Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/111/3139322e3134352e38322e302f32332d3233203d3e203432333636.roa
File:                     3139322e3134352e38322e302f32332d3233203d3e203432333636.roa (raw, json)
Hash identifier:          hyuaXiruFBdZ7V3C2OxoPTdKuhKkkxHAR18KNSbkx/0=
Subject key identifier:   19:67:17:12:CE:DC:4C:58:A7:F4:D2:D4:37:52:0C:B2:F9:73:49:35
Certificate issuer:       /CN=b223a408e7b6c9f8f32b518206da15a0a33f6681
Certificate serial:       3F1C2F442F38FCC23ECA2C746FDCCBD43C1922C3
Authority key identifier: B2:23:A4:08:E7:B6:C9:F8:F3:2B:51:82:06:DA:15:A0:A3:3F:66:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/siOkCOe2yfjzK1GCBtoVoKM_ZoE.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/111/3139322e3134352e38322e302f32332d3233203d3e203432333636.roa
Signing time:             Mon 21 Dec 2020 10:26:30 +0000
ROA not before:           Mon 21 Dec 2020 10:21:30 +0000
ROA not after:            Mon 20 Dec 2021 10:26:30 +0000
asID:                     42366
IP address blocks:        192.145.82.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:1c:2f:44:2f:38:fc:c2:3e:ca:2c:74:6f:dc:cb:d4:3c:19:22:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b223a408e7b6c9f8f32b518206da15a0a33f6681
        Validity
            Not Before: Dec 21 10:21:30 2020 GMT
            Not After : Dec 20 10:26:30 2021 GMT
        Subject: CN=3082010A0282010100C7D2F246BC99F15B2CDD63E4835F6406CFD42178E8B4BF18956FBB7725340FBBEE3C7F367F4A0C92F0F5ED7EC2B991FF267175E33134A92E64203FB1873E3FBA8FEF37AF9E6EFE4D74730A22CBC0B16ED379E0BC265F03855ED3C222F776EE4D9F7ABF4A4E5F3FDBE3734C901A7FBFEF2A1919D7ABAE4AB82EA04E229DE4C392654DE77F2E3B1ED4C28F08179084EE34124379C70FE5F6D5B07315E4401C81C036D66EA9BB3F24095F0F98BAFE89902D3E24F3C42C9F622D93EE448F33A549A7ADDC81A5B24D12CDFE35576B67C809D91D8DA3BD0A0535E0493F3C971A93EA7661D9DC2B3E7009D5F4A39C1052DFEA03E9BCDCB8E05B209FD0F96E956C84405D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d2:f2:46:bc:99:f1:5b:2c:dd:63:e4:83:5f:
                    64:06:cf:d4:21:78:e8:b4:bf:18:95:6f:bb:77:25:
                    34:0f:bb:ee:3c:7f:36:7f:4a:0c:92:f0:f5:ed:7e:
                    c2:b9:91:ff:26:71:75:e3:31:34:a9:2e:64:20:3f:
                    b1:87:3e:3f:ba:8f:ef:37:af:9e:6e:fe:4d:74:73:
                    0a:22:cb:c0:b1:6e:d3:79:e0:bc:26:5f:03:85:5e:
                    d3:c2:22:f7:76:ee:4d:9f:7a:bf:4a:4e:5f:3f:db:
                    e3:73:4c:90:1a:7f:bf:ef:2a:19:19:d7:ab:ae:4a:
                    b8:2e:a0:4e:22:9d:e4:c3:92:65:4d:e7:7f:2e:3b:
                    1e:d4:c2:8f:08:17:90:84:ee:34:12:43:79:c7:0f:
                    e5:f6:d5:b0:73:15:e4:40:1c:81:c0:36:d6:6e:a9:
                    bb:3f:24:09:5f:0f:98:ba:fe:89:90:2d:3e:24:f3:
                    c4:2c:9f:62:2d:93:ee:44:8f:33:a5:49:a7:ad:dc:
                    81:a5:b2:4d:12:cd:fe:35:57:6b:67:c8:09:d9:1d:
                    8d:a3:bd:0a:05:35:e0:49:3f:3c:97:1a:93:ea:76:
                    61:d9:dc:2b:3e:70:09:d5:f4:a3:9c:10:52:df:ea:
                    03:e9:bc:dc:b8:e0:5b:20:9f:d0:f9:6e:95:6c:84:
                    40:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:67:17:12:CE:DC:4C:58:A7:F4:D2:D4:37:52:0C:B2:F9:73:49:35
            X509v3 Authority Key Identifier:
                keyid:B2:23:A4:08:E7:B6:C9:F8:F3:2B:51:82:06:DA:15:A0:A3:3F:66:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/111/B223A408E7B6C9F8F32B518206DA15A0A33F6681.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/siOkCOe2yfjzK1GCBtoVoKM_ZoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/111/3139322e3134352e38322e302f32332d3233203d3e203432333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.145.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:ac:2e:1e:6d:c7:ea:10:e8:9f:1d:91:ed:9b:c2:9a:ae:10:
