Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138352e38332e302f32342d3234203d3e203631333137.roa
File:                     3138352e3138352e38332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          YVeKFz4ODSquju1Sy9FcXjcQ0Ijqcl/20V8Zg5/dbVA=
Subject key identifier:   35:EA:CE:9B:1E:2D:0E:DB:27:DC:CF:9A:99:6B:79:8B:02:F7:40:09
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       5BA6CA8DFDEE9292CC965A6A217C07D83CCCE15A
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138352e38332e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 27 Nov 2020 15:10:40 +0000
ROA not before:           Fri 27 Nov 2020 15:05:40 +0000
ROA not after:            Fri 26 Nov 2021 15:10:40 +0000
asID:                     61317
IP address blocks:        185.185.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:a6:ca:8d:fd:ee:92:92:cc:96:5a:6a:21:7c:07:d8:3c:cc:e1:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 27 15:05:40 2020 GMT
            Not After : Nov 26 15:10:40 2021 GMT
        Subject: CN=3082010A0282010100B3F7677A9E21F8FC4B911C7E5F99795A3E3FF3C8878EB8D70156930A6CD632246F695A720AE84F5480A57FA4F9E2DB8D4BD9FFBD84FB3ADB59CC64D168C8F2A608DE09A5D970A1F6153EAEE3831713677CB03DCD00158ECD7E2AA6E3695C69A0F573670A2BEF7CCE52EE7A44069899A553AAF70EDF2ECEEEE0F7F3354FC0E9B2BCE8C4337793AB7FDC8840B93C63AB25A154AC6D860BCC1AC4B8953CBF7D5996459413CD8F8066B73B72F627D874C5C0FFF7958F7FBE344B1C895F6CD004A96E9CBF9E8048B32BBCDA720C772D186C0EC226BFE6B857C4928A89702EB2A814CF8ECC52CC4B4BE46C3C32684E56685F604DD9AA0A6EBD0FDA6F2AC6B3C0804FA50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f7:67:7a:9e:21:f8:fc:4b:91:1c:7e:5f:99:
                    79:5a:3e:3f:f3:c8:87:8e:b8:d7:01:56:93:0a:6c:
                    d6:32:24:6f:69:5a:72:0a:e8:4f:54:80:a5:7f:a4:
                    f9:e2:db:8d:4b:d9:ff:bd:84:fb:3a:db:59:cc:64:
                    d1:68:c8:f2:a6:08:de:09:a5:d9:70:a1:f6:15:3e:
                    ae:e3:83:17:13:67:7c:b0:3d:cd:00:15:8e:cd:7e:
                    2a:a6:e3:69:5c:69:a0:f5:73:67:0a:2b:ef:7c:ce:
                    52:ee:7a:44:06:98:99:a5:53:aa:f7:0e:df:2e:ce:
                    ee:e0:f7:f3:35:4f:c0:e9:b2:bc:e8:c4:33:77:93:
                    ab:7f:dc:88:40:b9:3c:63:ab:25:a1:54:ac:6d:86:
                    0b:cc:1a:c4:b8:95:3c:bf:7d:59:96:45:94:13:cd:
                    8f:80:66:b7:3b:72:f6:27:d8:74:c5:c0:ff:f7:95:
                    8f:7f:be:34:4b:1c:89:5f:6c:d0:04:a9:6e:9c:bf:
                    9e:80:48:b3:2b:bc:da:72:0c:77:2d:18:6c:0e:c2:
                    26:bf:e6:b8:57:c4:92:8a:89:70:2e:b2:a8:14:cf:
                    8e:cc:52:cc:4b:4b:e4:6c:3c:32:68:4e:56:68:5f:
                    60:4d:d9:aa:0a:6e:bd:0f:da:6f:2a:c6:b3:c0:80:
                    4f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:EA:CE:9B:1E:2D:0E:DB:27:DC:CF:9A:99:6B:79:8B:02:F7:40:09
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138352e38332e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.185.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:49:47:31:8b:07:fd:25:c1:fd:f8:5b:07:42:57:3d:09:d0:
         43:8c:d9:1d:cd:a8:da:b3:7b:d0:f8:79:c4:10:3a:ee:e5:c6:
