Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139322e3136362e3234362e302f32332d3234203d3e203631333137.roa
File:                     3139322e3136362e3234362e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          jgtqoF07/cL6J1zR+cLLLgMqkdxnXNK2BPV0Log743U=
Subject key identifier:   36:F5:08:89:60:64:E0:77:38:64:4A:94:6C:02:AD:D1:19:58:D4:94
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       0A4FCFF185C2324711468D25FF76459A4FD80BFB
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139322e3136362e3234362e302f32332d3234203d3e203631333137.roa
Signing time:             Fri 27 Nov 2020 15:10:18 +0000
ROA not before:           Fri 27 Nov 2020 15:05:18 +0000
ROA not after:            Fri 26 Nov 2021 15:10:18 +0000
asID:                     61317
IP address blocks:        192.166.246.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:4f:cf:f1:85:c2:32:47:11:46:8d:25:ff:76:45:9a:4f:d8:0b:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Nov 27 15:05:18 2020 GMT
            Not After : Nov 26 15:10:18 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:05:5d:c6:c7:15:6d:6c:37:be:30:09:db:d6:
                    c4:a7:37:fc:60:c9:72:13:77:61:8f:5b:f8:ef:3d:
                    30:6a:1a:54:5c:2f:b7:ab:49:7b:fc:f6:09:aa:aa:
                    f3:19:81:f9:c1:0b:59:d3:a0:fb:28:62:67:54:2d:
                    94:79:88:74:54:52:e1:51:70:ad:1f:24:72:3e:39:
                    cb:5a:60:67:d2:76:26:38:a0:c7:45:0b:cf:f2:86:
                    19:a2:a7:c3:2b:ab:01:a9:21:77:cf:fb:cd:72:f3:
                    5f:80:ec:9b:98:c4:63:97:b5:14:4f:11:17:7f:fd:
                    cb:6a:1e:7a:05:79:fe:75:84:ec:c3:92:d6:4a:fd:
                    19:00:1c:5a:68:b1:9b:da:d5:06:09:bc:25:b4:a0:
                    7a:e4:7b:84:79:19:a9:6e:f9:24:54:fd:83:07:ab:
                    63:ec:80:05:a1:7d:52:d9:ad:b9:8d:55:21:e2:ec:
                    f4:e7:c1:8a:75:04:ee:b2:cd:31:91:01:95:61:ce:
                    35:87:46:87:09:7b:77:00:d3:4e:2c:4f:ad:0b:15:
                    32:a5:0b:9a:c0:5d:46:2f:d8:df:e3:d8:24:1c:82:
                    f5:9e:9f:48:83:df:04:2a:d2:26:b9:ce:34:9d:20:
                    dc:fe:bc:16:6c:bb:9e:17:38:0a:ce:3b:40:aa:e7:
                    53:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F5:08:89:60:64:E0:77:38:64:4A:94:6C:02:AD:D1:19:58:D4:94
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139322e3136362e3234362e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.166.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:4f:d8:64:fb:b1:32:3c:02:9c:95:26:e9:91:9f:1e:f8:ba:
         ef:00:96:78:ff:98:0b:b1:2a:4e:3c:24:d3:e5:20:f7:85:72:
         e2:fa:47:da:0e:c5:8d:9b:42:29:1a:3c:07:bf:c7:60:cd:32:
         a5:b6:6a:ff:f3:0c:96:fe:38:e3:2e:4c:97:0a:fe:c9:2e:6c:
         58:ad:67:85:24:b8:5e:1c:ba:ba:63:80:0a:9d:d5:9a:15:a8:
         9c:e6:53:23:2d:87:3c:95:29:35:a7:69:68:92:30:60:8f:1b:
