Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/12/3135322e38392e38382e302f32322d3232203d3e2033333536.roa
File:                     3135322e38392e38382e302f32322d3232203d3e2033333536.roa (raw, json)
Hash identifier:          v6ylU2CtEx/tfhVBW41Q1pNsX7UgXPnOE3rIfmUUCkQ=
Subject key identifier:   86:7A:1A:9A:09:77:18:31:53:5A:DE:E8:F0:C6:6F:0B:DF:0B:A4:B9
Certificate issuer:       /CN=170584c3c22a791b9369e669afe83ce83dacc0ea
Certificate serial:       6DE13BAB21D35717FD342B8AE0273745915AFF19
Authority key identifier: 17:05:84:C3:C2:2A:79:1B:93:69:E6:69:AF:E8:3C:E8:3D:AC:C0:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FwWEw8IqeRuTaeZpr-g86D2swOo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/12/3135322e38392e38382e302f32322d3232203d3e2033333536.roa
Signing time:             Fri 27 Nov 2020 15:10:25 +0000
ROA not before:           Fri 27 Nov 2020 15:05:25 +0000
ROA not after:            Fri 26 Nov 2021 15:10:25 +0000
asID:                     3356
IP address blocks:        152.89.88.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e1:3b:ab:21:d3:57:17:fd:34:2b:8a:e0:27:37:45:91:5a:ff:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=170584c3c22a791b9369e669afe83ce83dacc0ea
        Validity
            Not Before: Nov 27 15:05:25 2020 GMT
            Not After : Nov 26 15:10:25 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:16:46:ab:c0:c1:b6:75:d7:d6:06:5f:72:1b:
                    ae:83:ce:66:79:b2:73:fe:4f:c4:fd:35:91:8d:be:
                    28:de:6c:a9:5d:5b:18:7c:4d:f3:d2:53:8e:d6:f3:
                    0c:99:0a:a5:3a:4b:bb:4d:bc:63:bb:4f:54:8e:13:
                    2a:0e:13:40:d0:5a:6e:5c:17:53:f6:22:64:1e:78:
                    71:0c:62:d8:59:5d:8c:51:3c:7d:60:95:53:a1:ae:
                    92:58:a8:f6:3e:83:83:cb:bb:88:cd:71:da:44:68:
                    5b:e2:50:b8:0f:5b:64:28:20:c4:11:b7:11:93:56:
                    48:72:51:e7:df:fb:13:10:23:ef:f4:88:e8:b3:c9:
                    d3:f3:c4:38:ca:6b:ab:ec:ca:1c:3e:8b:ef:c8:7d:
                    b1:ec:f8:b7:b8:da:03:ad:66:5f:7d:0d:13:61:84:
                    1f:a6:4c:fe:18:c9:95:cb:c8:7d:e7:14:19:6e:8c:
                    e0:81:6f:86:ca:04:14:62:45:fa:6a:b4:8f:8a:15:
                    aa:b7:32:a9:81:e0:06:24:bc:c0:7f:68:2e:84:0c:
                    03:fc:98:e5:fd:eb:be:e6:24:30:f7:2e:e6:3b:dc:
                    04:a1:36:fd:e8:87:0f:27:02:0f:91:d8:11:3c:d8:
                    4b:70:c1:cb:38:d5:0f:c3:0b:33:17:73:66:1d:31:
                    90:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:7A:1A:9A:09:77:18:31:53:5A:DE:E8:F0:C6:6F:0B:DF:0B:A4:B9
            X509v3 Authority Key Identifier:
                keyid:17:05:84:C3:C2:2A:79:1B:93:69:E6:69:AF:E8:3C:E8:3D:AC:C0:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/12/170584C3C22A791B9369E669AFE83CE83DACC0EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwWEw8IqeRuTaeZpr-g86D2swOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/12/3135322e38392e38382e302f32322d3232203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.89.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cb:ff:22:4d:33:b3:39:9d:ca:82:ed:f6:91:42:e3:8d:29:cf:
         c5:70:94:8e:34:6d:8b:8a:6a:eb:ce:60:2e:37:8c:7f:70:d8:
         08:fc:b8:cf:c1:7c:9d:50:85:4f:06:94:c5:68:00:34:4b:ec:
         8a:22:c1:ef:23:ad:80:76:52:77:c0:f6:45:fd:4b:06:d4:36:
         a8:7c:cd:6a:55:55:e9:9b:b7:e5:5f:27:06:98:b4:c3:87:a5:
         47:b7:5e:13:be:96:7a:d3:98:b6:00:5c:42:dd:f1:62:81:fc:
         f0:ff:5a:0f:ca:5a:1d:11:ba:d9:c7:61:3f:87:28:d2:66:d8:
         eb:48:9e:f1:05:18:7b:92:09:94:8a:e7:d1:4d:12:0e:b9:84:
         08:2d:12:14:fb:f1:3a:af:db:0b:27:c8:7f:66:0b:60:bc:a8:
         fe:ec:1a:3d:29:8f:76:00:fb:ec:31:3a:3f:37:3e:63:b3:ab:
         7c:2e:57:a7:fa:70:d4:95:fe:de:d2:fe:db:1c:43:fb:ef:e9:
         1a:a3:44:9a:49:a8:46:d9:ab:6c:51:c1:9a:22:90:74:1b:82:
         a8:26:cf:fa:b6:c8:fb:62:c4:9e:ff:7c:80:db:d3:13:ea:80:
         ca:83:15:4a:1d:f4:eb:36:cf:57:6e:cb:8d:10:47:50:db:16:
         6e:a8:d3:20
-----BEGIN CERTIFICATE-----
MIIG4TCCBcmgAwIBAgIUbeE7qyHTVxf9NCuK4Cc3RZFa/xkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTcwNTg0YzNjMjJhNzkxYjkzNjllNjY5YWZlODNjZTgz
ZGFjYzBlYTAeFw0yMDExMjcxNTA1MjVaFw0yMTExMjYxNTEwMjVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkYxNjQ2QUJDMEMxQjY3NUQ3
RDYwNjVGNzIxQkFFODNDRTY2NzlCMjczRkU0RkM0RkQzNTkxOERCRTI4REU2Q0E5
NUQ1QjE4N0M0REYzRDI1MzhFRDZGMzBDOTkwQUE1M0E0QkJCNERCQzYzQkI0RjU0
OEUxMzJBMEUxMzQwRDA1QTZFNUMxNzUzRjYyMjY0MUU3ODcxMEM2MkQ4NTk1RDhD
NTEzQzdENjA5NTUzQTFBRTkyNThBOEY2M0U4MzgzQ0JCQjg4Q0Q3MURBNDQ2ODVC
RTI1MEI4MEY1QjY0MjgyMEM0MTFCNzExOTM1NjQ4NzI1MUU3REZGQjEzMTAyM0VG
RjQ4OEU4QjNDOUQzRjNDNDM4Q0E2QkFCRUNDQTFDM0U4QkVGQzg3REIxRUNGOEI3
QjhEQTAzQUQ2NjVGN0QwRDEzNjE4NDFGQTY0Q0ZFMThDOTk1Q0JDODdERTcxNDE5
NkU4Q0UwODE2Rjg2Q0EwNDE0NjI0NUZBNkFCNDhGOEExNUFBQjczMkE5ODFFMDA2
MjRCQ0MwN0Y2ODJFODQwQzAzRkM5OEU1RkRFQkJFRTYyNDMwRjcyRUU2M0JEQzA0
QTEzNkZERTg4NzBGMjcwMjBGOTFEODExM0NEODRCNzBDMUNCMzhENTBGQzMwQjMz
MTc3MzY2MUQzMTkwQzcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvxZGq8DBtnXX1gZfchuug85mebJz/k/E/TWRjb4o3mypXVsYfE3z
0lOO1vMMmQqlOku7Tbxju09UjhMqDhNA0FpuXBdT9iJkHnhxDGLYWV2MUTx9YJVT
oa6SWKj2PoODy7uIzXHaRGhb4lC4D1tkKCDEEbcRk1ZIclHn3/sTECPv9Ijos8nT
88Q4ymur7MocPovvyH2x7Pi3uNoDrWZffQ0TYYQfpkz+GMmVy8h95xQZbozggW+G
ygQUYkX6arSPihWqtzKpgeAGJLzAf2guhAwD/Jjl/eu+5iQw9y7mO9wEoTb96IcP
JwIPkdgRPNhLcMHLONUPwwszF3NmHTGQxwIDAQABo4IB7zCCAeswHQYDVR0OBBYE
FIZ6GpoJdxgxU1re6PDGbwvfC6S5MB8GA1UdIwQYMBaAFBcFhMPCKnkbk2nmaa/o
POg9rMDqMA4GA1UdDwEB/wQEAwIHgDBwBgNVHR8EaTBnMGWgY6Bhhl9yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xMi8xNzA1
ODRDM0MyMkE3OTFCOTM2OUU2NjlBRkU4M0NFODNEQUNDMEVBLmNybDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRndXRXc4SXFlUnVUYWVacHItZzg2RDJzd09vLmNlcjCB
hQYIKwYBBQUHAQsEeTB3MHUGCCsGAQUFBzALhmlyc3luYzovL3Jwa2kxLnRlcnJh
dHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xMi8zMTM1MzIyZTM4MzkyZTM4
MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMzMzMzUzNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAphZ
WDANBgkqhkiG9w0BAQsFAAOCAQEAy/8iTTOzOZ3Kgu32kULjjSnPxXCUjjRti4pq
685gLjeMf3DYCPy4z8F8nVCFTwaUxWgANEvsiiLB7yOtgHZSd8D2Rf1LBtQ2qHzN
alVV6Zu35V8nBpi0w4elR7deE76WetOYtgBcQt3xYoH88P9aD8paHRG62cdhP4co
0mbY60ie8QUYe5IJlIrn0U0SDrmECC0SFPvxOq/bCyfIf2YLYLyo/uwaPSmPdgD7
7DE6Pzc+Y7OrfC5Xp/pw1JX+3tL+2xxD++/pGqNEmkmoRtmrbFHBmiKQdBuCqCbP
+rbI+2LEnv98gNvTE+qAyoMVSh306zbPV27LjRBHUNsWbqjTIA==
-----END CERTIFICATE-----