         2f:47:a8:5b:d0:1c:fd:ff:65:02:6d:78:86:c9:f5:9e:61:4e:
         8e:a9:5d:1b:52:61:4a:18:72:79:de:df:7d:1b:18:76:9c:c0:
         35:31:21:3e:39:a3:67:3a:f2:a4:10:a3:5b:cd:cd:02:16:d8:
         f3:9d:51:ae:2a:cd:2e:bb:ee:67:24:35:f7:d0:89:5e:64:0a:
         8f:91:e9:23:bd:5d:52:db:70:91:cb:a7:6f:c3:e2:94:5c:0a:
         e8:ee:53:8d:e9:90:3b:2e:52:30:2f:d2:4a:56:a9:11:40:1e:
         69:10:07:e3:56:2f:23:f3:a3:ab:83:a5:ac:a1:21:4f:39:50:
         98:64:95:50:80:6e:28:de:56:cd:5f:c1:fe:30:d0:ff:43:bb:
         74:e0:31:31:ea:b5:40:81:6e:b7:11:13:24:bb:82:e2:1f:1b:
         2c:90:5c:9b:58:ca:c1:d5:73:f2:8e:08:ac:b7:c6:01:fb:c1:
         6e:5f:26:65:c3:d1:df:fa:ca:79:d0:85:2a:f6:e1:55:71:10:
         22:b8:98:8f:b4:f5:07:00:c0:4b:4c:fe:07:9d:4d:41:4a:68:
         9b:b7:4f:0a
-----BEGIN CERTIFICATE-----
MIIG4zCCBcugAwIBAgIUW6bKjf3ukpLMllpqIXwH2DzM4VowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMDExMjcxNTA1NDBaFw0yMTExMjYxNTEwNDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjNGNzY3N0E5RTIxRjhGQzRC
OTExQzdFNUY5OTc5NUEzRTNGRjNDODg3OEVCOEQ3MDE1NjkzMEE2Q0Q2MzIyNDZG
Njk1QTcyMEFFODRGNTQ4MEE1N0ZBNEY5RTJEQjhENEJEOUZGQkQ4NEZCM0FEQjU5
Q0M2NEQxNjhDOEYyQTYwOERFMDlBNUQ5NzBBMUY2MTUzRUFFRTM4MzE3MTM2NzdD
QjAzRENEMDAxNThFQ0Q3RTJBQTZFMzY5NUM2OUEwRjU3MzY3MEEyQkVGN0NDRTUy
RUU3QTQ0MDY5ODk5QTU1M0FBRjcwRURGMkVDRUVFRTBGN0YzMzU0RkMwRTlCMkJD
RThDNDMzNzc5M0FCN0ZEQzg4NDBCOTNDNjNBQjI1QTE1NEFDNkQ4NjBCQ0MxQUM0
Qjg5NTNDQkY3RDU5OTY0NTk0MTNDRDhGODA2NkI3M0I3MkY2MjdEODc0QzVDMEZG
Rjc5NThGN0ZCRTM0NEIxQzg5NUY2Q0QwMDRBOTZFOUNCRjlFODA0OEIzMkJCQ0RB
NzIwQzc3MkQxODZDMEVDMjI2QkZFNkI4NTdDNDkyOEE4OTcwMkVCMkE4MTRDRjhF
Q0M1MkNDNEI0QkU0NkMzQzMyNjg0RTU2Njg1RjYwNEREOUFBMEE2RUJEMEZEQTZG
MkFDNkIzQzA4MDRGQTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAs/dnep4h+PxLkRx+X5l5Wj4/88iHjrjXAVaTCmzWMiRvaVpyCuhP
VIClf6T54tuNS9n/vYT7OttZzGTRaMjypgjeCaXZcKH2FT6u44MXE2d8sD3NABWO
zX4qpuNpXGmg9XNnCivvfM5S7npEBpiZpVOq9w7fLs7u4PfzNU/A6bK86MQzd5Or
f9yIQLk8Y6sloVSsbYYLzBrEuJU8v31ZlkWUE82PgGa3O3L2J9h0xcD/95WPf740
SxyJX2zQBKlunL+egEizK7zacgx3LRhsDsImv+a4V8SSiolwLrKoFM+OzFLMS0vk
bDwyaE5WaF9gTdmqCm69D9pvKsazwIBPpQIDAQABo4IB8TCCAe0wHQYDVR0OBBYE
FDXqzpseLQ7bJ9zPmplreYsC90AJMB8GA1UdIwQYMBaAFKa2XUcJ9s/ZmaKHeJOS
uqbTpdzqMA4GA1UdDwEB/wQEAwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC80L0E2QjY1
RDQ3MDlGNkNGRDk5OUEyODc3ODkzOTJCQUE2RDNBNURDRUEuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9wclpkUnduMno5bVpvb2Q0azVLNnB0T2wzT28uY2VyMIGI
BggrBgEFBQcBCwR8MHoweAYIKwYBBQUHMAuGbHJzeW5jOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0LzQvMzEzODM1MmUzMTM4MzUyZTM4
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMxMzMzMTM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
ublTMA0GCSqGSIb3DQEBCwUAA4IBAQA2SUcxiwf9JcH9+FsHQlc9CdBDjNkdzaja
s3vQ+HnEEDru5cYvR6hb0Bz9/2UCbXiGyfWeYU6OqV0bUmFKGHJ53t99Gxh2nMA1
MSE+OaNnOvKkEKNbzc0CFtjznVGuKs0uu+5nJDX30IleZAqPkekjvV1S23CRy6dv
w+KUXAro7lON6ZA7LlIwL9JKVqkRQB5pEAfjVi8j86Org6WsoSFPOVCYZJVQgG4o
3lbNX8H+MND/Q7t04DEx6rVAgW63ERMku4LiHxsskFybWMrB1XPyjgist8YB+8Fu
XyZlw9Hf+sp50IUq9uFVcRAiuJiPtPUHAMBLTP4HnU1BSmibt08K
-----END CERTIFICATE-----