Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3136342e302f32342d3234203d3e203631333137.roa
File:                     3138352e3231352e3136342e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          0zW5rxvApaZcp5BwMi5d2FGiB1LMPL3+Phq84ACxk8U=
Subject key identifier:   D7:D4:1B:A9:64:BA:FD:EF:38:1E:2B:FF:05:C0:72:DB:2B:2B:6D:F0
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       0660ECA7FAE0283DD68DE1EDDD237067AFBFB900
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3136342e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 27 Nov 2020 15:10:33 +0000
ROA not before:           Fri 27 Nov 2020 15:05:33 +0000
ROA not after:            Fri 26 Nov 2021 15:10:33 +0000
asID:                     61317
IP address blocks:        185.215.164.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:60:ec:a7:fa:e0:28:3d:d6:8d:e1:ed:dd:23:70:67:af:bf:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 27 15:05:33 2020 GMT
            Not After : Nov 26 15:10:33 2021 GMT
        Subject: CN=3082010A0282010100B6DA505B3A524E1D76358A905EEA0D243E2F5E62A1C96C3BB2819D0E3BCF82E32581A9631AD9FC9FFBDE41131BF6A8C4FFA09C7272EE64A964E6E74F8B81EF70158CC400831993A25848BD8E3C4F9C17B14AB9D6959CF193890284FD278EF77F0692C50A63C97B647F96DF0EC2D909229043157803FE06379B70A32BECB4EE2BAA2623923B499436B43145B1A68F651D0FD82E667CE4E212FF2F3D0DB258104C74862FE03D4D8FB853C47E106CDAA0065AF8A31446FE7A6D9F0D606401C84B5ECA4F8680E3F2D5BDC16347FF2AEEB2394E3FC51153842D41C1AAACD59956C429967BBBF7B30A0CDDAB7EAFFEB04D4991316CFCB65948415491DF816906A921110203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:da:50:5b:3a:52:4e:1d:76:35:8a:90:5e:ea:
                    0d:24:3e:2f:5e:62:a1:c9:6c:3b:b2:81:9d:0e:3b:
                    cf:82:e3:25:81:a9:63:1a:d9:fc:9f:fb:de:41:13:
                    1b:f6:a8:c4:ff:a0:9c:72:72:ee:64:a9:64:e6:e7:
                    4f:8b:81:ef:70:15:8c:c4:00:83:19:93:a2:58:48:
                    bd:8e:3c:4f:9c:17:b1:4a:b9:d6:95:9c:f1:93:89:
                    02:84:fd:27:8e:f7:7f:06:92:c5:0a:63:c9:7b:64:
                    7f:96:df:0e:c2:d9:09:22:90:43:15:78:03:fe:06:
                    37:9b:70:a3:2b:ec:b4:ee:2b:aa:26:23:92:3b:49:
                    94:36:b4:31:45:b1:a6:8f:65:1d:0f:d8:2e:66:7c:
                    e4:e2:12:ff:2f:3d:0d:b2:58:10:4c:74:86:2f:e0:
                    3d:4d:8f:b8:53:c4:7e:10:6c:da:a0:06:5a:f8:a3:
                    14:46:fe:7a:6d:9f:0d:60:64:01:c8:4b:5e:ca:4f:
                    86:80:e3:f2:d5:bd:c1:63:47:ff:2a:ee:b2:39:4e:
                    3f:c5:11:53:84:2d:41:c1:aa:ac:d5:99:56:c4:29:
                    96:7b:bb:f7:b3:0a:0c:dd:ab:7e:af:fe:b0:4d:49:
                    91:31:6c:fc:b6:59:48:41:54:91:df:81:69:06:a9:
                    21:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D4:1B:A9:64:BA:FD:EF:38:1E:2B:FF:05:C0:72:DB:2B:2B:6D:F0
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231352e3136342e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.215.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:5f:8b:7e:e8:ef:dd:fd:a5:c9:3f:27:c8:dc:d5:6f:bc:8e:
         a0:f9:9a:40:37:d3:e2:f2:16:50:4a:4c:d0:16:bd:69:3c:e8:
         3c:4c:81:c9:69:88:65:52:61:cf:2c:0a:d8:b4:df:e5:1b:51:
         38:74:e5:f6:24:22:b1:f3:92:df:95:04:ec:50:45:dc:e6:9c:
         f4:72:cf:2d:e0:d3:fc:3e:2a:c5:26:1c:21:ad:fb:e7:ad:11:
         75:e8:75:d6:21:4c:c9:b6:3d:89:d4:ea:68:4e:c9:8f:83:b4:
         45:22:cb:d2:0a:e8:9f:4b:bc:91:0c:7c:bf:e5:0a:a9:ba:3d:
         86:3c:a9:ad:5c:f5:db:6f:4c:f9:f4:09:b2:3e:51:59:9b:69:
         73:70:a1:b2:42:7d:17:07:6e:c7:b0:52:91:c3:02:57:fc:bf:
         86:ce:7a:cc:ef:99:2c:28:ec:91:a1:50:ce:68:79:f8:e7:46:
         8b:97:73:f0:b1:70:fa:88:20:a8:38:5c:7f:54:2f:43:db:1d:
         95:3b:16:86:3a:05:1c:df:00:3e:53:ba:08:d2:f8:7a:17:99:
         46:84:b8:a5:41:34:d0:71:f7:2c:73:3b:80:ff:b6:33:5d:99:
         e7:6c:a0:39:93:0c:f8:74:57:c6:2a:73:f6:30:d3:c3:17:d3:
         00:d9:c4:50
-----BEGIN CERTIFICATE-----
MIIG5TCCBc2gAwIBAgIUBmDsp/rgKD3WjeHt3SNwZ6+/uQAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMDExMjcxNTA1MzNaFw0yMTExMjYxNTEwMzNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjZEQTUwNUIzQTUyNEUxRDc2
MzU4QTkwNUVFQTBEMjQzRTJGNUU2MkExQzk2QzNCQjI4MTlEMEUzQkNGODJFMzI1
ODFBOTYzMUFEOUZDOUZGQkRFNDExMzFCRjZBOEM0RkZBMDlDNzI3MkVFNjRBOTY0
RTZFNzRGOEI4MUVGNzAxNThDQzQwMDgzMTk5M0EyNTg0OEJEOEUzQzRGOUMxN0Ix
NEFCOUQ2OTU5Q0YxOTM4OTAyODRGRDI3OEVGNzdGMDY5MkM1MEE2M0M5N0I2NDdG
OTZERjBFQzJEOTA5MjI5MDQzMTU3ODAzRkUwNjM3OUI3MEEzMkJFQ0I0RUUyQkFB
MjYyMzkyM0I0OTk0MzZCNDMxNDVCMUE2OEY2NTFEMEZEODJFNjY3Q0U0RTIxMkZG
MkYzRDBEQjI1ODEwNEM3NDg2MkZFMDNENEQ4RkI4NTNDNDdFMTA2Q0RBQTAwNjVB
RjhBMzE0NDZGRTdBNkQ5RjBENjA2NDAxQzg0QjVFQ0E0Rjg2ODBFM0YyRDVCREMx
NjM0N0ZGMkFFRUIyMzk0RTNGQzUxMTUzODQyRDQxQzFBQUFDRDU5OTU2QzQyOTk2
N0JCQkY3QjMwQTBDRERBQjdFQUZGRUIwNEQ0OTkxMzE2Q0ZDQjY1OTQ4NDE1NDkx
REY4MTY5MDZBOTIxMTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAttpQWzpSTh12NYqQXuoNJD4vXmKhyWw7soGdDjvPguMlgaljGtn8
n/veQRMb9qjE/6CccnLuZKlk5udPi4HvcBWMxACDGZOiWEi9jjxPnBexSrnWlZzx
k4kChP0njvd/BpLFCmPJe2R/lt8OwtkJIpBDFXgD/gY3m3CjK+y07iuqJiOSO0mU
NrQxRbGmj2UdD9guZnzk4hL/Lz0NslgQTHSGL+A9TY+4U8R+EGzaoAZa+KMURv56
bZ8NYGQByEteyk+GgOPy1b3BY0f/Ku6yOU4/xRFThC1Bwaqs1ZlWxCmWe7v3swoM
3at+r/6wTUmRMWz8tllIQVSR34FpBqkhEQIDAQABo4IB8zCCAe8wHQYDVR0OBBYE
FNfUG6lkuv3vOB4r/wXActsrK23wMB8GA1UdIwQYMBaAFKa2XUcJ9s/ZmaKHeJOS
uqbTpdzqMA4GA1UdDwEB/wQEAwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC80L0E2QjY1
RDQ3MDlGNkNGRDk5OUEyODc3ODkzOTJCQUE2RDNBNURDRUEuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9wclpkUnduMno5bVpvb2Q0azVLNnB0T2wzT28uY2VyMIGK
BggrBgEFBQcBCwR+MHwwegYIKwYBBQUHMAuGbnJzeW5jOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0LzQvMzEzODM1MmUzMjMxMzUyZTMx
MzYzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzEzMzMxMzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC516QwDQYJKoZIhvcNAQELBQADggEBAApfi37o7939pck/J8jc1W+8jqD5mkA3
0+LyFlBKTNAWvWk86DxMgclpiGVSYc8sCti03+UbUTh05fYkIrHzkt+VBOxQRdzm
nPRyzy3g0/w+KsUmHCGt++etEXXoddYhTMm2PYnU6mhOyY+DtEUiy9IK6J9LvJEM
fL/lCqm6PYY8qa1c9dtvTPn0CbI+UVmbaXNwobJCfRcHbsewUpHDAlf8v4bOeszv
mSwo7JGhUM5oefjnRouXc/CxcPqIIKg4XH9UL0PbHZU7FoY6BRzfAD5TugjS+HoX
mUaEuKVBNNBx9yxzO4D/tjNdmedsoDmTDPh0V8Yqc/Yw08MX0wDZxFA=
-----END CERTIFICATE-----