Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e362e302f32342d3234203d3e203432373038.roa
File:                     33312e3232302e362e302f32342d3234203d3e203432373038.roa (raw, json)
Hash identifier:          97eFGaIsuLPK+WDJ7urLQISkY2mEvjj7DQFBDVHt9y0=
Subject key identifier:   BB:3F:4E:66:88:F5:BC:5D:CD:F7:25:F0:6A:8F:D9:44:D6:B3:13:C8
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       245A66C6B8B656B1AFB9D680D89467F33C01F636
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e362e302f32342d3234203d3e203432373038.roa
Signing time:             Fri 27 Nov 2020 15:10:34 +0000
ROA not before:           Fri 27 Nov 2020 15:05:34 +0000
ROA not after:            Fri 26 Nov 2021 15:10:34 +0000
asID:                     42708
IP address blocks:        31.220.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:5a:66:c6:b8:b6:56:b1:af:b9:d6:80:d8:94:67:f3:3c:01:f6:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 27 15:05:34 2020 GMT
            Not After : Nov 26 15:10:34 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:78:70:77:d3:67:41:38:e3:7f:41:e5:7c:3f:
                    18:67:66:e7:f7:80:c5:a7:73:cb:26:6a:e1:3e:c4:
                    11:8c:86:b5:03:9a:31:54:39:f6:51:89:aa:6a:cc:
                    5d:42:d5:2d:9c:e2:a8:30:21:4c:0c:18:64:3f:67:
                    93:a3:f8:81:eb:d9:fc:e8:f0:84:be:71:e9:4a:85:
                    3c:56:6c:ed:5a:8e:96:a1:d2:20:42:a4:22:97:43:
                    4b:4d:ee:52:d0:d0:c2:a1:d4:fb:e4:0b:d1:6e:95:
                    f1:bd:65:b2:0c:ce:04:2b:eb:22:24:12:49:8a:2f:
                    4f:a9:81:da:d9:16:9c:5f:1a:a8:6d:3e:23:12:39:
                    96:cc:ce:51:1f:e1:32:35:ae:51:13:72:b7:1e:b5:
                    54:0b:0b:f2:74:d4:4f:ee:a6:29:1f:e6:2b:9d:c6:
                    5b:a1:b3:94:92:8d:9a:34:06:8c:5d:90:46:41:69:
                    c4:f8:31:6a:67:7d:39:1f:92:66:53:77:96:f4:45:
                    2c:7e:46:ed:64:31:f0:44:33:48:84:ed:37:c9:52:
                    16:df:46:6c:54:38:93:27:0f:62:bc:fe:6d:4e:4e:
                    ff:d4:45:f4:11:81:05:bf:51:8a:f1:d6:d6:c2:5e:
                    f5:07:8b:d8:6c:a3:9d:5f:ba:84:02:5d:ab:a2:83:
                    ef:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:3F:4E:66:88:F5:BC:5D:CD:F7:25:F0:6A:8F:D9:44:D6:B3:13:C8
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e362e302f32342d3234203d3e203432373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.220.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:27:54:e6:c4:78:46:d4:ff:f6:7b:8b:be:10:43:62:8c:4e:
         97:0b:a0:08:3f:92:b3:c9:70:91:0f:62:de:32:30:d6:56:f4:
         72:1b:f4:12:8b:74:1a:0a:26:92:70:cc:c7:61:db:81:c7:ab:
         83:56:78:75:14:2b:b0:c0:db:45:48:27:d4:61:8a:16:91:e0:
         a2:46:4b:07:34:30:72:28:3f:d1:51:46:43:cd:b3:d2:26:48:
         71:54:32:28:f0:d6:83:a4:e2:18:66:f0:58:06:65:c8:34:fb:
