Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/178/3139332e34322e3133362e302f32342d3234203d3e203631333137.roa
File:                     3139332e34322e3133362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          3kGwmcxf4EqAcKZ3Jpa/WTNh2qQVWuBwu20R9JiWq6Q=
Subject key identifier:   85:15:90:B0:88:01:81:E1:EC:CD:0D:95:DB:14:25:39:B5:7D:7E:D2
Certificate issuer:       /CN=67a6e5206be3501ddd38d6f31c3368200c43a473
Certificate serial:       0C97E997C13349F5342C31027767694A3D49C178
Authority key identifier: 67:A6:E5:20:6B:E3:50:1D:DD:38:D6:F3:1C:33:68:20:0C:43:A4:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z6blIGvjUB3dONbzHDNoIAxDpHM.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/178/3139332e34322e3133362e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 03 Dec 2020 15:57:09 +0000
ROA not before:           Thu 03 Dec 2020 15:52:09 +0000
ROA not after:            Thu 02 Dec 2021 15:57:09 +0000
asID:                     61317
IP address blocks:        193.42.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:97:e9:97:c1:33:49:f5:34:2c:31:02:77:67:69:4a:3d:49:c1:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67a6e5206be3501ddd38d6f31c3368200c43a473
        Validity
            Not Before: Dec  3 15:52:09 2020 GMT
            Not After : Dec  2 15:57:09 2021 GMT
        Subject: CN=3082010A0282010100E3E533D3BFD4BE147FF1CFF933472D485F486C6E9948940396364C16E0C303783A40E1230E6F45D2041DF5B34908E5FBD1467B569E0512B4F0F70A0963D7E9940AEA96DA535566C11FEACC5826BBC1C3D135377095B500C1D9CC20994740C9FA0797B8F9E1EBF185DEC5AF0C17D58D1CDAE131CBAD2A65205AFD6F7CDA5467AD0ACBFFC29C55D46FED43D4983D6F6D4258A57E3B9F87564D24C4A87F6C0B7BB69485FB82F8E3EC778CC3C9F32B664D12AC8DCFDC70E3BA01E45446D9DCCBE5AA7841C861DB50D05EC3981E20F494EF0183A02A2B947C6F36704AD243C0B3E77DFD96C4B61BD482B77762ED912E6F3E2E5AD50D5D769BB609BA17DBCB586F7BB10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e5:33:d3:bf:d4:be:14:7f:f1:cf:f9:33:47:
                    2d:48:5f:48:6c:6e:99:48:94:03:96:36:4c:16:e0:
                    c3:03:78:3a:40:e1:23:0e:6f:45:d2:04:1d:f5:b3:
                    49:08:e5:fb:d1:46:7b:56:9e:05:12:b4:f0:f7:0a:
                    09:63:d7:e9:94:0a:ea:96:da:53:55:66:c1:1f:ea:
                    cc:58:26:bb:c1:c3:d1:35:37:70:95:b5:00:c1:d9:
                    cc:20:99:47:40:c9:fa:07:97:b8:f9:e1:eb:f1:85:
                    de:c5:af:0c:17:d5:8d:1c:da:e1:31:cb:ad:2a:65:
                    20:5a:fd:6f:7c:da:54:67:ad:0a:cb:ff:c2:9c:55:
                    d4:6f:ed:43:d4:98:3d:6f:6d:42:58:a5:7e:3b:9f:
                    87:56:4d:24:c4:a8:7f:6c:0b:7b:b6:94:85:fb:82:
                    f8:e3:ec:77:8c:c3:c9:f3:2b:66:4d:12:ac:8d:cf:
                    dc:70:e3:ba:01:e4:54:46:d9:dc:cb:e5:aa:78:41:
                    c8:61:db:50:d0:5e:c3:98:1e:20:f4:94:ef:01:83:
                    a0:2a:2b:94:7c:6f:36:70:4a:d2:43:c0:b3:e7:7d:
                    fd:96:c4:b6:1b:d4:82:b7:77:62:ed:91:2e:6f:3e:
                    2e:5a:d5:0d:5d:76:9b:b6:09:ba:17:db:cb:58:6f:
                    7b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:15:90:B0:88:01:81:E1:EC:CD:0D:95:DB:14:25:39:B5:7D:7E:D2
            X509v3 Authority Key Identifier:
                keyid:67:A6:E5:20:6B:E3:50:1D:DD:38:D6:F3:1C:33:68:20:0C:43:A4:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/178/67A6E5206BE3501DDD38D6F31C3368200C43A473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6blIGvjUB3dONbzHDNoIAxDpHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/178/3139332e34322e3133362e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.42.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:fb:a2:0d:24:90:cb:12:d7:64:9e:e7:20:c1:ce:d8:50:fd:
         20:a0:b3:6c:83:87:1b:08:25:a5:18:09:fe:bc:b7:f6:ac:4f:
         86:9d:f5:0f:b6:ea:d5:eb:78:9d:1b:87:39:52:b6:ae:70:03:
         b8:2a:3c:a3:46:d6:99:18:dd:8a:1e:f9:51:76:c2:bc:95:96:
         47:3c:86:d0:55:a4:c5:47:80:fc:ad:d5:c8:0e:88:ff:8c:2a:
         71:20:d4:3f:02:fb:af:35:67:aa:e6:2d:68:e5:a0:50:36:02:
         c8:56:db:6f:06:02:c1:84:45:cf:01:3f:0e:4b:06:66:87:f9:
         d8:86:bb:fe:b4:52:7c:67:1e:b1:cc:e9:d8:4e:2d:94:03:62:
         5b:17:1e:80:d2:cc:26:b5:70:11:01:85:d1:75:ee:a2:43:0e:
         ce:ec:79:0d:00:51:a1:63:28:7d:d6:a9:e5:9c:c6:29:a6:7c:
         7e:5c:08:d5:0c:36:4e:57:43:04:a6:b2:e8:eb:a1:64:3d:2d:
         29:c3:49:b1:d3:83:0d:6d:cd:70:d3:0c:db:cf:48:4f:b2:0e:
         2c:84:5c:e2:a8:af:9c:f0:d7:a7:bc:9c:b6:28:20:1a:7a:b1:
         3b:52:a7:c5:e4:72:c5:28:5f:12:73:95:3b:ca:ee:e4:aa:86:
         61:02:d2:9a
-----BEGIN CERTIFICATE-----
MIIG5zCCBc+gAwIBAgIUDJfpl8EzSfU0LDECd2dpSj1JwXgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjdhNmU1MjA2YmUzNTAxZGRkMzhkNmYzMWMzMzY4MjAw
YzQzYTQ3MzAeFw0yMDEyMDMxNTUyMDlaFw0yMTEyMDIxNTU3MDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTNFNTMzRDNCRkQ0QkUxNDdG
RjFDRkY5MzM0NzJENDg1RjQ4NkM2RTk5NDg5NDAzOTYzNjRDMTZFMEMzMDM3ODNB
NDBFMTIzMEU2RjQ1RDIwNDFERjVCMzQ5MDhFNUZCRDE0NjdCNTY5RTA1MTJCNEYw
RjcwQTA5NjNEN0U5OTQwQUVBOTZEQTUzNTU2NkMxMUZFQUNDNTgyNkJCQzFDM0Qx
MzUzNzcwOTVCNTAwQzFEOUNDMjA5OTQ3NDBDOUZBMDc5N0I4RjlFMUVCRjE4NURF
QzVBRjBDMTdENThEMUNEQUUxMzFDQkFEMkE2NTIwNUFGRDZGN0NEQTU0NjdBRDBB
Q0JGRkMyOUM1NUQ0NkZFRDQzRDQ5ODNENkY2RDQyNThBNTdFM0I5Rjg3NTY0RDI0
QzRBODdGNkMwQjdCQjY5NDg1RkI4MkY4RTNFQzc3OENDM0M5RjMyQjY2NEQxMkFD
OERDRkRDNzBFM0JBMDFFNDU0NDZEOURDQ0JFNUFBNzg0MUM4NjFEQjUwRDA1RUMz
OTgxRTIwRjQ5NEVGMDE4M0EwMkEyQjk0N0M2RjM2NzA0QUQyNDNDMEIzRTc3REZE
OTZDNEI2MUJENDgyQjc3NzYyRUQ5MTJFNkYzRTJFNUFENTBENUQ3NjlCQjYwOUJB
MTdEQkNCNTg2RjdCQjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4+Uz07/UvhR/8c/5M0ctSF9IbG6ZSJQDljZMFuDDA3g6QOEjDm9F
0gQd9bNJCOX70UZ7Vp4FErTw9woJY9fplArqltpTVWbBH+rMWCa7wcPRNTdwlbUA
wdnMIJlHQMn6B5e4+eHr8YXexa8MF9WNHNrhMcutKmUgWv1vfNpUZ60Ky//CnFXU
b+1D1Jg9b21CWKV+O5+HVk0kxKh/bAt7tpSF+4L44+x3jMPJ8ytmTRKsjc/ccOO6
AeRURtncy+WqeEHIYdtQ0F7DmB4g9JTvAYOgKiuUfG82cErSQ8Cz5339lsS2G9SC
t3di7ZEubz4uWtUNXXabtgm6F9vLWG97sQIDAQABo4IB9TCCAfEwHQYDVR0OBBYE
FIUVkLCIAYHh7M0NldsUJTm1fX7SMB8GA1UdIwQYMBaAFGem5SBr41Ad3TjW8xwz
aCAMQ6RzMA4GA1UdDwEB/wQEAwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xNzgvNjdB
NkU1MjA2QkUzNTAxREREMzhENkYzMUMzMzY4MjAwQzQzQTQ3My5jcmwwZAYIKwYB
BQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVw
b3NpdG9yeS9ERUZBVUxUL1o2YmxJR3ZqVUIzZE9OYnpIRE5vSUF4RHBITS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpMS50ZXJy
YXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQvMTc4LzMxMzkzMzJlMzQzMjJl
MzEzMzM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMEqiDANBgkqhkiG9w0BAQsFAAOCAQEAhfuiDSSQyxLXZJ7nIMHO2FD9IKCz
bIOHGwglpRgJ/ry39qxPhp31D7bq1et4nRuHOVK2rnADuCo8o0bWmRjdih75UXbC
vJWWRzyG0FWkxUeA/K3VyA6I/4wqcSDUPwL7rzVnquYtaOWgUDYCyFbbbwYCwYRF
zwE/DksGZof52Ia7/rRSfGcesczp2E4tlANiWxcegNLMJrVwEQGF0XXuokMOzux5
DQBRoWMofdap5ZzGKaZ8flwI1Qw2TldDBKay6OuhZD0tKcNJsdODDW3NcNMM289I
T7IOLIRc4qivnPDXp7yctiggGnqxO1KnxeRyxShfEnOVO8ru5KqGYQLSmg==
-----END CERTIFICATE-----