Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3136362e3138382e302f32342d3234203d3e20323133303335.roa
File:                     3138352e3136362e3138382e302f32342d3234203d3e20323133303335.roa (raw, json)
Hash identifier:          C9QCyoGNUy9rhq1+hEgRCo2PVca+F/zdWvhfnqKqtjs=
Subject key identifier:   2F:09:3A:C0:76:2E:70:62:54:21:1D:08:41:92:4D:11:15:00:58:65
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       0DEF4F58D67F3C7047446B919AA6B348CDFAA0FE
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3136362e3138382e302f32342d3234203d3e20323133303335.roa
Signing time:             Fri 27 Nov 2020 15:10:31 +0000
ROA not before:           Fri 27 Nov 2020 15:05:31 +0000
ROA not after:            Fri 26 Nov 2021 15:10:31 +0000
asID:                     213035
IP address blocks:        185.166.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ef:4f:58:d6:7f:3c:70:47:44:6b:91:9a:a6:b3:48:cd:fa:a0:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 27 15:05:31 2020 GMT
            Not After : Nov 26 15:10:31 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ec:f9:8e:3c:cc:e1:59:d2:00:5f:58:78:35:
                    0b:52:74:88:0c:b9:4d:c6:00:58:71:ec:d2:71:01:
                    27:c1:fe:f0:cb:1a:00:34:51:56:18:03:86:44:58:
                    d5:84:72:6c:a3:97:fe:39:09:cf:ef:a0:1a:7b:e1:
                    5e:a0:46:64:f6:42:8d:a8:9e:76:29:2f:f8:12:70:
                    ba:a2:7d:37:a8:3a:15:6c:19:6c:98:cc:bc:7b:c6:
                    e5:03:9c:e0:5f:f4:6a:60:07:d3:d1:d9:8d:a3:2b:
                    ed:3d:82:40:ea:25:65:6b:9b:53:e1:df:47:87:a0:
                    49:5a:17:a4:6c:4d:9a:4e:e0:c4:39:69:30:11:f7:
                    fd:bd:d5:a1:5f:8c:0c:f8:b0:79:29:f3:ca:01:7c:
                    5b:bb:f4:bd:b2:9a:41:ec:46:c8:10:e6:a9:79:ff:
                    de:49:12:bf:c9:db:21:62:ea:53:a7:cf:b8:ae:b3:
                    77:a1:78:ff:dc:bf:e9:25:37:92:95:e4:07:84:26:
                    3e:bb:60:49:14:7a:57:aa:93:d4:ba:11:a2:b6:06:
                    62:e2:1d:4d:b6:7a:05:6a:84:2a:3a:ef:bf:00:a9:
                    18:29:20:90:1f:b5:b2:16:77:ef:f6:33:e2:78:4c:
                    19:04:b3:f2:71:02:8c:c9:95:d3:38:5a:46:fe:e4:
                    12:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:09:3A:C0:76:2E:70:62:54:21:1D:08:41:92:4D:11:15:00:58:65
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3136362e3138382e302f32342d3234203d3e20323133303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.166.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:2b:09:03:b5:c4:70:42:8c:61:fa:27:9e:af:4e:a9:57:dc:
         e1:50:81:d2:83:6d:0b:f0:56:52:73:cd:e2:8a:41:0c:32:0c:
         26:7f:6d:1c:99:81:e4:89:31:9c:e7:35:2a:e9:ad:ef:02:66:
         7f:a6:87:eb:96:d7:91:1d:dc:2c:01:9e:15:5f:25:2b:b4:4f:
         97:12:c3:98:c7:53:64:4e:ea:02:17:e0:44:76:cb:87:89:af:
         10:19:c3:8b:8e:f6:0c:4b:f2:c3:3f:f3:38:66:85:cf:b5:1d:
         7f:c1:e8:99:58:03:a5:06:2e:86:91:5f:3d:27:f1:d9:af:33:
         85:35:d2:b0:88:6f:49:c9:a6:49:17:9c:00:55:0b:48:9d:9b:
         bb:f9:c0:dd:3d:c3:20:55:b8:23:4c:81:e8:f1:fe:16:c7:90:
         5f:52:d0:23:fd:0e:60:b7:41:cc:d1:64:67:d2:8b:21:c6:e9:
         f8:50:9b:b5:42:7e:86:8a:b0:fa:25:2a:4d:26:48:e9:c1:cb:
         35:69:d7:fb:c2:01:62:1c:19:47:da:61:08:5d:60:bb:4d:37:
         58:7d:9f:0e:6d:ae:4b:be:c6:2b:85:9c:e6:64:95:90:4b:b7:
         70:bf:d2:9a:86:ed:90:02:56:f3:9a:fd:b1:9b:6c:42:2a:a4:
         4f:cb:9b:e5
-----BEGIN CERTIFICATE-----
MIIG6DCCBdCgAwIBAgIUDe9PWNZ/PHBHRGuRmqazSM36oP4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMDExMjcxNTA1MzFaFw0yMTExMjYxNTEwMzFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzBFQ0Y5OEUzQ0NDRTE1OUQy
MDA1RjU4NzgzNTBCNTI3NDg4MENCOTREQzYwMDU4NzFFQ0QyNzEwMTI3QzFGRUYw
Q0IxQTAwMzQ1MTU2MTgwMzg2NDQ1OEQ1ODQ3MjZDQTM5N0ZFMzkwOUNGRUZBMDFB
N0JFMTVFQTA0NjY0RjY0MjhEQTg5RTc2MjkyRkY4MTI3MEJBQTI3RDM3QTgzQTE1
NkMxOTZDOThDQ0JDN0JDNkU1MDM5Q0UwNUZGNDZBNjAwN0QzRDFEOThEQTMyQkVE
M0Q4MjQwRUEyNTY1NkI5QjUzRTFERjQ3ODdBMDQ5NUExN0E0NkM0RDlBNEVFMEM0
Mzk2OTMwMTFGN0ZEQkRENUExNUY4QzBDRjhCMDc5MjlGM0NBMDE3QzVCQkJGNEJE
QjI5QTQxRUM0NkM4MTBFNkE5NzlGRkRFNDkxMkJGQzlEQjIxNjJFQTUzQTdDRkI4
QUVCMzc3QTE3OEZGRENCRkU5MjUzNzkyOTVFNDA3ODQyNjNFQkI2MDQ5MTQ3QTU3
QUE5M0Q0QkExMUEyQjYwNjYyRTIxRDREQjY3QTA1NkE4NDJBM0FFRkJGMDBBOTE4
MjkyMDkwMUZCNUIyMTY3N0VGRjYzM0UyNzg0QzE5MDRCM0YyNzEwMjhDQzk5NUQz
Mzg1QTQ2RkVFNDEyRTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwOz5jjzM4VnSAF9YeDULUnSIDLlNxgBYcezScQEnwf7wyxoANFFW
GAOGRFjVhHJso5f+OQnP76Aae+FeoEZk9kKNqJ52KS/4EnC6on03qDoVbBlsmMy8
e8blA5zgX/RqYAfT0dmNoyvtPYJA6iVla5tT4d9Hh6BJWhekbE2aTuDEOWkwEff9
vdWhX4wM+LB5KfPKAXxbu/S9sppB7EbIEOapef/eSRK/ydshYupTp8+4rrN3oXj/
3L/pJTeSleQHhCY+u2BJFHpXqpPUuhGitgZi4h1NtnoFaoQqOu+/AKkYKSCQH7Wy
Fnfv9jPieEwZBLPycQKMyZXTOFpG/uQS4QIDAQABo4IB9jCCAfIwHQYDVR0OBBYE
FC8JOsB2LnBiVCEdCEGSTREVAFhlMB8GA1UdIwQYMBaAFKa2XUcJ9s/ZmaKHeJOS
uqbTpdzqMA4GA1UdDwEB/wQEAwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC80L0E2QjY1
RDQ3MDlGNkNGRDk5OUEyODc3ODkzOTJCQUE2RDNBNURDRUEuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9wclpkUnduMno5bVpvb2Q0azVLNnB0T2wzT28uY2VyMIGN
BggrBgEFBQcBCwSBgDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kxLnRlcnJh
dHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC80LzMxMzgzNTJlMzEzNjM2MmUz
MTM4MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzMzMDMzMzUucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAC5prwwDQYJKoZIhvcNAQELBQADggEBAAcrCQO1xHBCjGH6J56vTqlX3OFQ
gdKDbQvwVlJzzeKKQQwyDCZ/bRyZgeSJMZznNSrpre8CZn+mh+uW15Ed3CwBnhVf
JSu0T5cSw5jHU2RO6gIX4ER2y4eJrxAZw4uO9gxL8sM/8zhmhc+1HX/B6JlYA6UG
LoaRXz0n8dmvM4U10rCIb0nJpkkXnABVC0idm7v5wN09wyBVuCNMgejx/hbHkF9S
0CP9DmC3QczRZGfSiyHG6fhQm7VCfoaKsPolKk0mSOnByzVp1/vCAWIcGUfaYQhd
YLtNN1h9nw5trku+xiuFnOZklZBLt3C/0pqG7ZACVvOa/bGbbEIqpE/Lm+U=
-----END CERTIFICATE-----