         8f:6d:88:f2:61:d3:6b:da:c8:9d:ec:eb:67:29:11:03:38:f9:
         8a:34:94:f3:c3:a6:22:00:cf:81:56:c1:32:03:ed:f0:cc:fe:
         f2:61:45:57:63:fa:c1:16:b5:c4:8c:17:ad:e2:08:f6:ac:82:
         d6:da:5c:5d:17:72:8c:2d:69:83:d7:e1:3d:3a:92:aa:4c:17:
         6f:83:be:ed:00:42:ae:23:a6:87:04:f7:02:7e:36:b8:3d:4c:
         e3:42:0d:c1:e1:63:44:ff:e2:df:04:85:a9:2f:59:f0:4b:f1:
         4e:5b:ad:77:a0:1f:e9:9a:7b:38:39:16:10:4a:c5:ec:40:d8:
         81:fd:e7:f6:7b:32:d0:6f:a2:6b:4c:01:90:d9:0f:00:93:c2:
         b3:f2:5f:1c:52:5b:d3:00:64:6a:9d:7c:08:42:8b:f0:fd:26:
         4d:c1:b5:66:69:97:64:91:73:91:2f:4a:65:e3:81:ee:4f:2a:
         8d:08:7e:31:d5:52:b4:b1:c7:9e:3b:91:b3:12:1a:9d:76:da:
         10:b1:00:bb:a6:d4:d7:6c:ce:8f:33:30:f0:38:eb:ef:a6:27:
         78:17:71:ce:0a:59:bc:da:1e:1a:f7:60:74:84:30:ee:ec:1f:
         91:37:07:85
-----BEGIN CERTIFICATE-----
MIIG5zCCBc+gAwIBAgIUPxwvRC84/MI+yix0b9zL1DwZIsMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjIyM2E0MDhlN2I2YzlmOGYzMmI1MTgyMDZkYTE1YTBh
MzNmNjY4MTAeFw0yMDEyMjExMDIxMzBaFw0yMTEyMjAxMDI2MzBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzdEMkYyNDZCQzk5RjE1QjJD
REQ2M0U0ODM1RjY0MDZDRkQ0MjE3OEU4QjRCRjE4OTU2RkJCNzcyNTM0MEZCQkVF
M0M3RjM2N0Y0QTBDOTJGMEY1RUQ3RUMyQjk5MUZGMjY3MTc1RTMzMTM0QTkyRTY0
MjAzRkIxODczRTNGQkE4RkVGMzdBRjlFNkVGRTRENzQ3MzBBMjJDQkMwQjE2RUQz
NzlFMEJDMjY1RjAzODU1RUQzQzIyMkY3NzZFRTREOUY3QUJGNEE0RTVGM0ZEQkUz
NzM0QzkwMUE3RkJGRUYyQTE5MTlEN0FCQUU0QUI4MkVBMDRFMjI5REU0QzM5MjY1
NERFNzdGMkUzQjFFRDRDMjhGMDgxNzkwODRFRTM0MTI0Mzc5QzcwRkU1RjZENUIw
NzMxNUU0NDAxQzgxQzAzNkQ2NkVBOUJCM0YyNDA5NUYwRjk4QkFGRTg5OTAyRDNF
MjRGM0M0MkM5RjYyMkQ5M0VFNDQ4RjMzQTU0OUE3QUREQzgxQTVCMjREMTJDREZF
MzU1NzZCNjdDODA5RDkxRDhEQTNCRDBBMDUzNUUwNDkzRjNDOTcxQTkzRUE3NjYx
RDlEQzJCM0U3MDA5RDVGNEEzOUMxMDUyREZFQTAzRTlCQ0RDQjhFMDVCMjA5RkQw
Rjk2RTk1NkM4NDQwNUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAx9LyRryZ8Vss3WPkg19kBs/UIXjotL8YlW+7dyU0D7vuPH82f0oM
kvD17X7CuZH/JnF14zE0qS5kID+xhz4/uo/vN6+ebv5NdHMKIsvAsW7TeeC8Jl8D
hV7TwiL3du5Nn3q/Sk5fP9vjc0yQGn+/7yoZGderrkq4LqBOIp3kw5JlTed/Ljse
1MKPCBeQhO40EkN5xw/l9tWwcxXkQByBwDbWbqm7PyQJXw+Yuv6JkC0+JPPELJ9i
LZPuRI8zpUmnrdyBpbJNEs3+NVdrZ8gJ2R2No70KBTXgST88lxqT6nZh2dwrPnAJ
1fSjnBBS3+oD6bzcuOBbIJ/Q+W6VbIRAXQIDAQABo4IB9TCCAfEwHQYDVR0OBBYE
FBlnFxLO3ExYp/TS1DdSDLL5c0k1MB8GA1UdIwQYMBaAFLIjpAjntsn48ytRggba
FaCjP2aBMA4GA1UdDwEB/wQEAwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xMTEvQjIy
M0E0MDhFN0I2QzlGOEYzMkI1MTgyMDZEQTE1QTBBMzNGNjY4MS5jcmwwZAYIKwYB
BQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVw
b3NpdG9yeS9ERUZBVUxUL3NpT2tDT2UyeWZqeksxR0NCdG9Wb0tNX1pvRS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpMS50ZXJy
YXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQvMTExLzMxMzkzMjJlMzEzNDM1
MmUzODMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzQzMjMzMzYzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAcCRUjANBgkqhkiG9w0BAQsFAAOCAQEAAqwuHm3H6hDonx2R7ZvCmq4Qj22I
8mHTa9rInezrZykRAzj5ijSU88OmIgDPgVbBMgPt8Mz+8mFFV2P6wRa1xIwXreII
9qyC1tpcXRdyjC1pg9fhPTqSqkwXb4O+7QBCriOmhwT3An42uD1M40INweFjRP/i
3wSFqS9Z8EvxTlutd6Af6Zp7ODkWEErF7EDYgf3n9nsy0G+ia0wBkNkPAJPCs/Jf
HFJb0wBkap18CEKL8P0mTcG1ZmmXZJFzkS9KZeOB7k8qjQh+MdVStLHHnjuRsxIa
nXbaELEAu6bU12zOjzMw8Djr76YneBdxzgpZvNoeGvdgdIQw7uwfkTcHhQ==
-----END CERTIFICATE-----