Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231322e36392e302f32342d3234203d3e203631333137.roa
File:                     3138352e3231322e36392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          7LvkvfGy//f+K6OPv+9i9F+uxpbAk+Lx2IIfa3JaXcU=
Subject key identifier:   DB:2C:70:39:8E:7C:0A:55:B6:C9:6D:4D:91:2C:90:3F:5C:DF:94:FD
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       1F2A47F66EEB5FB71E35BC14D9EEC6F04E458E43
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231322e36392e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 29 Oct 2021 16:00:13 +0000
ROA not before:           Fri 29 Oct 2021 15:55:13 +0000
ROA not after:            Fri 28 Oct 2022 16:00:13 +0000
asID:                     61317
IP address blocks:        185.212.69.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:2a:47:f6:6e:eb:5f:b7:1e:35:bc:14:d9:ee:c6:f0:4e:45:8e:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 29 15:55:13 2021 GMT
            Not After : Oct 28 16:00:13 2022 GMT
        Subject: CN=3082010A0282010100D2EAFF341E1C19D3AFA8E0A9552A29E567B57F3912C6AB0890F47F29B5E86252035DA5DD42D088756A492E938E2AF3F8969C8C99C606F2B9E071D6902FD5E8E7C2DE907E6009963BC40F9674251A2C61E54D1A867E3DD26FE5AABEEFF82939A07DF815FD46FD5F5A2347D9FDF844B8F57016F5004A83260A6E30E569D7BF4F9DFB537DE5C0EB5DE841355C486585ECA75EBA27FB918DB67523129198517CEB6FC2F8298CA604DCB4F50A865E2056ACD65F14F77EDBACDA0B9B352CFE8634FE1800DCFBD5BFD29B45C3670EF6BF55CC1BD4534D8B5BA5D1DDA5ECF57E8387B28636E222855F1CADB6068B2D8BCA827023743A1165217CDA1A43C762817625F0A90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ea:ff:34:1e:1c:19:d3:af:a8:e0:a9:55:2a:
                    29:e5:67:b5:7f:39:12:c6:ab:08:90:f4:7f:29:b5:
                    e8:62:52:03:5d:a5:dd:42:d0:88:75:6a:49:2e:93:
                    8e:2a:f3:f8:96:9c:8c:99:c6:06:f2:b9:e0:71:d6:
                    90:2f:d5:e8:e7:c2:de:90:7e:60:09:96:3b:c4:0f:
                    96:74:25:1a:2c:61:e5:4d:1a:86:7e:3d:d2:6f:e5:
                    aa:be:ef:f8:29:39:a0:7d:f8:15:fd:46:fd:5f:5a:
                    23:47:d9:fd:f8:44:b8:f5:70:16:f5:00:4a:83:26:
                    0a:6e:30:e5:69:d7:bf:4f:9d:fb:53:7d:e5:c0:eb:
                    5d:e8:41:35:5c:48:65:85:ec:a7:5e:ba:27:fb:91:
                    8d:b6:75:23:12:91:98:51:7c:eb:6f:c2:f8:29:8c:
                    a6:04:dc:b4:f5:0a:86:5e:20:56:ac:d6:5f:14:f7:
                    7e:db:ac:da:0b:9b:35:2c:fe:86:34:fe:18:00:dc:
                    fb:d5:bf:d2:9b:45:c3:67:0e:f6:bf:55:cc:1b:d4:
                    53:4d:8b:5b:a5:d1:dd:a5:ec:f5:7e:83:87:b2:86:
                    36:e2:22:85:5f:1c:ad:b6:06:8b:2d:8b:ca:82:70:
