Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3139332e32322e3134342e302f32342d3234203d3e20323131383330.roa
File:                     3139332e32322e3134342e302f32342d3234203d3e20323131383330.roa (raw, json)
Hash identifier:          yOFUNH7/Xr+DPfOwPDmgi1YllWhxsFB3/3UTa/NKCWU=
Subject key identifier:   1A:F2:D5:08:63:60:94:05:4B:20:DD:96:70:36:34:BF:B6:2D:B1:68
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       0EB26E81581BE297116BA119FD53CA0A40C4C77A
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139332e32322e3134342e302f32342d3234203d3e20323131383330.roa
Signing time:             Sat 13 Feb 2021 18:27:30 +0000
ROA not before:           Sat 13 Feb 2021 18:22:30 +0000
ROA not after:            Sat 12 Feb 2022 18:27:30 +0000
asID:                     211830
IP address blocks:        193.22.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:b2:6e:81:58:1b:e2:97:11:6b:a1:19:fd:53:ca:0a:40:c4:c7:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Feb 13 18:22:30 2021 GMT
            Not After : Feb 12 18:27:30 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:88:a0:43:d4:63:a3:8c:05:0b:ba:b4:2e:6a:
                    09:d4:a1:8b:fd:db:06:ca:a3:2a:50:0f:10:3e:a4:
                    39:6b:b8:0d:d8:d5:5c:26:d9:3d:bf:3f:c9:9e:79:
                    87:c0:5e:8f:e7:d3:08:e0:ba:46:8f:08:5e:4b:2b:
                    b2:b5:9c:5c:a0:d3:fc:eb:50:73:e5:41:7e:27:21:
                    ca:c3:8a:d4:c3:af:d5:57:61:dc:0d:04:d5:84:3f:
                    69:a1:45:63:6c:5d:91:2b:8c:aa:3a:6c:e4:87:0e:
                    5d:68:4e:22:9c:60:e7:21:33:7c:61:7e:22:33:c5:
                    07:f1:81:db:44:fc:b4:c1:ad:37:96:cb:44:26:81:
                    9e:98:78:a2:1d:c3:00:04:aa:74:de:e5:89:28:20:
                    5d:10:20:59:74:a9:ad:69:9a:8c:21:04:ee:c5:e2:
                    d4:df:a2:53:6a:f7:11:b0:da:f5:6b:13:66:18:23:
                    38:e2:76:9e:18:a2:aa:36:36:e1:1d:a8:fd:b3:67:
                    c7:77:62:8c:ea:f0:ae:d4:14:64:a9:79:24:de:15:
                    38:54:fc:45:f8:40:a1:69:ab:34:26:79:36:c6:81:
                    fe:ed:85:7a:84:50:ae:92:63:8a:2a:79:89:0e:2f:
                    ec:d0:d3:27:d0:f4:e4:d6:d1:2d:5d:be:d2:a1:27:
                    08:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F2:D5:08:63:60:94:05:4B:20:DD:96:70:36:34:BF:B6:2D:B1:68
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139332e32322e3134342e302f32342d3234203d3e20323131383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.22.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:7e:e9:cc:e0:90:43:c0:43:91:f4:8e:3a:30:ce:3d:54:39:
         38:be:17:36:6c:cf:99:22:09:ce:1f:98:63:f7:40:58:80:a6:
         56:ac:c3:b7:f7:4c:fd:f3:c8:a1:1c:b1:05:0c:ec:23:94:65:
         aa:e6:4c:0c:4b:76:3b:13:f8:51:6d:16:b7:d5:60:bc:0e:0d:
         83:90:6e:6b:bb:ef:3e:c0:4c:ed:6c:35:1d:8d:9a:40:b8:83:
         25:2f:48:34:4b:99:1c:09:91:a3:2b:4b:89:30:51:f4:b3:4c:
         38:2f:c0:35:6e:82:73:61:98:47:6f:46:7c:71:ce:8b:c3:c0:
         da:2d:e6:0c:97:b8:25:96:bc:7d:7d:bc:5c:b1:13:a8:db:d1:
         b7:1b:18:d6:91:e0:a0:0a:64:b2:d2:c3:76:d7:f5:e0:58:65:
         21:2f:c7:ec:fd:54:04:33:29:1e:e1:31:0f:ea:66:97:3a:79:
         96:04:44:33:42:c3:8a:51:15:48:8e:fb:42:88:97:77:58:22:
         11:12:08:7d:b0:f0:9d:5b:75:f1:3b:ff:40:11:42:a2:59:b6:
         81:4b:c3:fe:bd:0f:87:1d:32:74:19:12:06:29:a1:c2:5c:6d:
         e8:72:8c:54:8e:ae:5c:a2:56:c9:16:54:5e:a0:a0:54:51:d5:
         a4:98:62:4a
-----BEGIN CERTIFICATE-----
MIIG5TCCBc2gAwIBAgIUDrJugVgb4pcRa6EZ/VPKCkDEx3owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdlZTg2ZGZjNTZkNTUyMDlhMzU5MjRkODMxNTMwMDM1
YmFlMzkwNzAeFw0yMTAyMTMxODIyMzBaFw0yMjAyMTIxODI3MzBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTY4OEEwNDNENDYzQTM4QzA1
MEJCQUI0MkU2QTA5RDRBMThCRkREQjA2Q0FBMzJBNTAwRjEwM0VBNDM5NkJCODBE
RDhENTVDMjZEOTNEQkYzRkM5OUU3OTg3QzA1RThGRTdEMzA4RTBCQTQ2OEYwODVF
NEIyQkIyQjU5QzVDQTBEM0ZDRUI1MDczRTU0MTdFMjcyMUNBQzM4QUQ0QzNBRkQ1
NTc2MURDMEQwNEQ1ODQzRjY5QTE0NTYzNkM1RDkxMkI4Q0FBM0E2Q0U0ODcwRTVE
Njg0RTIyOUM2MEU3MjEzMzdDNjE3RTIyMzNDNTA3RjE4MURCNDRGQ0I0QzFBRDM3
OTZDQjQ0MjY4MTlFOTg3OEEyMURDMzAwMDRBQTc0REVFNTg5MjgyMDVEMTAyMDU5
NzRBOUFENjk5QThDMjEwNEVFQzVFMkQ0REZBMjUzNkFGNzExQjBEQUY1NkIxMzY2
MTgyMzM4RTI3NjlFMThBMkFBMzYzNkUxMURBOEZEQjM2N0M3Nzc2MjhDRUFGMEFF
RDQxNDY0QTk3OTI0REUxNTM4NTRGQzQ1Rjg0MEExNjlBQjM0MjY3OTM2QzY4MUZF
RUQ4NTdBODQ1MEFFOTI2MzhBMkE3OTg5MEUyRkVDRDBEMzI3RDBGNEU0RDZEMTJE
NURCRUQyQTEyNzA4NjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA5oigQ9Rjo4wFC7q0LmoJ1KGL/dsGyqMqUA8QPqQ5a7gN2NVcJtk9
vz/JnnmHwF6P59MI4LpGjwheSyuytZxcoNP861Bz5UF+JyHKw4rUw6/VV2HcDQTV
hD9poUVjbF2RK4yqOmzkhw5daE4inGDnITN8YX4iM8UH8YHbRPy0wa03lstEJoGe
mHiiHcMABKp03uWJKCBdECBZdKmtaZqMIQTuxeLU36JTavcRsNr1axNmGCM44nae
GKKqNjbhHaj9s2fHd2KM6vCu1BRkqXkk3hU4VPxF+EChaas0Jnk2xoH+7YV6hFCu
kmOKKnmJDi/s0NMn0PTk1tEtXb7SoScIYwIDAQABo4IB8zCCAe8wHQYDVR0OBBYE
FBry1QhjYJQFSyDdlnA2NL+2LbFoMB8GA1UdIwQYMBaAFFfuht/FbVUgmjWSTYMV
MANbrjkHMA4GA1UdDwEB/wQEAwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC81LzU3RUU4
NkRGQzU2RDU1MjA5QTM1OTI0RDgzMTUzMDAzNUJBRTM5MDcuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9WLTZHMzhWdFZTQ2FOWkpOZ3hVd0ExdXVPUWMuY2VyMIGK
BggrBgEFBQcBCwR+MHwwegYIKwYBBQUHMAuGbnJzeW5jOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0LzUvMzEzOTMzMmUzMjMyMmUzMTM0
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzEzODMzMzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADBFpAwDQYJKoZIhvcNAQELBQADggEBAI1+6czgkEPAQ5H0jjowzj1UOTi+FzZs
z5kiCc4fmGP3QFiAplasw7f3TP3zyKEcsQUM7COUZarmTAxLdjsT+FFtFrfVYLwO
DYOQbmu77z7ATO1sNR2NmkC4gyUvSDRLmRwJkaMrS4kwUfSzTDgvwDVugnNhmEdv
RnxxzovDwNot5gyXuCWWvH19vFyxE6jb0bcbGNaR4KAKZLLSw3bX9eBYZSEvx+z9
VAQzKR7hMQ/qZpc6eZYERDNCw4pRFUiO+0KIl3dYIhESCH2w8J1bdfE7/0ARQqJZ
toFLw/69D4cdMnQZEgYpocJcbehyjFSOrlyiVskWVF6goFRR1aSYYko=
-----END CERTIFICATE-----