Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139342e3134372e35382e302f32342d3234203d3e20323132303737.roa
File:                     3139342e3134372e35382e302f32342d3234203d3e20323132303737.roa (raw, json)
Hash identifier:          uEk6v8YwpvAAJnT4j0MzZJOPhHxt6GXeUEvq2nYBI8w=
Subject key identifier:   C3:83:A3:EE:A7:86:C1:C6:A7:3E:BD:E5:89:3B:D9:82:3E:75:15:09
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       71BE22FA488A12F41232B4C40A793D4CBCE4CA19
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e3134372e35382e302f32342d3234203d3e20323132303737.roa
Signing time:             Thu 31 Dec 2020 18:51:38 +0000
ROA not before:           Thu 31 Dec 2020 18:46:38 +0000
ROA not after:            Thu 30 Dec 2021 18:51:38 +0000
asID:                     212077
IP address blocks:        194.147.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:be:22:fa:48:8a:12:f4:12:32:b4:c4:0a:79:3d:4c:bc:e4:ca:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Dec 31 18:46:38 2020 GMT
            Not After : Dec 30 18:51:38 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a5:de:49:45:59:26:c8:7b:a8:77:66:64:5d:
                    18:4a:b9:6d:e7:37:46:86:a7:81:2e:67:b2:72:e2:
                    6b:ef:e5:13:5b:0c:83:92:c0:e1:51:31:6a:83:2e:
                    e1:57:bd:bd:b6:37:ae:26:99:78:ab:93:02:8b:03:
                    a7:ac:7a:4d:c9:0a:97:ee:6d:5e:ee:5d:11:82:7a:
                    0b:bf:90:fe:1f:f0:63:c4:a4:51:38:97:15:3f:03:
                    16:3b:8b:58:4a:82:ca:ee:79:b6:58:e9:f5:79:10:
                    18:70:eb:35:24:27:77:54:30:00:f9:33:9f:fe:e1:
                    7a:37:fa:4c:87:6d:2a:81:d2:d5:92:fc:ca:77:77:
                    83:23:02:d6:48:1c:e2:75:fd:20:77:ac:b7:bb:d1:
                    a9:f8:17:25:a2:fd:36:bf:71:16:14:92:a9:31:91:
                    41:93:56:4c:b4:a6:2e:c5:aa:f7:50:11:5b:e8:ea:
                    54:d6:b6:ea:36:cd:5d:c1:9f:27:53:87:d4:72:3d:
                    fe:7f:f4:87:1b:62:b0:82:5f:36:c8:77:95:bc:55:
                    66:f3:62:5a:d7:2f:29:8d:a1:f1:9f:1e:51:03:91:
                    58:d9:d0:f4:03:4d:21:c2:76:96:8a:57:2e:9c:13:
                    99:14:45:81:62:ab:e0:9f:23:44:9c:48:8d:98:7e:
                    ff:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:83:A3:EE:A7:86:C1:C6:A7:3E:BD:E5:89:3B:D9:82:3E:75:15:09
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e3134372e35382e302f32342d3234203d3e20323132303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.147.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:0d:87:a0:de:02:53:de:34:8a:9e:f0:bd:2a:0e:89:e4:48:
         7b:20:f7:04:f4:7a:30:b0:d2:1c:c7:18:b9:ab:01:93:8b:c0:
         ab:78:b6:21:19:8b:27:f5:d6:9b:34:85:18:50:f3:84:2d:7e:
         f9:98:ed:6a:f2:db:06:03:1d:7a:47:8a:d6:36:c5:1d:fc:68:
         c1:7c:e9:af:66:bc:1e:64:7b:37:a0:de:1f:36:ad:ae:c1:22:
         37:b7:81:0b:fe:92:c9:d4:2b:c5:c3:ed:78:ea:7c:6b:5c:90:
         47:c7:72:f3:37:8a:c1:6b:cd:30:54:0b:91:c9:05:7e:5b:32:
         f0:7b:e9:92:98:29:56:71:6a:ac:39:88:75:94:ef:5c:ff:a4:
         20:0a:5e:67:7b:e7:e2:ac:21:2b:7c:55:10:ba:22:b4:dc:38:
         e7:4d:bb:dc:e2:a0:2c:e7:87:04:b2:3a:fb:e3:2a:ed:cb:52:
         17:07:19:08:53:8c:16:8f:d6:b7:e0:a9:5f:0b:8b:94:88:cf:
         76:74:bd:db:2d:93:d7:c9:63:9d:8b:af:cf:17:6c:d5:b0:f6:
         ad:9a:08:dc:c9:7b:b0:f0:17:59:33:89:08:a2:5b:10:10:9e:
         06:da:33:b3:5d:ae:fc:5e:c7:c0:84:66:61:9c:3e:89:9a:da:
         86:1e:d6:95
-----BEGIN CERTIFICATE-----
MIIG5TCCBc2gAwIBAgIUcb4i+kiKEvQSMrTECnk9TLzkyhkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdhOGFmMmI1ZmU4MzFmZjU4OWViMzhhZTNjMDI1Y2U4
NzFmMjNlNzAeFw0yMDEyMzExODQ2MzhaFw0yMTEyMzAxODUxMzhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkJBNURFNDk0NTU5MjZDODdC
QTg3NzY2NjQ1RDE4NEFCOTZERTczNzQ2ODZBNzgxMkU2N0IyNzJFMjZCRUZFNTEz
NUIwQzgzOTJDMEUxNTEzMTZBODMyRUUxNTdCREJEQjYzN0FFMjY5OTc4QUI5MzAy
OEIwM0E3QUM3QTREQzkwQTk3RUU2RDVFRUU1RDExODI3QTBCQkY5MEZFMUZGMDYz
QzRBNDUxMzg5NzE1M0YwMzE2M0I4QjU4NEE4MkNBRUU3OUI2NThFOUY1NzkxMDE4
NzBFQjM1MjQyNzc3NTQzMDAwRjkzMzlGRkVFMTdBMzdGQTRDODc2RDJBODFEMkQ1
OTJGQ0NBNzc3NzgzMjMwMkQ2NDgxQ0UyNzVGRDIwNzdBQ0I3QkJEMUE5RjgxNzI1
QTJGRDM2QkY3MTE2MTQ5MkE5MzE5MTQxOTM1NjRDQjRBNjJFQzVBQUY3NTAxMTVC
RThFQTU0RDZCNkVBMzZDRDVEQzE5RjI3NTM4N0Q0NzIzREZFN0ZGNDg3MUI2MkIw
ODI1RjM2Qzg3Nzk1QkM1NTY2RjM2MjVBRDcyRjI5OERBMUYxOUYxRTUxMDM5MTU4
RDlEMEY0MDM0RDIxQzI3Njk2OEE1NzJFOUMxMzk5MTQ0NTgxNjJBQkUwOUYyMzQ0
OUM0ODhEOTg3RUZGM0YwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAu6XeSUVZJsh7qHdmZF0YSrlt5zdGhqeBLmeycuJr7+UTWwyDksDh
UTFqgy7hV729tjeuJpl4q5MCiwOnrHpNyQqX7m1e7l0RgnoLv5D+H/BjxKRROJcV
PwMWO4tYSoLK7nm2WOn1eRAYcOs1JCd3VDAA+TOf/uF6N/pMh20qgdLVkvzKd3eD
IwLWSBzidf0gd6y3u9Gp+Bclov02v3EWFJKpMZFBk1ZMtKYuxar3UBFb6OpU1rbq
Ns1dwZ8nU4fUcj3+f/SHG2Kwgl82yHeVvFVm82Ja1y8pjaHxnx5RA5FY2dD0A00h
wnaWilcunBOZFEWBYqvgnyNEnEiNmH7/PwIDAQABo4IB8zCCAe8wHQYDVR0OBBYE
FMODo+6nhsHGpz695Yk72YI+dRUJMB8GA1UdIwQYMBaAFAeorytf6DH/WJ6ziuPA
Jc6HHyPnMA4GA1UdDwEB/wQEAwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8yLzA3QThB
RjJCNUZFODMxRkY1ODlFQjM4QUUzQzAyNUNFODcxRjIzRTcuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9CNml2SzFfb01mOVluck9LNDhBbHpvY2ZJLWMuY2VyMIGK
BggrBgEFBQcBCwR+MHwwegYIKwYBBQUHMAuGbnJzeW5jOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0LzIvMzEzOTM0MmUzMTM0MzcyZTM1
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzMDM3Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADCkzowDQYJKoZIhvcNAQELBQADggEBAMMNh6DeAlPeNIqe8L0qDonkSHsg9wT0
ejCw0hzHGLmrAZOLwKt4tiEZiyf11ps0hRhQ84QtfvmY7Wry2wYDHXpHitY2xR38
aMF86a9mvB5kezeg3h82ra7BIje3gQv+ksnUK8XD7XjqfGtckEfHcvM3isFrzTBU
C5HJBX5bMvB76ZKYKVZxaqw5iHWU71z/pCAKXmd75+KsISt8VRC6IrTcOOdNu9zi
oCznhwSyOvvjKu3LUhcHGQhTjBaP1rfgqV8Li5SIz3Z0vdstk9fJY52Lr88XbNWw
9q2aCNzJe7DwF1kziQiiWxAQngbaM7Ndrvxex8CEZmGcPoma2oYe1pU=
-----END CERTIFICATE-----