Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/163/3139332e3136302e3131382e302f32332d3233203d3e203631333137.roa
File:                     3139332e3136302e3131382e302f32332d3233203d3e203631333137.roa (raw, json)
Hash identifier:          S564uT3b3DDZv1YsOSmPewpD5f87/HUMQfDQPow2z1A=
Subject key identifier:   45:9C:59:C7:DA:C8:65:38:3F:82:05:CB:A5:32:B7:D4:06:55:72:33
Certificate issuer:       /CN=58929d850c68341e7c7cf8411dcbab66a8ea09d8
Certificate serial:       74FBB4F9C961CA89756725B23907FD1A77B48AEF
Authority key identifier: 58:92:9D:85:0C:68:34:1E:7C:7C:F8:41:1D:CB:AB:66:A8:EA:09:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WJKdhQxoNB58fPhBHcurZqjqCdg.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/163/3139332e3136302e3131382e302f32332d3233203d3e203631333137.roa
Signing time:             Mon 21 Dec 2020 10:26:06 +0000
ROA not before:           Mon 21 Dec 2020 10:21:06 +0000
ROA not after:            Mon 20 Dec 2021 10:26:06 +0000
asID:                     61317
IP address blocks:        193.160.118.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:fb:b4:f9:c9:61:ca:89:75:67:25:b2:39:07:fd:1a:77:b4:8a:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58929d850c68341e7c7cf8411dcbab66a8ea09d8
        Validity
            Not Before: Dec 21 10:21:06 2020 GMT
            Not After : Dec 20 10:26:06 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:97:23:41:c5:5a:d3:48:d4:de:50:d6:d4:7b:
                    60:c5:2b:3f:7a:98:73:05:e4:b9:3a:83:a8:c0:36:
                    39:51:bb:95:6c:64:f4:bf:47:4a:51:02:83:e4:9f:
                    1d:a0:87:fc:c9:6c:a9:6d:89:bb:8d:6f:fb:10:fb:
                    d8:6f:d2:36:66:c1:c9:b2:6d:7b:c1:51:51:64:9c:
                    07:63:63:20:44:5f:4d:29:30:94:a3:8c:19:e4:1e:
                    9d:eb:c4:2c:86:7e:52:3b:6b:da:dc:e4:14:32:5a:
                    51:c2:16:22:79:f2:b3:38:00:05:00:44:86:f4:14:
                    98:7e:38:31:ae:8b:fd:39:18:33:dc:62:e5:75:bd:
                    b3:1a:96:d0:a2:1f:fa:d0:f3:8e:f4:96:28:c3:29:
                    57:36:ec:aa:d0:5e:ea:9d:78:7a:c3:40:45:ac:6d:
                    36:6e:b7:62:a1:19:be:56:73:3e:9d:12:9e:ef:a6:
                    d1:7a:1b:1e:0d:04:a7:ce:97:55:58:c0:1d:8c:54:
                    32:96:0f:37:3b:95:5f:e9:e1:5e:5f:8e:ff:70:d3:
                    d0:1a:54:a6:75:65:38:fe:dd:af:1e:d7:75:e0:92:
                    32:36:d7:aa:2a:33:70:d7:9d:3e:ad:ca:fe:1b:a1:
                    3d:5d:cd:b0:0a:71:fa:f5:44:13:3b:9a:ef:a7:d8:
                    9c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:9C:59:C7:DA:C8:65:38:3F:82:05:CB:A5:32:B7:D4:06:55:72:33
            X509v3 Authority Key Identifier:
                keyid:58:92:9D:85:0C:68:34:1E:7C:7C:F8:41:1D:CB:AB:66:A8:EA:09:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/163/58929D850C68341E7C7CF8411DCBAB66A8EA09D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WJKdhQxoNB58fPhBHcurZqjqCdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/163/3139332e3136302e3131382e302f32332d3233203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.160.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:32:37:6e:04:67:34:e9:52:5b:95:f6:69:e5:6e:47:68:a1:
         cb:ee:fe:ec:3b:7d:8d:5f:98:44:7d:ee:a7:a0:af:39:75:0e:
