Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231342e39382e302f32342d3234203d3e20323132373335.roa
File:                     3138352e3231342e39382e302f32342d3234203d3e20323132373335.roa (raw, json)
Hash identifier:          NqG44h7kUp0S/kvcTW5dZXSJpiXoeZUyuKes63f7pSE=
Subject key identifier:   21:E3:85:EE:50:A6:92:41:52:1F:DA:EB:A3:E3:7C:FB:E4:5C:DF:E0
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       56852531468A72DD25F4E3D47C60DE7F1AE9214C
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231342e39382e302f32342d3234203d3e20323132373335.roa
Signing time:             Fri 27 Nov 2020 15:10:36 +0000
ROA not before:           Fri 27 Nov 2020 15:05:36 +0000
ROA not after:            Fri 26 Nov 2021 15:10:36 +0000
asID:                     212735
IP address blocks:        185.214.98.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:85:25:31:46:8a:72:dd:25:f4:e3:d4:7c:60:de:7f:1a:e9:21:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 27 15:05:36 2020 GMT
            Not After : Nov 26 15:10:36 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:29:b5:69:d6:77:fc:44:44:1c:13:eb:45:c8:
                    7d:4e:99:fd:89:e5:e7:82:65:69:9b:75:9e:b4:5f:
                    b2:60:25:4d:11:b8:f6:af:84:5e:87:a0:08:09:7d:
                    95:91:fd:f4:8b:8b:67:89:13:6a:82:e3:5f:68:72:
                    30:05:65:19:17:e6:46:95:7d:39:ab:3a:f3:5a:90:
                    41:a7:81:70:60:64:34:59:a7:51:83:e7:a0:cf:d8:
                    2c:cb:38:d1:d3:34:8f:d9:bd:aa:2b:d8:9e:ac:8a:
                    79:ac:0e:0d:b2:4e:df:f3:96:15:6b:ec:61:3d:0a:
                    47:d7:f5:86:e4:21:7f:76:ec:30:97:17:f3:b4:07:
                    e1:9e:90:e8:2a:cc:9c:24:a0:fe:e4:4a:88:72:e4:
                    d4:e3:d3:f9:fe:ce:13:fc:29:cd:0d:d9:9d:f9:93:
                    8b:ae:03:d4:7b:f0:90:04:9a:f4:59:b8:1c:ac:3f:
                    f1:04:ed:66:85:12:a8:4a:94:46:5b:d4:99:d9:24:
                    3c:ef:43:cc:90:41:d2:40:81:62:76:18:78:07:7f:
                    e5:96:9c:b5:c3:8d:db:f1:68:70:6f:b5:d9:a3:0c:
                    01:1b:25:07:67:4b:f8:a9:25:31:70:14:21:fb:ef:
                    47:8d:dd:f0:db:38:85:55:10:6d:d1:3f:42:a3:bb:
                    65:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E3:85:EE:50:A6:92:41:52:1F:DA:EB:A3:E3:7C:FB:E4:5C:DF:E0
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231342e39382e302f32342d3234203d3e20323132373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.214.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:e6:62:70:36:0f:bb:3b:48:e6:9d:d6:97:3d:ce:3b:4f:0f:
         32:4e:1f:db:88:15:28:3e:75:f0:b4:ed:98:e6:99:d0:26:61:
         82:88:75:d3:eb:c4:2b:28:2d:90:5d:48:b1:62:95:e6:bd:02:
         32:c6:81:90:12:18:c2:99:89:13:ae:56:60:89:15:5c:06:8a:
         3a:1f:b2:0e:54:ff:bc:5a:fa:46:db:6d:bd:b2:07:93:f0:9f:
