Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3139342e33312e3130302e302f32322d3234203d3e203138353330.roa
File:                     3139342e33312e3130302e302f32322d3234203d3e203138353330.roa (raw, json)
Hash identifier:          XpQthJDWF+ESeMf4zG9DHz6wswNPOstadYoM2MjQF68=
Subject key identifier:   B3:88:3E:CF:F4:5B:91:52:E5:43:48:ED:38:A0:D4:E1:50:B0:7D:AB
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       7ACC84EB10FACFFBAB21D777DDBDE34BA5511821
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e33312e3130302e302f32322d3234203d3e203138353330.roa
Signing time:             Fri 27 Nov 2020 15:10:23 +0000
ROA not before:           Fri 27 Nov 2020 15:05:23 +0000
ROA not after:            Fri 26 Nov 2021 15:10:23 +0000
asID:                     18530
IP address blocks:        194.31.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:cc:84:eb:10:fa:cf:fb:ab:21:d7:77:dd:bd:e3:4b:a5:51:18:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Nov 27 15:05:23 2020 GMT
            Not After : Nov 26 15:10:23 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:15:32:cc:4e:f2:2f:de:4f:ee:e8:bc:ee:13:
                    51:d1:a8:c2:a0:90:ab:5c:93:d1:4c:d9:75:8c:d8:
                    c2:b6:a0:23:5b:24:4e:22:a0:9e:8e:ae:29:ba:87:
                    3f:2a:c5:86:92:57:87:6d:d1:e6:71:1b:03:d0:4b:
                    a9:5c:1c:72:2d:7e:51:e7:66:07:75:7f:cd:99:f9:
                    55:9a:0e:fa:e6:e9:f0:94:59:e5:c1:72:16:83:b4:
                    e5:44:46:c3:d8:5d:e8:dc:9f:bc:37:eb:a2:3d:e1:
                    a1:80:da:f5:e1:ad:b9:16:f5:e2:7b:0f:35:dc:50:
                    bc:47:09:2b:83:8f:8c:7f:8a:ae:93:8f:f4:5c:cf:
                    7a:b7:23:ba:08:0e:6b:99:07:66:8c:90:27:aa:a5:
                    f2:dc:b8:27:95:06:ea:b2:62:fb:2f:29:90:5f:99:
                    91:d3:49:ce:2f:a3:2d:b3:ed:dc:65:9c:0e:97:3a:
                    71:df:b7:db:eb:38:d7:ce:4b:a7:a3:b7:92:1a:44:
                    f3:52:c0:a7:69:ae:dd:5c:46:2a:3c:8f:c9:23:85:
                    69:fd:52:8e:04:f3:35:8f:6c:be:3f:95:a4:37:b2:
                    09:13:68:d1:0a:53:9f:8f:8b:18:bf:4f:5d:a2:a1:
                    bb:74:02:a9:81:b4:25:df:68:38:86:de:68:89:cf:
                    12:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:88:3E:CF:F4:5B:91:52:E5:43:48:ED:38:A0:D4:E1:50:B0:7D:AB
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e33312e3130302e302f32322d3234203d3e203138353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.31.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:e4:ca:a6:fb:8c:5d:42:fc:2d:37:c7:f5:55:f7:5d:b3:c0:
         cb:40:44:b9:a7:17:03:06:ab:a0:64:92:73:6e:53:92:60:f5:
         31:90:9c:4d:76:2e:c5:2c:a4:ce:1b:4c:61:c3:37:da:b3:77:
         45:0f:fe:43:aa:b4:18:eb:75:3e:bb:a0:47:f1:b3:82:bd:7a:
         5d:73:77:92:07:c6:04:21:6b:30:f6:83:bc:bf:95:fc:2a:24:
         29:91:36:03:58:3c:61:6c:15:f8:13:4f:60:a3:90:15:13:84:
         ac:7c:3c:99:ca:90:31:57:93:78:85:9c:a4:4a:54:7e:da:19:
         1b:0b:ee:84:d8:1e:9d:9f:70:d7:33:6b:70:86:7d:6b:37:e0:
         c0:a1:b8:a6:72:d6:82:01:57:b9:2d:3b:44:9b:0c:61:2a:93:
         78:94:3a:2f:6d:1b:42:75:60:f5:d3:01:d8:c0:dc:32:da:3e:
         d1:28:aa:f6:b0:03:82:ff:80:f7:64:31:9c:14:65:f7:d2:c1:
         9a:3d:9a:73:9e:0a:fc:2d:09:76:5b:ca:54:77:77:06:75:a5:
         b7:81:96:84:a8:82:5d:4b:73:ec:d2:a5:02:bc:bd:8c:e6:4b:
         48:36:35:a4:ed:d3:9f:06:7b:56:73:4b:e2:08:dc:f2:83:77:
         bd:88:f2:6a
-----BEGIN CERTIFICATE-----
MIIG4zCCBcugAwIBAgIUesyE6xD6z/urIdd33b3jS6VRGCEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdlZTg2ZGZjNTZkNTUyMDlhMzU5MjRkODMxNTMwMDM1
YmFlMzkwNzAeFw0yMDExMjcxNTA1MjNaFw0yMTExMjYxNTEwMjNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjYxNTMyQ0M0RUYyMkZERTRG
RUVFOEJDRUUxMzUxRDFBOEMyQTA5MEFCNUM5M0QxNENEOTc1OENEOEMyQjZBMDIz
NUIyNDRFMjJBMDlFOEVBRTI5QkE4NzNGMkFDNTg2OTI1Nzg3NkREMUU2NzExQjAz
RDA0QkE5NUMxQzcyMkQ3RTUxRTc2NjA3NzU3RkNEOTlGOTU1OUEwRUZBRTZFOUYw
OTQ1OUU1QzE3MjE2ODNCNEU1NDQ0NkMzRDg1REU4REM5RkJDMzdFQkEyM0RFMUEx
ODBEQUY1RTFBREI5MTZGNUUyN0IwRjM1REM1MEJDNDcwOTJCODM4RjhDN0Y4QUFF
OTM4RkY0NUNDRjdBQjcyM0JBMDgwRTZCOTkwNzY2OEM5MDI3QUFBNUYyRENCODI3
OTUwNkVBQjI2MkZCMkYyOTkwNUY5OTkxRDM0OUNFMkZBMzJEQjNFRERDNjU5QzBF
OTczQTcxREZCN0RCRUIzOEQ3Q0U0QkE3QTNCNzkyMUE0NEYzNTJDMEE3NjlBRURE
NUM0NjJBM0M4RkM5MjM4NTY5RkQ1MjhFMDRGMzM1OEY2Q0JFM0Y5NUE0MzdCMjA5
MTM2OEQxMEE1MzlGOEY4QjE4QkY0RjVEQTJBMUJCNzQwMkE5ODFCNDI1REY2ODM4
ODZERTY4ODlDRjEyRDcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAthUyzE7yL95P7ui87hNR0ajCoJCrXJPRTNl1jNjCtqAjWyROIqCe
jq4puoc/KsWGkleHbdHmcRsD0EupXBxyLX5R52YHdX/NmflVmg765unwlFnlwXIW
g7TlREbD2F3o3J+8N+uiPeGhgNr14a25FvXiew813FC8Rwkrg4+Mf4quk4/0XM96
tyO6CA5rmQdmjJAnqqXy3LgnlQbqsmL7LymQX5mR00nOL6Mts+3cZZwOlzpx37fb
6zjXzkuno7eSGkTzUsCnaa7dXEYqPI/JI4Vp/VKOBPM1j2y+P5WkN7IJE2jRClOf
j4sYv09doqG7dAKpgbQl32g4ht5oic8S1wIDAQABo4IB8TCCAe0wHQYDVR0OBBYE
FLOIPs/0W5FS5UNI7Tig1OFQsH2rMB8GA1UdIwQYMBaAFFfuht/FbVUgmjWSTYMV
MANbrjkHMA4GA1UdDwEB/wQEAwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC81LzU3RUU4
NkRGQzU2RDU1MjA5QTM1OTI0RDgzMTUzMDAzNUJBRTM5MDcuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9WLTZHMzhWdFZTQ2FOWkpOZ3hVd0ExdXVPUWMuY2VyMIGI
BggrBgEFBQcBCwR8MHoweAYIKwYBBQUHMAuGbHJzeW5jOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0LzUvMzEzOTM0MmUzMzMxMmUzMTMw
MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMTM4MzUzMzMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
wh9kMA0GCSqGSIb3DQEBCwUAA4IBAQBR5Mqm+4xdQvwtN8f1Vfdds8DLQES5pxcD
BqugZJJzblOSYPUxkJxNdi7FLKTOG0xhwzfas3dFD/5DqrQY63U+u6BH8bOCvXpd
c3eSB8YEIWsw9oO8v5X8KiQpkTYDWDxhbBX4E09go5AVE4SsfDyZypAxV5N4hZyk
SlR+2hkbC+6E2B6dn3DXM2twhn1rN+DAobimctaCAVe5LTtEmwxhKpN4lDovbRtC
dWD10wHYwNwy2j7RKKr2sAOC/4D3ZDGcFGX30sGaPZpzngr8LQl2W8pUd3cGdaW3
gZaEqIJdS3Ps0qUCvL2M5ktINjWk7dOfBntWc0viCNzyg3e9iPJq
-----END CERTIFICATE-----