         0e:47:ea:37:1c:99:57:73:da:19:84:af:c6:f7:d5:3c:18:e8:
         69:66:98:5c:77:5f:aa:90:3e:19:66:0f:3b:3f:df:e8:8d:44:
         f9:23:37:b9:eb:df:68:b9:4d:f8:66:76:79:0b:80:64:24:17:
         1c:74:3f:73:6e:be:26:b5:c0:73:d2:86:6b:d2:c8:bb:bb:45:
         04:bc:e5:f6:c8:10:f1:3c:fe:6b:0e:8f:e7:2e:d3:56:99:8e:
         fc:0d:19:d3:0b:24:50:66:80:ad:09:e7:5d:cd:15:67:3a:0d:
         a1:18:65:24:b5:a5:93:4c:b6:18:69:01:da:97:67:e9:b1:e9:
         91:84:7c:41:3e:99:e6:7e:6e:e4:5b:fc:d9:25:ac:0e:c0:66:
         f1:1d:8e:5b:c4:b0:17:bb:41:ce:78:51:46:ea:36:0f:29:0e:
         12:c0:18:6b:a6:0a:79:40:77:95:64:bb:ee:0e:1c:56:05:b0:
         61:93:89:e8:6d:c6:c2:81:ae:dd:0a:8b:cd:ae:e9:61:be:47:
         b1:72:88:3b:03:45:e8:b6:6a:a2:8a:51:c4:ab:57:11:e0:64:
         ca:09:e3:a4
-----BEGIN CERTIFICATE-----
MIIG6jCCBdKgAwIBAgIUdPu0+clhyol1ZyWyOQf9Gne0iu8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTg5MjlkODUwYzY4MzQxZTdjN2NmODQxMWRjYmFiNjZh
OGVhMDlkODAeFw0yMDEyMjExMDIxMDZaFw0yMTEyMjAxMDI2MDZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjg5NzIzNDFDNTVBRDM0OEQ0
REU1MEQ2RDQ3QjYwQzUyQjNGN0E5ODczMDVFNEI5M0E4M0E4QzAzNjM5NTFCQjk1
NkM2NEY0QkY0NzRBNTEwMjgzRTQ5RjFEQTA4N0ZDQzk2Q0E5NkQ4OUJCOEQ2RkZC
MTBGQkQ4NkZEMjM2NjZDMUM5QjI2RDdCQzE1MTUxNjQ5QzA3NjM2MzIwNDQ1RjRE
MjkzMDk0QTM4QzE5RTQxRTlERUJDNDJDODY3RTUyM0I2QkRBRENFNDE0MzI1QTUx
QzIxNjIyNzlGMkIzMzgwMDA1MDA0NDg2RjQxNDk4N0UzODMxQUU4QkZEMzkxODMz
REM2MkU1NzVCREIzMUE5NkQwQTIxRkZBRDBGMzhFRjQ5NjI4QzMyOTU3MzZFQ0FB
RDA1RUVBOUQ3ODdBQzM0MDQ1QUM2RDM2NkVCNzYyQTExOUJFNTY3MzNFOUQxMjlF
RUZBNkQxN0ExQjFFMEQwNEE3Q0U5NzU1NThDMDFEOEM1NDMyOTYwRjM3M0I5NTVG
RTlFMTVFNUY4RUZGNzBEM0QwMUE1NEE2NzU2NTM4RkVEREFGMUVENzc1RTA5MjMy
MzZEN0FBMkEzMzcwRDc5RDNFQURDQUZFMUJBMTNENURDREIwMEE3MUZBRjU0NDEz
M0I5QUVGQTdEODlDQjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuJcjQcVa00jU3lDW1HtgxSs/ephzBeS5OoOowDY5UbuVbGT0v0dK
UQKD5J8doIf8yWypbYm7jW/7EPvYb9I2ZsHJsm17wVFRZJwHY2MgRF9NKTCUo4wZ
5B6d68Qshn5SO2va3OQUMlpRwhYiefKzOAAFAESG9BSYfjgxrov9ORgz3GLldb2z
GpbQoh/60POO9JYowylXNuyq0F7qnXh6w0BFrG02brdioRm+VnM+nRKe76bRehse
DQSnzpdVWMAdjFQylg83O5Vf6eFeX47/cNPQGlSmdWU4/t2vHtd14JIyNteqKjNw
150+rcr+G6E9Xc2wCnH69UQTO5rvp9ictwIDAQABo4IB+DCCAfQwHQYDVR0OBBYE
FEWcWcfayGU4P4IFy6Uyt9QGVXIzMB8GA1UdIwQYMBaAFFiSnYUMaDQefHz4QR3L
q2ao6gnYMA4GA1UdDwEB/wQEAwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xNjMvNTg5
MjlEODUwQzY4MzQxRTdDN0NGODQxMURDQkFCNjZBOEVBMDlEOC5jcmwwZAYIKwYB
BQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVw
b3NpdG9yeS9ERUZBVUxUL1dKS2RoUXhvTkI1OGZQaEJIY3VyWnFqcUNkZy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraTEudGVy
cmF0cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0LzE2My8zMTM5MzMyZTMxMzYz
MDJlMzEzMTM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzYzMTMzMzEzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAcGgdjANBgkqhkiG9w0BAQsFAAOCAQEASDI3bgRnNOlSW5X2aeVuR2ih
y+7+7Dt9jV+YRH3up6CvOXUODkfqNxyZV3PaGYSvxvfVPBjoaWaYXHdfqpA+GWYP
Oz/f6I1E+SM3uevfaLlN+GZ2eQuAZCQXHHQ/c26+JrXAc9KGa9LIu7tFBLzl9sgQ
8Tz+aw6P5y7TVpmO/A0Z0wskUGaArQnnXc0VZzoNoRhlJLWlk0y2GGkB2pdn6bHp
kYR8QT6Z5n5u5Fv82SWsDsBm8R2OW8SwF7tBznhRRuo2DykOEsAYa6YKeUB3lWS7
7g4cVgWwYZOJ6G3GwoGu3QqLza7pYb5HsXKIOwNF6LZqoopRxKtXEeBkygnjpA==
-----END CERTIFICATE-----