         59:2e:7a:75:d4:a2:18:da:68:0c:5c:c6:4e:31:e6:d5:ed:0f:
         bf:99:7a:f8:99:15:3b:ff:c9:fb:7e:46:e8:4d:a3:2d:3a:07:
         84:83:b8:4c:fe:51:d4:26:7f:4b:b5:91:80:68:a6:0f:93:c1:
         1f:65:b8:cd:85:1e:b9:23:50:e6:fa:94:a6:93:3d:c9:2d:95:
         aa:a9:aa:eb:ee:cc:04:91:86:fe:d4:38:c8:9a:77:35:94:29:
         69:ad:96:63:4c:13:6a:41:03:bc:94:d8:4e:08:29:16:bb:ee:
         74:2b:e5:bb:cc:a3:4e:5a:ac:87:b3:71:b8:14:69:74:b7:2a:
         fc:00:55:00:27:54:0d:a6:93:cc:a8:5d:6c:1c:b3:b8:d2:a9:
         91:55:cd:08:40:8b:ac:f4:50:b7:c0:3d:fa:81:1d:bb:ab:0e:
         ea:19:da:94
-----BEGIN CERTIFICATE-----
MIIG5TCCBc2gAwIBAgIUVoUlMUaKct0l9OPUfGDefxrpIUwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMDExMjcxNTA1MzZaFw0yMTExMjYxNTEwMzZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTMyOUI1NjlENjc3RkM0NDQ0
MUMxM0VCNDVDODdENEU5OUZEODlFNUU3ODI2NTY5OUI3NTlFQjQ1RkIyNjAyNTRE
MTFCOEY2QUY4NDVFODdBMDA4MDk3RDk1OTFGREY0OEI4QjY3ODkxMzZBODJFMzVG
Njg3MjMwMDU2NTE5MTdFNjQ2OTU3RDM5QUIzQUYzNUE5MDQxQTc4MTcwNjA2NDM0
NTlBNzUxODNFN0EwQ0ZEODJDQ0IzOEQxRDMzNDhGRDlCREFBMkJEODlFQUM4QTc5
QUMwRTBEQjI0RURGRjM5NjE1NkJFQzYxM0QwQTQ3RDdGNTg2RTQyMTdGNzZFQzMw
OTcxN0YzQjQwN0UxOUU5MEU4MkFDQzlDMjRBMEZFRTQ0QTg4NzJFNEQ0RTNEM0Y5
RkVDRTEzRkMyOUNEMEREOTlERjk5MzhCQUUwM0Q0N0JGMDkwMDQ5QUY0NTlCODFD
QUMzRkYxMDRFRDY2ODUxMkE4NEE5NDQ2NUJENDk5RDkyNDNDRUY0M0NDOTA0MUQy
NDA4MTYyNzYxODc4MDc3RkU1OTY5Q0I1QzM4RERCRjE2ODcwNkZCNUQ5QTMwQzAx
MUIyNTA3Njc0QkY4QTkyNTMxNzAxNDIxRkJFRjQ3OEREREYwREIzODg1NTUxMDZE
RDEzRjQyQTNCQjY1ODEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAoym1adZ3/EREHBPrRch9Tpn9ieXngmVpm3WetF+yYCVNEbj2r4Re
h6AICX2Vkf30i4tniRNqguNfaHIwBWUZF+ZGlX05qzrzWpBBp4FwYGQ0WadRg+eg
z9gsyzjR0zSP2b2qK9ierIp5rA4Nsk7f85YVa+xhPQpH1/WG5CF/duwwlxfztAfh
npDoKsycJKD+5EqIcuTU49P5/s4T/CnNDdmd+ZOLrgPUe/CQBJr0WbgcrD/xBO1m
hRKoSpRGW9SZ2SQ870PMkEHSQIFidhh4B3/llpy1w43b8Whwb7XZowwBGyUHZ0v4
qSUxcBQh++9Hjd3w2ziFVRBt0T9Co7tlgQIDAQABo4IB8zCCAe8wHQYDVR0OBBYE
FCHjhe5QppJBUh/a66PjfPvkXN/gMB8GA1UdIwQYMBaAFKa2XUcJ9s/ZmaKHeJOS
uqbTpdzqMA4GA1UdDwEB/wQEAwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC80L0E2QjY1
RDQ3MDlGNkNGRDk5OUEyODc3ODkzOTJCQUE2RDNBNURDRUEuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9wclpkUnduMno5bVpvb2Q0azVLNnB0T2wzT28uY2VyMIGK
BggrBgEFBQcBCwR+MHwwegYIKwYBBQUHMAuGbnJzeW5jOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0LzQvMzEzODM1MmUzMjMxMzQyZTM5
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzNzMzMzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC51mIwDQYJKoZIhvcNAQELBQADggEBADXmYnA2D7s7SOad1pc9zjtPDzJOH9uI
FSg+dfC07ZjmmdAmYYKIddPrxCsoLZBdSLFilea9AjLGgZASGMKZiROuVmCJFVwG
ijofsg5U/7xa+kbbbb2yB5Pwn1kuenXUohjaaAxcxk4x5tXtD7+ZeviZFTv/yft+
RuhNoy06B4SDuEz+UdQmf0u1kYBopg+TwR9luM2FHrkjUOb6lKaTPcktlaqpquvu
zASRhv7UOMiadzWUKWmtlmNME2pBA7yU2E4IKRa77nQr5bvMo05arIezcbgUaXS3
KvwAVQAnVA2mk8yoXWwcs7jSqZFVzQhAi6z0ULfAPfqBHburDuoZ2pQ=
-----END CERTIFICATE-----