Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38382e302f32322d3232203d3e203631333137.roa
File:                     3139342e3139352e38382e302f32322d3232203d3e203631333137.roa (raw, json)
Hash identifier:          d5l9Q4cYdNyoXihrDmMR3/NDUaRAwKpQQdEFaBb2IF4=
Subject key identifier:   90:5D:83:E4:32:D9:DC:9B:1A:7F:A4:77:49:04:9D:75:E6:FF:40:99
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       642AC43035016BE1CB69678C77D07E9F9CF3E486
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38382e302f32322d3232203d3e203631333137.roa
Signing time:             Thu 17 Feb 2022 19:00:00 +0000
ROA not before:           Thu 17 Feb 2022 18:55:00 +0000
ROA not after:            Thu 16 Feb 2023 19:00:00 +0000
asID:                     61317
IP address blocks:        194.195.88.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:2a:c4:30:35:01:6b:e1:cb:69:67:8c:77:d0:7e:9f:9c:f3:e4:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Feb 17 18:55:00 2022 GMT
            Not After : Feb 16 19:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ee:1b:a1:08:3b:0e:62:4f:2d:f2:ad:72:db:
                    51:09:e4:f8:c6:2f:80:f8:2e:fe:55:64:1c:eb:59:
                    46:60:ef:f3:d0:05:30:24:51:3f:28:cf:7b:a5:c6:
                    9c:7f:a1:c8:df:1c:99:74:8d:4a:38:41:63:7a:e5:
                    12:e7:73:fa:9c:df:93:2b:06:4c:27:05:53:7c:66:
                    80:82:73:d2:02:4f:b1:ee:5d:c1:ce:43:20:2f:26:
                    a0:76:24:50:73:bf:a4:eb:12:a7:88:f7:c5:46:69:
                    1b:52:7f:d7:e6:32:95:cb:a7:54:99:59:cb:53:0b:
                    70:57:43:7f:22:5a:b4:88:40:6e:42:5e:e5:ab:e6:
                    90:2c:6e:f4:6d:23:ad:30:d6:78:a8:75:ed:82:02:
                    3d:fe:a2:ae:90:0e:4d:61:d8:41:f3:fc:1b:94:d8:
                    3a:98:94:90:6e:4b:f7:32:00:c2:b9:15:73:47:a7:
                    32:cf:11:68:aa:14:36:6e:32:3d:fc:fc:59:a2:19:
                    49:51:e9:03:c6:76:c5:07:8e:90:bb:73:a9:47:e9:
                    c1:59:99:b5:41:11:6c:19:1f:4b:81:d1:79:55:2c:
                    60:20:96:75:6a:c6:84:a0:95:f3:60:5d:c2:55:06:
                    81:28:10:52:15:8c:77:18:5f:ab:80:05:47:02:73:
                    ce:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:5D:83:E4:32:D9:DC:9B:1A:7F:A4:77:49:04:9D:75:E6:FF:40:99
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38382e302f32322d3232203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.195.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:06:da:ad:a9:6f:a1:89:c8:6f:52:9c:59:57:dd:9e:57:63:
         7e:c9:74:ad:dc:01:b3:9a:27:48:7e:2d:91:62:cd:0c:aa:19:
         1a:31:43:48:07:28:bd:3a:7e:32:39:3f:4d:c3:d5:17:db:0a:
         18:35:27:f3:c0:6f:2a:0d:7d:8a:4c:c5:57:14:ca:23:6d:fe:
         dc:20:13:f0:d6:91:4d:58:7e:e5:9d:c9:8e:f8:3b:b4:de:fb:
         c4:d3:e2:55:f6:7b:d7:ae:ef:89:17:6c:4c:e1:de:56:a2:fb:
         7a:da:10:04:58:f0:e4:a0:10:18:f4:75:99:fe:41:79:cb:56:
         53:82:dd:df:43:f5:6f:bf:6e:05:0a:74:e8:d5:f8:bb:75:28:
         ff:34:0d:e4:63:2b:68:fd:10:68:10:bd:9f:cf:e5:ab:b2:2e:
         5d:f9:f4:38:05:70:48:9e:0d:7b:14:54:31:87:39:0b:24:3d:
         d7:3c:c6:80:a2:11:57:5b:99:9e:44:59:8f:8d:57:ce:26:26:
         0f:34:a6:d0:1a:a8:6e:01:4f:71:9b:83:ca:26:a6:d1:bb:6a:
         d1:1e:9e:e4:e9:6b:1f:ec:48:99:6a:8e:dd:3e:dd:d9:91:0d:
         1b:c1:a7:27:7c:94:3e:d7:75:0b:b2:4a:59:a7:f8:6d:38:ef:
         28:a7:75:fa
-----BEGIN CERTIFICATE-----
MIIG4zCCBcugAwIBAgIUZCrEMDUBa+HLaWeMd9B+n5zz5IYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjAyMTcxODU1MDBaFw0yMzAyMTYxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRjBFRTFCQTEwODNCMEU2MjRG
MkRGMkFENzJEQjUxMDlFNEY4QzYyRjgwRjgyRUZFNTU2NDFDRUI1OTQ2NjBFRkYz
RDAwNTMwMjQ1MTNGMjhDRjdCQTVDNjlDN0ZBMUM4REYxQzk5NzQ4RDRBMzg0MTYz
N0FFNTEyRTc3M0ZBOUNERjkzMkIwNjRDMjcwNTUzN0M2NjgwODI3M0QyMDI0RkIx
RUU1REMxQ0U0MzIwMkYyNkEwNzYyNDUwNzNCRkE0RUIxMkE3ODhGN0M1NDY2OTFC
NTI3RkQ3RTYzMjk1Q0JBNzU0OTk1OUNCNTMwQjcwNTc0MzdGMjI1QUI0ODg0MDZF
NDI1RUU1QUJFNjkwMkM2RUY0NkQyM0FEMzBENjc4QTg3NUVEODIwMjNERkVBMkFF
OTAwRTRENjFEODQxRjNGQzFCOTREODNBOTg5NDkwNkU0QkY3MzIwMEMyQjkxNTcz
NDdBNzMyQ0YxMTY4QUExNDM2NkUzMjNERkNGQzU5QTIxOTQ5NTFFOTAzQzY3NkM1
MDc4RTkwQkI3M0E5NDdFOUMxNTk5OUI1NDExMTZDMTkxRjRCODFEMTc5NTUyQzYw
MjA5Njc1NkFDNjg0QTA5NUYzNjA1REMyNTUwNjgxMjgxMDUyMTU4Qzc3MTg1RkFC
ODAwNTQ3MDI3M0NFN0YwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA8O4boQg7DmJPLfKtcttRCeT4xi+A+C7+VWQc61lGYO/z0AUwJFE/
KM97pcacf6HI3xyZdI1KOEFjeuUS53P6nN+TKwZMJwVTfGaAgnPSAk+x7l3BzkMg
LyagdiRQc7+k6xKniPfFRmkbUn/X5jKVy6dUmVnLUwtwV0N/Ilq0iEBuQl7lq+aQ
LG70bSOtMNZ4qHXtggI9/qKukA5NYdhB8/wblNg6mJSQbkv3MgDCuRVzR6cyzxFo
qhQ2bjI9/PxZohlJUekDxnbFB46Qu3OpR+nBWZm1QRFsGR9LgdF5VSxgIJZ1asaE
oJXzYF3CVQaBKBBSFYx3GF+rgAVHAnPOfwIDAQABo4IB8TCCAe0wHQYDVR0OBBYE
FJBdg+Qy2dybGn+kd0kEnXXm/0CZMB8GA1UdIwQYMBaAFKa2XUcJ9s/ZmaKHeJOS
uqbTpdzqMA4GA1UdDwEB/wQEAwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC80L0E2QjY1
RDQ3MDlGNkNGRDk5OUEyODc3ODkzOTJCQUE2RDNBNURDRUEuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9wclpkUnduMno5bVpvb2Q0azVLNnB0T2wzT28uY2VyMIGI
BggrBgEFBQcBCwR8MHoweAYIKwYBBQUHMAuGbHJzeW5jOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0LzQvMzEzOTM0MmUzMTM5MzUyZTM4
MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNjMxMzMzMTM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
wsNYMA0GCSqGSIb3DQEBCwUAA4IBAQBABtqtqW+hichvUpxZV92eV2N+yXSt3AGz
midIfi2RYs0MqhkaMUNIByi9On4yOT9Nw9UX2woYNSfzwG8qDX2KTMVXFMojbf7c
IBPw1pFNWH7lncmO+Du03vvE0+JV9nvXru+JF2xM4d5Wovt62hAEWPDkoBAY9HWZ
/kF5y1ZTgt3fQ/Vvv24FCnTo1fi7dSj/NA3kYyto/RBoEL2fz+Wrsi5d+fQ4BXBI
ng17FFQxhzkLJD3XPMaAohFXW5meRFmPjVfOJiYPNKbQGqhuAU9xm4PKJqbRu2rR
Hp7k6Wsf7EiZao7dPt3ZkQ0bwacnfJQ+13ULskpZp/htOO8op3X6
-----END CERTIFICATE-----