         0a:c1:2d:65:ba:25:a6:60:b3:8e:5c:e0:ad:91:e8:42:fb:fa:
         b2:d7:4a:10:83:b0:ba:af:47:85:e9:70:6a:16:e0:25:b8:13:
         1b:46:41:fb:72:8d:48:0b:b2:1e:ae:f9:d9:c2:d9:26:15:0a:
         95:d3:de:a1:12:ad:26:23:f5:4a:4f:e4:76:10:60:81:1e:55:
         22:be:f5:98:b2:f9:b5:18:d9:71:8f:fb:a6:87:ed:d2:a9:a9:
         63:f0:10:e0:ac:46:a3:1e:40:70:ff:51:dc:69:04:8a:f7:c3:
         4d:a9:d5:94:27:62:27:f1:6f:e1:5f:78:7f:d4:8a:eb:ac:af:
         d9:f7:8b:7a:b6:38:4e:17:e0:51:3b:64:d8:fa:32:27:35:78:
         5b:25:64:2d
-----BEGIN CERTIFICATE-----
MIIG3zCCBcegAwIBAgIUJFpmxri2VrGvudaA2JRn8zwB9jYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMDExMjcxNTA1MzRaFw0yMTExMjYxNTEwMzRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0Y3ODcwNzdEMzY3NDEzOEUz
N0Y0MUU1N0MzRjE4Njc2NkU3Rjc4MEM1QTc3M0NCMjY2QUUxM0VDNDExOEM4NkI1
MDM5QTMxNTQzOUY2NTE4OUFBNkFDQzVENDJENTJEOUNFMkE4MzAyMTRDMEMxODY0
M0Y2NzkzQTNGODgxRUJEOUZDRThGMDg0QkU3MUU5NEE4NTNDNTY2Q0VENUE4RTk2
QTFEMjIwNDJBNDIyOTc0MzRCNERFRTUyRDBEMEMyQTFENEZCRTQwQkQxNkU5NUYx
QkQ2NUIyMENDRTA0MkJFQjIyMjQxMjQ5OEEyRjRGQTk4MURBRDkxNjlDNUYxQUE4
NkQzRTIzMTIzOTk2Q0NDRTUxMUZFMTMyMzVBRTUxMTM3MkI3MUVCNTU0MEIwQkYy
NzRENDRGRUVBNjI5MUZFNjJCOURDNjVCQTFCMzk0OTI4RDlBMzQwNjhDNUQ5MDQ2
NDE2OUM0RjgzMTZBNjc3RDM5MUY5MjY2NTM3Nzk2RjQ0NTJDN0U0NkVENjQzMUYw
NDQzMzQ4ODRFRDM3Qzk1MjE2REY0NjZDNTQzODkzMjcwRjYyQkNGRTZENEU0RUZG
RDQ0NUY0MTE4MTA1QkY1MThBRjFENkQ2QzI1RUY1MDc4QkQ4NkNBMzlENUZCQTg0
MDI1REFCQTI4M0VGODkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAz3hwd9NnQTjjf0HlfD8YZ2bn94DFp3PLJmrhPsQRjIa1A5oxVDn2
UYmqasxdQtUtnOKoMCFMDBhkP2eTo/iB69n86PCEvnHpSoU8VmztWo6WodIgQqQi
l0NLTe5S0NDCodT75AvRbpXxvWWyDM4EK+siJBJJii9PqYHa2RacXxqobT4jEjmW
zM5RH+EyNa5RE3K3HrVUCwvydNRP7qYpH+YrncZbobOUko2aNAaMXZBGQWnE+DFq
Z305H5JmU3eW9EUsfkbtZDHwRDNIhO03yVIW30ZsVDiTJw9ivP5tTk7/1EX0EYEF
v1GK8dbWwl71B4vYbKOdX7qEAl2rooPviQIDAQABo4IB7TCCAekwHQYDVR0OBBYE
FLs/TmaI9bxdzfcl8GqP2UTWsxPIMB8GA1UdIwQYMBaAFKa2XUcJ9s/ZmaKHeJOS
uqbTpdzqMA4GA1UdDwEB/wQEAwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC80L0E2QjY1
RDQ3MDlGNkNGRDk5OUEyODc3ODkzOTJCQUE2RDNBNURDRUEuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9wclpkUnduMno5bVpvb2Q0azVLNnB0T2wzT28uY2VyMIGE
BggrBgEFBQcBCwR4MHYwdAYIKwYBBQUHMAuGaHJzeW5jOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0LzQvMzMzMTJlMzIzMjMwMmUzNjJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzIzNzMwMzgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAf3AYw
DQYJKoZIhvcNAQELBQADggEBALwnVObEeEbU//Z7i74QQ2KMTpcLoAg/krPJcJEP
Yt4yMNZW9HIb9BKLdBoKJpJwzMdh24HHq4NWeHUUK7DA20VIJ9RhihaR4KJGSwc0
MHIoP9FRRkPNs9ImSHFUMijw1oOk4hhm8FgGZcg0+wrBLWW6JaZgs45c4K2R6EL7
+rLXShCDsLqvR4XpcGoW4CW4ExtGQftyjUgLsh6u+dnC2SYVCpXT3qESrSYj9UpP
5HYQYIEeVSK+9Ziy+bUY2XGP+6aH7dKpqWPwEOCsRqMeQHD/UdxpBIr3w02p1ZQn
Yifxb+FfeH/Uiuusr9n3i3q2OE4X4FE7ZNj6Mic1eFslZC0=
-----END CERTIFICATE-----