/24 maxlen: 24
                          31.220.6.0/24 maxlen: 24
                          31.220.30.0/24 maxlen: 24
                          31.220.42.0/24 maxlen: 24
                          31.220.43.0/24 maxlen: 24
                          31.220.44.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:2e:22:07:c7:5f:8b:92:f1:f5:56:e8:32:87:29:fa:f8:43:5d:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 26 17:51:37 2020 GMT
            Not After : Nov 25 17:56:37 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a0:f1:ca:df:da:09:23:11:c5:9c:93:d0:52:
                    09:18:8b:0c:41:17:a7:b6:70:de:9f:00:29:7b:5d:
                    c3:20:6d:16:e5:c9:9c:6d:ad:2b:ae:79:d0:ea:94:
                    be:43:b3:cc:9b:0e:5a:30:32:24:61:87:72:f0:33:
                    8a:55:55:55:72:e9:ab:bf:c0:ad:bc:00:84:6a:84:
                    18:cc:3b:76:bc:10:4e:86:22:f5:57:6a:5c:c0:b4:
                    69:9d:18:c5:d5:a6:ca:30:e5:2b:2f:07:19:52:1a:
                    5c:15:f8:b8:b3:c1:27:39:3b:50:99:81:10:4e:6d:
                    04:cd:4a:ae:49:b5:62:38:55:37:6c:26:29:48:be:
                    2e:28:40:bd:12:d5:d0:e2:a5:f1:01:98:38:3a:f7:
                    54:1c:19:58:5f:01:9f:b5:1a:4d:f3:2b:fb:df:6b:
                    f5:c9:a7:66:47:c7:f4:99:46:1a:12:7d:d9:d6:f9:
                    0d:34:5a:ce:13:72:48:07:c9:76:0c:5e:9d:4b:a7:
                    a2:35:52:99:dd:c5:5b:c5:1a:7b:b1:30:ec:41:1f:
                    bc:e0:da:44:4e:9d:00:f6:eb:aa:11:4c:3a:4f:c5:
                    45:a4:0d:d3:91:98:ff:9e:e8:12:68:3f:4c:79:47:
                    f9:b8:60:0f:c1:cc:8a:81:32:12:85:25:7a:8f:c7:
                    de:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:AF:D7:A8:F7:13:42:2D:71:89:68:A8:56:C1:08:AF:97:05:60:79
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/AS50673.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.187.64.0/24
                  31.187.76.0/24
                  31.220.4.0/24
                  31.220.6.0/24
                  31.220.30.0/24
                  31.220.42.0-31.220.45.255

    Signature Algorithm: sha256WithRSAEncryption
         7a:3b:25:d0:31:0b:57:b1:c6:34:d2:67:91:a9:34:fa:38:d7:
         1d:9c:fe:69:5a:b9:82:59:11:c0:69:b0:00:7c:01:4e:69:61:
         09:cc:86:44:3c:52:b3:d1:91:ae:ae:1c:d3:15:f3:75:52:df:
         f3:21:0e:2a:92:82:c8:12:87:9f:8f:8b:ed:75:bf:e3:56:49:
         7f:23:7c:be:f6:20:2a:7a:13:3b:38:0d:4c:d1:79:64:d8:11:
         95:93:bc:03:66:63:19:40:17:f1:bd:91:98:16:96:2a:38:60:
         0e:2d:c4:fb:4a:5b:b2:b1:27:f9:ad:ab:83:e5:5b:cf:8a:9a:
         fa:f1:18:18:51:67:47:aa:5c:0f:44:f5:2c:fe:b3:53:11:6f:
         c3:c5:54:c4:c3:0f:d3:e5:76:84:d1:f7:42:5a:94:6b:6a:b8:
         59:1d:d5:91:f4:71:41:5a:fb:df:07:b9:e3:fb:5d:40:93:04:
         ee:00:f3:81:fb:9b:55:39:7d:3c:08:0a:e1:0e:58:9d:f6:10:
         b6:12:c0:ce:4a:a2:29:de:c9:00:77:7b:0e:87:5c:6a:75:5b:
         10:89:f8:fa:36:a9:7b:08:f0:a1:fd:3a:16:a3:65:54:01:ac:
         40:50:af:ba:e0:47:ba:eb:6f:9b:8c:4c:20:1f:d4:60:c4:5a:
         61:40:15:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----