Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3136362e3138382e302f32342d3234203d3e203631333137.roa
File:                     3138352e3136362e3138382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          /k1jY0VUTw9Lhkf26p26GVJDjSbSTwV/J9lBTwMUZKc=
Subject key identifier:   53:AA:61:33:1B:C6:4E:B2:B1:D7:99:FF:03:19:B4:41:56:DC:CA:C6
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       4E1AA92C045A36BC28DFA0944BDB93836F0BD30A
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3136362e3138382e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 27 Nov 2020 15:10:38 +0000
ROA not before:           Fri 27 Nov 2020 15:05:38 +0000
ROA not after:            Fri 26 Nov 2021 15:10:38 +0000
asID:                     61317
IP address blocks:        185.166.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:1a:a9:2c:04:5a:36:bc:28:df:a0:94:4b:db:93:83:6f:0b:d3:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 27 15:05:38 2020 GMT
            Not After : Nov 26 15:10:38 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fc:d9:8b:b1:95:0f:6b:db:02:ce:a2:6c:df:
                    14:63:9a:b2:8e:59:1c:c8:fd:0a:f9:28:93:cc:9a:
                    1c:5d:a0:5d:64:19:27:4c:6a:6e:61:97:dc:12:99:
                    72:10:08:fc:5a:9c:67:ff:b9:d0:de:bd:25:9e:59:
                    e5:ed:ff:d7:98:2a:57:7c:10:9f:a3:ea:fc:a9:e0:
                    f8:db:07:f9:47:42:fe:48:8a:e5:c1:90:7c:db:34:
                    a4:c1:f9:60:4c:a1:da:94:4f:b7:49:f5:78:a8:03:
                    c4:39:a6:86:38:46:ba:c5:67:0f:78:d7:58:f5:f1:
                    92:63:fc:30:9f:34:a4:ba:e5:96:8f:59:53:99:71:
                    15:d7:3f:41:f7:72:14:53:6a:f0:29:89:f1:bb:dd:
                    1a:61:40:6e:66:0a:2d:9a:5c:3e:31:cb:24:67:73:
                    7b:22:c8:72:5e:10:99:8f:7d:e9:77:ef:08:43:b9:
                    dc:c0:99:4a:51:44:a9:95:4b:4e:88:95:8e:7f:4a:
                    8a:f7:fc:e0:ab:0f:4f:94:44:bf:2e:9b:a3:42:98:
                    75:da:ce:83:40:01:30:4b:b9:d1:74:e4:bc:0a:32:
                    36:7e:ab:21:4f:94:a7:33:05:c1:73:d6:f2:4f:ae:
                    ca:8b:c7:c5:09:af:97:59:0f:a3:30:4f:ab:8a:ad:
                    20:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:AA:61:33:1B:C6:4E:B2:B1:D7:99:FF:03:19:B4:41:56:DC:CA:C6
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3136362e3138382e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.166.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:c6:af:ae:b8:47:2d:f4:41:e0:ec:16:f8:ac:d2:d5:9f:05:
         e8:33:33:cd:57:3d:88:25:cf:3e:0e:de:c9:82:4c:2b:59:0b:
         c4:83:7a:21:b0:0d:b7:a2:a8:bf:35:52:3c:ae:f3:65:6f:57:
         88:95:5b:b4:21:5e:0a:df:79:1e:e8:1a:6e:53:15:52:82:db:
         de:3f:4c:b6:4f:30:31:78:0d:a4:d0:ab:2b:4d:e1:65:86:df:
         80:bf:a3:9e:f7:41:1a:4b:6a:c4:14:bb:75:5a:3b:4d:04:74:
