Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3139342e33312e3134382e302f32342d3234203d3e20323133303339.roa
File:                     3139342e33312e3134382e302f32342d3234203d3e20323133303339.roa (raw, json)
Hash identifier:          7aIANpGyzpFAr/J33Dchy0TGj6Rgp+WuyjRtJSczVVw=
Subject key identifier:   E1:8F:44:2A:22:66:CA:C0:F7:11:B8:CF:85:B4:02:4A:83:32:B1:FF
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       36FE7F73DA45A37287ACB2613598F77DA9EABC95
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e33312e3134382e302f32342d3234203d3e20323133303339.roa
Signing time:             Thu 31 Dec 2020 18:42:20 +0000
ROA not before:           Thu 31 Dec 2020 18:37:20 +0000
ROA not after:            Thu 30 Dec 2021 18:42:20 +0000
asID:                     213039
IP address blocks:        194.31.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:fe:7f:73:da:45:a3:72:87:ac:b2:61:35:98:f7:7d:a9:ea:bc:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Dec 31 18:37:20 2020 GMT
            Not After : Dec 30 18:42:20 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:80:82:5c:3f:98:07:25:30:07:c7:1f:c1:7b:
                    4e:58:f5:f6:8c:87:ba:df:8e:f6:99:41:9d:d8:cc:
                    18:c2:1a:97:5b:c0:7f:a6:11:61:94:da:4f:77:ec:
                    69:0c:36:0a:be:ab:bc:96:44:57:62:c4:e2:72:cf:
                    8c:83:c7:ed:bb:28:85:b1:ed:98:b3:70:98:57:79:
                    66:ce:f1:fa:2a:14:c1:d4:9f:c7:86:c4:f2:c7:00:
                    b0:49:e0:a8:8c:9f:d5:ed:1f:23:19:4e:79:bc:98:
                    80:e4:1c:32:93:95:56:4f:ef:d2:cb:ff:03:08:d1:
                    9a:1f:50:19:74:e8:77:3b:58:96:51:a7:89:ca:6e:
                    18:c1:82:b2:a3:a3:e3:49:4a:05:d3:a4:95:f3:f7:
                    a6:45:fc:6b:92:ee:a7:a5:ad:99:83:b0:8a:ae:18:
                    9b:a4:e0:a5:15:7e:98:0b:86:78:83:f8:ee:e0:a2:
                    06:ba:0f:c5:91:86:10:42:60:ce:eb:08:f7:f1:ef:
                    0c:15:09:6a:d1:93:4e:97:3e:ea:1d:e7:01:5d:6c:
                    4e:cd:40:ed:84:3d:ee:3c:68:9e:52:06:46:da:0e:
                    82:00:73:86:55:ac:bb:f6:c3:7e:8f:2f:fa:a3:9f:
                    44:c8:01:48:8f:79:c3:f8:e9:48:6b:d9:bc:4d:0b:
                    cb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8F:44:2A:22:66:CA:C0:F7:11:B8:CF:85:B4:02:4A:83:32:B1:FF
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e33312e3134382e302f32342d3234203d3e20323133303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.31.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:58:64:64:ba:0e:9a:13:d1:6f:84:76:a7:7a:ad:6f:d3:25:
         75:49:2e:30:25:94:41:67:54:bd:3a:e3:96:f1:a6:7b:f6:43:
         36:5a:61:51:33:01:87:c6:03:99:bb:be:9d:8c:b4:f1:5a:6b:
         12:4b:9e:1d:93:01:1a:d5:67:1b:ed:b8:d7:35:71:ef:f3:a0:
         6c:8c:33:e5:d2:05:1e:7d:b5:c9:e5:40:63:9f:f9:c1:94:d7:
         d5:14:9b:c3:ee:b4:37:c1:fc:67:42:d4:d3:31:c4:51:71:61:
         cc:0a:a0:d7:00:55:46:64:50:5a:47:2b:74:12:af:eb:12:a6:
         42:e3:05:ea:8e:11:b1:61:dc:18:4b:8b:95:cc:8b:c4:d2:34:
         f1:55:11:9f:cf:fc:68:cd:f8:f8:2a:7f:aa:67:c1:39:49:4f:
         56:7e:42:6a:8d:9d:1b:53:e3:07:f4:db:16:8e:a5:c5:8f:5d:
         66:b3:b5:74:b1:46:87:80:26:0f:6c:68:8d:99:88:10:ee:ba:
         5e:d6:8b:01:c9:44:49:84:24:27:0e:a3:f8:dd:95:c0:e5:1f:
         9f:00:20:7f:88:f5:60:f3:c6:ca:93:94:1f:74:85:12:ed:06:
         0c:69:0d:ff:31:fd:c4:fb:2e:c2:b5:d6:5b:d7:b5:13:ef:ab:
         3c:26:c3:ab
-----BEGIN CERTIFICATE-----
MIIG5TCCBc2gAwIBAgIUNv5/c9pFo3KHrLJhNZj3fanqvJUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdlZTg2ZGZjNTZkNTUyMDlhMzU5MjRkODMxNTMwMDM1
YmFlMzkwNzAeFw0yMDEyMzExODM3MjBaFw0yMTEyMzAxODQyMjBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUE4MDgyNUMzRjk4MDcyNTMw
MDdDNzFGQzE3QjRFNThGNUY2OEM4N0JBREY4RUY2OTk0MTlERDhDQzE4QzIxQTk3
NUJDMDdGQTYxMTYxOTREQTRGNzdFQzY5MEMzNjBBQkVBQkJDOTY0NDU3NjJDNEUy
NzJDRjhDODNDN0VEQkIyODg1QjFFRDk4QjM3MDk4NTc3OTY2Q0VGMUZBMkExNEMx
RDQ5RkM3ODZDNEYyQzcwMEIwNDlFMEE4OEM5RkQ1RUQxRjIzMTk0RTc5QkM5ODgw
RTQxQzMyOTM5NTU2NEZFRkQyQ0JGRjAzMDhEMTlBMUY1MDE5NzRFODc3M0I1ODk2
NTFBNzg5Q0E2RTE4QzE4MkIyQTNBM0UzNDk0QTA1RDNBNDk1RjNGN0E2NDVGQzZC
OTJFRUE3QTVBRDk5ODNCMDhBQUUxODlCQTRFMEE1MTU3RTk4MEI4Njc4ODNGOEVF
RTBBMjA2QkEwRkM1OTE4NjEwNDI2MENFRUIwOEY3RjFFRjBDMTUwOTZBRDE5MzRF
OTczRUVBMURFNzAxNUQ2QzRFQ0Q0MEVEODQzREVFM0M2ODlFNTIwNjQ2REEwRTgy
MDA3Mzg2NTVBQ0JCRjZDMzdFOEYyRkZBQTM5RjQ0QzgwMTQ4OEY3OUMzRjhFOTQ4
NkJEOUJDNEQwQkNCRTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqoCCXD+YByUwB8cfwXtOWPX2jIe63472mUGd2MwYwhqXW8B/phFh
lNpPd+xpDDYKvqu8lkRXYsTics+Mg8ftuyiFse2Ys3CYV3lmzvH6KhTB1J/HhsTy
xwCwSeCojJ/V7R8jGU55vJiA5Bwyk5VWT+/Sy/8DCNGaH1AZdOh3O1iWUaeJym4Y
wYKyo6PjSUoF06SV8/emRfxrku6npa2Zg7CKrhibpOClFX6YC4Z4g/ju4KIGug/F
kYYQQmDO6wj38e8MFQlq0ZNOlz7qHecBXWxOzUDthD3uPGieUgZG2g6CAHOGVay7
9sN+jy/6o59EyAFIj3nD+OlIa9m8TQvL4QIDAQABo4IB8zCCAe8wHQYDVR0OBBYE
FOGPRCoiZsrA9xG4z4W0AkqDMrH/MB8GA1UdIwQYMBaAFFfuht/FbVUgmjWSTYMV
MANbrjkHMA4GA1UdDwEB/wQEAwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC81LzU3RUU4
NkRGQzU2RDU1MjA5QTM1OTI0RDgzMTUzMDAzNUJBRTM5MDcuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9WLTZHMzhWdFZTQ2FOWkpOZ3hVd0ExdXVPUWMuY2VyMIGK
BggrBgEFBQcBCwR+MHwwegYIKwYBBQUHMAuGbnJzeW5jOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0LzUvMzEzOTM0MmUzMzMxMmUzMTM0
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzMzMDMzMzkucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADCH5QwDQYJKoZIhvcNAQELBQADggEBAFlYZGS6DpoT0W+Edqd6rW/TJXVJLjAl
lEFnVL0645bxpnv2QzZaYVEzAYfGA5m7vp2MtPFaaxJLnh2TARrVZxvtuNc1ce/z
oGyMM+XSBR59tcnlQGOf+cGU19UUm8PutDfB/GdC1NMxxFFxYcwKoNcAVUZkUFpH
K3QSr+sSpkLjBeqOEbFh3BhLi5XMi8TSNPFVEZ/P/GjN+Pgqf6pnwTlJT1Z+QmqN
nRtT4wf02xaOpcWPXWaztXSxRoeAJg9saI2ZiBDuul7WiwHJREmEJCcOo/jdlcDl
H58AIH+I9WDzxsqTlB90hRLtBgxpDf8x/cT7LsK11lvXtRPvqzwmw6s=
-----END CERTIFICATE-----