Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3139362e32302e302f32332d3233203d3e2030.roa
File:                     3138352e3139362e32302e302f32332d3233203d3e2030.roa (raw, json)
Hash identifier:          ssI2AdUNkDNBHX753SsaJ3urIslCYFnUo6Ffduk+jc8=
Subject key identifier:   F1:3B:72:AA:92:4D:0D:55:42:85:64:B0:17:57:0B:08:18:50:A6:5D
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       0962C126A7766E3A3300A61DA125AFDCAF3E2F50
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3139362e32302e302f32332d3233203d3e2030.roa
Signing time:             Sat 19 Jun 2021 13:49:55 +0000
ROA not before:           Sat 19 Jun 2021 13:44:55 +0000
ROA not after:            Sat 18 Jun 2022 13:49:55 +0000
asID:                     0
IP address blocks:        185.196.20.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:62:c1:26:a7:76:6e:3a:33:00:a6:1d:a1:25:af:dc:af:3e:2f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Jun 19 13:44:55 2021 GMT
            Not After : Jun 18 13:49:55 2022 GMT
        Subject: CN=3082010A0282010100B50A2C2E783E8137CD3F1964EB41D0E32FF31BAD3170903FD419A9D994D379C13A8575D1753BE161E5D359B6451430E23852CEEED44D260EF3342C89D10A904A2683241D1507F38F14D5C910F176CAF8A8DD50586F04CB3515634DD2ACBD375978EDB457858EE0118EFFCAB2F7D12EBCFD0474784BCC48F514DFEE78BBC52E86EFF3DAD5A19BD05D61E9B904F631B0FC1EFEEAABC0933384087F2EBEBAC04A2DDBCD27F336199EF1B1335612CA0E60F0CC6889CDDE9367C805279A4C1853D425541B68CE5BD48697249A3BE95907DFE688F88D6C90C33542BCFEEBA7668B918117725D2111C7D15980B5313FC805D06DE6C87C5356E69DD747491FD629CEC6D90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0a:2c:2e:78:3e:81:37:cd:3f:19:64:eb:41:
                    d0:e3:2f:f3:1b:ad:31:70:90:3f:d4:19:a9:d9:94:
                    d3:79:c1:3a:85:75:d1:75:3b:e1:61:e5:d3:59:b6:
                    45:14:30:e2:38:52:ce:ee:d4:4d:26:0e:f3:34:2c:
                    89:d1:0a:90:4a:26:83:24:1d:15:07:f3:8f:14:d5:
                    c9:10:f1:76:ca:f8:a8:dd:50:58:6f:04:cb:35:15:
                    63:4d:d2:ac:bd:37:59:78:ed:b4:57:85:8e:e0:11:
                    8e:ff:ca:b2:f7:d1:2e:bc:fd:04:74:78:4b:cc:48:
                    f5:14:df:ee:78:bb:c5:2e:86:ef:f3:da:d5:a1:9b:
                    d0:5d:61:e9:b9:04:f6:31:b0:fc:1e:fe:ea:ab:c0:
                    93:33:84:08:7f:2e:be:ba:c0:4a:2d:db:cd:27:f3:
                    36:19:9e:f1:b1:33:56:12:ca:0e:60:f0:cc:68:89:
                    cd:de:93:67:c8:05:27:9a:4c:18:53:d4:25:54:1b:
                    68:ce:5b:d4:86:97:24:9a:3b:e9:59:07:df:e6:88:
                    f8:8d:6c:90:c3:35:42:bc:fe:eb:a7:66:8b:91:81:
                    17:72:5d:21:11:c7:d1:59:80:b5:31:3f:c8:05:d0:
                    6d:e6:c8:7c:53:56:e6:9d:d7:47:49:1f:d6:29:ce:
                    c6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:3B:72:AA:92:4D:0D:55:42:85:64:B0:17:57:0B:08:18:50:A6:5D
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3139362e32302e302f32332d3233203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.196.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:2b:3c:79:00:22:d9:c9:89:da:38:49:3e:44:ce:07:74:86:
         18:ed:c4:35:86:dc:a3:82:34:50:eb:b8:0c:0a:bf:46:61:02:
         9c:1e:ae:87:58:bc:a4:56:f4:53:e1:e3:7d:20:e3:4f:70:f6:
         24:6b:2d:8b:3e:2b:69:99:82:65:8d:72:dc:a5:9d:50:a3:f5:
         60:54:5d:24:1b:1d:7b:2d:9f:f9:8f:22:e2:95:3e:47:6b:10:
         75:b2:8d:74:5f:a6:ae:02:14:d3:66:dd:6f:b0:0e:a2:b0:6a:
         37:d8:87:63:ee:b8:ab:2a:b1:74:f6:92:0a:93:eb:aa:0f:1e:
         ff:6f:da:ea:15:67:98:2e:61:d2:89:55:9c:fd:55:39:6c:b0:
         53:86:c3:34:72:72:e5:35:fe:a8:69:45:76:d9:b0:df:12:9b:
         a4:3c:92:ef:8b:73:10:81:14:93:cd:3d:2c:4e:8c:2b:aa:ce:
         45:25:ec:82:96:5b:8e:bb:98:92:c0:c1:29:ad:41:c6:4c:84:
         f6:18:d6:22:0a:ea:67:33:d8:27:df:dc:21:c1:10:57:bd:1e:
         25:3b:ae:3d:a1:70:6a:b4:8b:87:b2:4f:d2:74:85:eb:14:b7:
         1c:49:00:d3:aa:cd:c3:3d:31:27:70:6d:7f:01:90:be:eb:43:
         f4:7e:5e:ed
-----BEGIN CERTIFICATE-----
MIIG2zCCBcOgAwIBAgIUCWLBJqd2bjozAKYdoSWv3K8+L1AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJkMjljOTk2YWJjYzcyYzcyMjc5ZWY3ODk4Nzk1MWI4
MjVhZTQwMDAeFw0yMTA2MTkxMzQ0NTVaFw0yMjA2MTgxMzQ5NTVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjUwQTJDMkU3ODNFODEzN0NE
M0YxOTY0RUI0MUQwRTMyRkYzMUJBRDMxNzA5MDNGRDQxOUE5RDk5NEQzNzlDMTNB
ODU3NUQxNzUzQkUxNjFFNUQzNTlCNjQ1MTQzMEUyMzg1MkNFRUVENDREMjYwRUYz
MzQyQzg5RDEwQTkwNEEyNjgzMjQxRDE1MDdGMzhGMTRENUM5MTBGMTc2Q0FGOEE4
REQ1MDU4NkYwNENCMzUxNTYzNEREMkFDQkQzNzU5NzhFREI0NTc4NThFRTAxMThF
RkZDQUIyRjdEMTJFQkNGRDA0NzQ3ODRCQ0M0OEY1MTRERkVFNzhCQkM1MkU4NkVG
RjNEQUQ1QTE5QkQwNUQ2MUU5QjkwNEY2MzFCMEZDMUVGRUVBQUJDMDkzMzM4NDA4
N0YyRUJFQkFDMDRBMkREQkNEMjdGMzM2MTk5RUYxQjEzMzU2MTJDQTBFNjBGMEND
Njg4OUNEREU5MzY3QzgwNTI3OUE0QzE4NTNENDI1NTQxQjY4Q0U1QkQ0ODY5NzI0
OUEzQkU5NTkwN0RGRTY4OEY4OEQ2QzkwQzMzNTQyQkNGRUVCQTc2NjhCOTE4MTE3
NzI1RDIxMTFDN0QxNTk4MEI1MzEzRkM4MDVEMDZERTZDODdDNTM1NkU2OURENzQ3
NDkxRkQ2MjlDRUM2RDkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtQosLng+gTfNPxlk60HQ4y/zG60xcJA/1Bmp2ZTTecE6hXXRdTvh
YeXTWbZFFDDiOFLO7tRNJg7zNCyJ0QqQSiaDJB0VB/OPFNXJEPF2yvio3VBYbwTL
NRVjTdKsvTdZeO20V4WO4BGO/8qy99EuvP0EdHhLzEj1FN/ueLvFLobv89rVoZvQ
XWHpuQT2MbD8Hv7qq8CTM4QIfy6+usBKLdvNJ/M2GZ7xsTNWEsoOYPDMaInN3pNn
yAUnmkwYU9QlVBtozlvUhpckmjvpWQff5oj4jWyQwzVCvP7rp2aLkYEXcl0hEcfR
WYC1MT/IBdBt5sh8U1bmnddHSR/WKc7G2QIDAQABo4IB6TCCAeUwHQYDVR0OBBYE
FPE7cqqSTQ1VQoVksBdXCwgYUKZdMB8GA1UdIwQYMBaAFCLSnJlqvMcsciee94mH
lRuCWuQAMA4GA1UdDwEB/wQEAwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8zLzIyRDI5
Qzk5NkFCQ0M3MkM3MjI3OUVGNzg5ODc5NTFCODI1QUU0MDAuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9JdEtjbVdxOHh5eHlKNTczaVllVkc0SmE1QUEuY2VyMIGA
BggrBgEFBQcBCwR0MHIwcAYIKwYBBQUHMAuGZHJzeW5jOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0LzMvMzEzODM1MmUzMTM5MzYyZTMy
MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbnEFDANBgkq
hkiG9w0BAQsFAAOCAQEAMCs8eQAi2cmJ2jhJPkTOB3SGGO3ENYbco4I0UOu4DAq/
RmECnB6uh1i8pFb0U+HjfSDjT3D2JGstiz4raZmCZY1y3KWdUKP1YFRdJBsdey2f
+Y8i4pU+R2sQdbKNdF+mrgIU02bdb7AOorBqN9iHY+64qyqxdPaSCpPrqg8e/2/a
6hVnmC5h0olVnP1VOWywU4bDNHJy5TX+qGlFdtmw3xKbpDyS74tzEIEUk809LE6M
K6rORSXsgpZbjruYksDBKa1BxkyE9hjWIgrqZzPYJ9/cIcEQV70eJTuuPaFwarSL
h7JP0nSF6xS3HEkA06rNwz0xJ3BtfwGQvutD9H5e7Q==
-----END CERTIFICATE-----