         34:dc:21:81:a9:62:57:cc:11:2a:9d:d2:2d:20:c3:0e:55:5f:
         e3:4a:7e:64:46:99:13:e4:a3:de:e0:82:5b:15:00:c7:76:91:
         f9:d3:23:9f:18:95:a8:84:56:8f:46:71:ac:2f:7e:fc:22:82:
         75:93:24:e1:f6:eb:c4:82:49:9b:16:c6:ba:41:fd:ea:c4:b0:
         e5:34:7d:da:ca:a4:19:0c:66:8e:97:a4:3a:54:bb:62:56:db:
         cd:43:76:df:00:6f:b9:ba:f8:c5:7c:04:9c:3f:ed:2c:fe:4c:
         b8:c0:6c:ec:79:52:8f:81:e4:e3:5b:eb:de:a3:78:d4:ea:7a:
         e7:f4:4d:5f:05:a9:25:26:bb:67:2f:af:01:3a:d6:1e:50:23:
         61:a4:29:ef
-----BEGIN CERTIFICATE-----
MIIG5TCCBc2gAwIBAgIUThqpLARaNrwo36CUS9uTg28L0wowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMDExMjcxNTA1MzhaFw0yMTExMjYxNTEwMzhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjNGQ0Q5OEJCMTk1MEY2QkRC
MDJDRUEyNkNERjE0NjM5QUIyOEU1OTFDQzhGRDBBRjkyODkzQ0M5QTFDNURBMDVE
NjQxOTI3NEM2QTZFNjE5N0RDMTI5OTcyMTAwOEZDNUE5QzY3RkZCOUQwREVCRDI1
OUU1OUU1RURGRkQ3OTgyQTU3N0MxMDlGQTNFQUZDQTlFMEY4REIwN0Y5NDc0MkZF
NDg4QUU1QzE5MDdDREIzNEE0QzFGOTYwNENBMURBOTQ0RkI3NDlGNTc4QTgwM0M0
MzlBNjg2Mzg0NkJBQzU2NzBGNzhENzU4RjVGMTkyNjNGQzMwOUYzNEE0QkFFNTk2
OEY1OTUzOTk3MTE1RDczRjQxRjc3MjE0NTM2QUYwMjk4OUYxQkJERDFBNjE0MDZF
NjYwQTJEOUE1QzNFMzFDQjI0Njc3MzdCMjJDODcyNUUxMDk5OEY3REU5NzdFRjA4
NDNCOURDQzA5OTRBNTE0NEE5OTU0QjRFODg5NThFN0Y0QThBRjdGQ0UwQUIwRjRG
OTQ0NEJGMkU5QkEzNDI5ODc1REFDRTgzNDAwMTMwNEJCOUQxNzRFNEJDMEEzMjM2
N0VBQjIxNEY5NEE3MzMwNUMxNzNENkYyNEZBRUNBOEJDN0M1MDlBRjk3NTkwRkEz
MzA0RkFCOEFBRDIwQTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAs/zZi7GVD2vbAs6ibN8UY5qyjlkcyP0K+SiTzJocXaBdZBknTGpu
YZfcEplyEAj8Wpxn/7nQ3r0lnlnl7f/XmCpXfBCfo+r8qeD42wf5R0L+SIrlwZB8
2zSkwflgTKHalE+3SfV4qAPEOaaGOEa6xWcPeNdY9fGSY/wwnzSkuuWWj1lTmXEV
1z9B93IUU2rwKYnxu90aYUBuZgotmlw+McskZ3N7IshyXhCZj33pd+8IQ7ncwJlK
UUSplUtOiJWOf0qK9/zgqw9PlES/LpujQph12s6DQAEwS7nRdOS8CjI2fqshT5Sn
MwXBc9byT67Ki8fFCa+XWQ+jME+riq0gowIDAQABo4IB8zCCAe8wHQYDVR0OBBYE
FFOqYTMbxk6ysdeZ/wMZtEFW3MrGMB8GA1UdIwQYMBaAFKa2XUcJ9s/ZmaKHeJOS
uqbTpdzqMA4GA1UdDwEB/wQEAwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC80L0E2QjY1
RDQ3MDlGNkNGRDk5OUEyODc3ODkzOTJCQUE2RDNBNURDRUEuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9wclpkUnduMno5bVpvb2Q0azVLNnB0T2wzT28uY2VyMIGK
BggrBgEFBQcBCwR+MHwwegYIKwYBBQUHMAuGbnJzeW5jOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0LzQvMzEzODM1MmUzMTM2MzYyZTMx
MzgzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzEzMzMxMzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5prwwDQYJKoZIhvcNAQELBQADggEBADLGr664Ry30QeDsFvis0tWfBegzM81X
PYglzz4O3smCTCtZC8SDeiGwDbeiqL81Ujyu82VvV4iVW7QhXgrfeR7oGm5TFVKC
294/TLZPMDF4DaTQqytN4WWG34C/o573QRpLasQUu3VaO00EdDTcIYGpYlfMESqd
0i0gww5VX+NKfmRGmRPko97gglsVAMd2kfnTI58YlaiEVo9GcawvfvwignWTJOH2
68SCSZsWxrpB/erEsOU0fdrKpBkMZo6XpDpUu2JW281Ddt8Ab7m6+MV8BJw/7Sz+
TLjAbOx5Uo+B5ONb696jeNTqeuf0TV8FqSUmu2cvrwE61h5QI2GkKe8=
-----END CERTIFICATE-----