         1c:c1:a0:3b:ce:56:6a:b1:46:c5:27:92:d0:83:32:5d:bb:72:
         6d:fa:b2:dd:85:d7:33:6c:21:2d:4f:8e:c3:38:f0:3a:31:a7:
         b2:f0:8e:03:a7:56:34:c4:60:49:aa:82:f6:ab:9c:45:3a:ac:
         e8:32:90:fb:ee:22:07:7a:30:fd:b4:d1:a3:43:60:2b:e6:da:
         2a:c2:df:f4:bf:72:9c:7a:ba:db:5e:92:01:9e:bb:c6:24:33:
         34:04:b5:29:8e:6e:e9:6d:ba:c7:e8:15:d7:cb:8a:8f:f2:f5:
         89:8b:60:0b:54:40:5a:56:77:4e:53:a0:05:3a:8d:71:70:19:
         61:da:13:97:d2:71:15:a7:ef:20:4b:a3:fc:bc:71:bd:3b:a4:
         ca:fb:5e:b2
-----BEGIN CERTIFICATE-----
MIIG5TCCBc2gAwIBAgIUCk/P8YXCMkcRRo0l/3ZFmk/YC/swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdhOGFmMmI1ZmU4MzFmZjU4OWViMzhhZTNjMDI1Y2U4
NzFmMjNlNzAeFw0yMDExMjcxNTA1MThaFw0yMTExMjYxNTEwMThaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0YwNTVEQzZDNzE1NkQ2QzM3
QkUzMDA5REJENkM0QTczN0ZDNjBDOTcyMTM3NzYxOEY1QkY4RUYzRDMwNkExQTU0
NUMyRkI3QUI0OTdCRkNGNjA5QUFBQUYzMTk4MUY5QzEwQjU5RDNBMEZCMjg2MjY3
NTQyRDk0Nzk4ODc0NTQ1MkUxNTE3MEFEMUYyNDcyM0UzOUNCNUE2MDY3RDI3NjI2
MzhBMEM3NDUwQkNGRjI4NjE5QTJBN0MzMkJBQjAxQTkyMTc3Q0ZGQkNENzJGMzVG
ODBFQzlCOThDNDYzOTdCNTE0NEYxMTE3N0ZGRENCNkExRTdBMDU3OUZFNzU4NEVD
QzM5MkQ2NEFGRDE5MDAxQzVBNjhCMTlCREFENTA2MDlCQzI1QjRBMDdBRTQ3Qjg0
NzkxOUE5NkVGOTI0NTRGRDgzMDdBQjYzRUM4MDA1QTE3RDUyRDlBREI5OEQ1NTIx
RTJFQ0Y0RTdDMThBNzUwNEVFQjJDRDMxOTEwMTk1NjFDRTM1ODc0Njg3MDk3Qjc3
MDBEMzRFMkM0RkFEMEIxNTMyQTUwQjlBQzA1RDQ2MkZEOERGRTNEODI0MUM4MkY1
OUU5RjQ4ODNERjA0MkFEMjI2QjlDRTM0OUQyMERDRkVCQzE2NkNCQjlFMTczODBB
Q0UzQjQwQUFFNzUzODMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzwVdxscVbWw3vjAJ29bEpzf8YMlyE3dhj1v47z0wahpUXC+3q0l7
/PYJqqrzGYH5wQtZ06D7KGJnVC2UeYh0VFLhUXCtHyRyPjnLWmBn0nYmOKDHRQvP
8oYZoqfDK6sBqSF3z/vNcvNfgOybmMRjl7UUTxEXf/3Lah56BXn+dYTsw5LWSv0Z
ABxaaLGb2tUGCbwltKB65HuEeRmpbvkkVP2DB6tj7IAFoX1S2a25jVUh4uz058GK
dQTuss0xkQGVYc41h0aHCXt3ANNOLE+tCxUypQuawF1GL9jf49gkHIL1np9Ig98E
KtImuc40nSDc/rwWbLueFzgKzjtAqudTgwIDAQABo4IB8zCCAe8wHQYDVR0OBBYE
FDb1CIlgZOB3OGRKlGwCrdEZWNSUMB8GA1UdIwQYMBaAFAeorytf6DH/WJ6ziuPA
Jc6HHyPnMA4GA1UdDwEB/wQEAwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8yLzA3QThB
RjJCNUZFODMxRkY1ODlFQjM4QUUzQzAyNUNFODcxRjIzRTcuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9CNml2SzFfb01mOVluck9LNDhBbHpvY2ZJLWMuY2VyMIGK
BggrBgEFBQcBCwR+MHwwegYIKwYBBQUHMAuGbnJzeW5jOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0LzIvMzEzOTMyMmUzMTM2MzYyZTMy
MzQzNjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM2MzEzMzMxMzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAHApvYwDQYJKoZIhvcNAQELBQADggEBADxP2GT7sTI8ApyVJumRnx74uu8Alnj/
mAuxKk48JNPlIPeFcuL6R9oOxY2bQikaPAe/x2DNMqW2av/zDJb+OOMuTJcK/sku
bFitZ4UkuF4curpjgAqd1ZoVqJzmUyMthzyVKTWnaWiSMGCPGxzBoDvOVmqxRsUn
ktCDMl27cm36st2F1zNsIS1PjsM48Doxp7LwjgOnVjTEYEmqgvarnEU6rOgykPvu
Igd6MP200aNDYCvm2irC3/S/cpx6uttekgGeu8YkMzQEtSmObultusfoFdfLio/y
9YmLYAtUQFpWd05ToAU6jXFwGWHaE5fScRWn7yBLo/y8cb07pMr7XrI=
-----END CERTIFICATE-----