                    23:74:3a:11:65:21:7c:da:1a:43:c7:62:81:76:25:
                    f0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:2C:70:39:8E:7C:0A:55:B6:C9:6D:4D:91:2C:90:3F:5C:DF:94:FD
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231322e36392e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.212.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:29:2f:42:6b:e4:59:fa:ee:8a:6d:db:2b:a6:9b:f6:c9:9d:
         21:ed:93:8d:5d:76:70:e6:b7:88:db:7f:b7:d6:dc:ce:0d:4b:
         76:d8:e1:b6:8d:7c:fd:f3:69:8f:f2:bb:39:56:d6:be:44:42:
         32:89:47:34:04:cd:df:6a:8a:93:a1:36:ab:c5:ed:e7:ef:13:
         c1:e0:4f:d9:57:ef:71:ee:d1:66:69:d8:6c:1f:e0:53:75:8f:
         ff:25:b4:85:cf:da:f7:c8:bf:98:00:0f:20:5b:c7:24:56:85:
         00:1c:ff:ba:60:76:17:0e:f5:0e:19:69:98:52:55:5b:cc:40:
         a5:1a:39:58:68:68:72:2b:54:e5:3c:99:ed:52:67:42:5d:ce:
         e0:de:de:b5:48:70:f3:af:26:39:d4:cd:30:58:c4:89:c8:3d:
         d7:d1:da:d8:77:f8:1e:d9:fd:7d:65:72:71:1b:56:71:56:81:
         5c:c9:c0:49:ca:68:ab:ab:7c:b1:df:7b:4a:61:17:12:36:34:
         68:4d:55:10:67:5a:40:bf:91:7e:9f:7e:0e:57:f0:50:ec:06:
         22:4a:89:2f:a3:19:a8:42:1b:fe:e3:31:42:e1:05:e9:30:28:
         fe:a1:01:2b:41:2b:c0:30:e8:08:87:90:d6:33:a7:b9:bb:8e:
         0a:95:c8:43
-----BEGIN CERTIFICATE-----
MIIG4zCCBcugAwIBAgIUHypH9m7rX7ceNbwU2e7G8E5FjkMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMTEwMjkxNTU1MTNaFw0yMjEwMjgxNjAwMTNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDJFQUZGMzQxRTFDMTlEM0FG
QThFMEE5NTUyQTI5RTU2N0I1N0YzOTEyQzZBQjA4OTBGNDdGMjlCNUU4NjI1MjAz
NURBNURENDJEMDg4NzU2QTQ5MkU5MzhFMkFGM0Y4OTY5QzhDOTlDNjA2RjJCOUUw
NzFENjkwMkZENUU4RTdDMkRFOTA3RTYwMDk5NjNCQzQwRjk2NzQyNTFBMkM2MUU1
NEQxQTg2N0UzREQyNkZFNUFBQkVFRkY4MjkzOUEwN0RGODE1RkQ0NkZENUY1QTIz
NDdEOUZERjg0NEI4RjU3MDE2RjUwMDRBODMyNjBBNkUzMEU1NjlEN0JGNEY5REZC
NTM3REU1QzBFQjVERTg0MTM1NUM0ODY1ODVFQ0E3NUVCQTI3RkI5MThEQjY3NTIz
MTI5MTk4NTE3Q0VCNkZDMkY4Mjk4Q0E2MDREQ0I0RjUwQTg2NUUyMDU2QUNENjVG
MTRGNzdFREJBQ0RBMEI5QjM1MkNGRTg2MzRGRTE4MDBEQ0ZCRDVCRkQyOUI0NUMz
NjcwRUY2QkY1NUNDMUJENDUzNEQ4QjVCQTVEMUREQTVFQ0Y1N0U4Mzg3QjI4NjM2
RTIyMjg1NUYxQ0FEQjYwNjhCMkQ4QkNBODI3MDIzNzQzQTExNjUyMTdDREExQTQz
Qzc2MjgxNzYyNUYwQTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0ur/NB4cGdOvqOCpVSop5We1fzkSxqsIkPR/KbXoYlIDXaXdQtCI
dWpJLpOOKvP4lpyMmcYG8rngcdaQL9Xo58LekH5gCZY7xA+WdCUaLGHlTRqGfj3S
b+Wqvu/4KTmgffgV/Ub9X1ojR9n9+ES49XAW9QBKgyYKbjDlade/T537U33lwOtd
6EE1XEhlheynXron+5GNtnUjEpGYUXzrb8L4KYymBNy09QqGXiBWrNZfFPd+26za
C5s1LP6GNP4YANz71b/Sm0XDZw72v1XMG9RTTYtbpdHdpez1foOHsoY24iKFXxyt
tgaLLYvKgnAjdDoRZSF82hpDx2KBdiXwqQIDAQABo4IB8TCCAe0wHQYDVR0OBBYE
FNsscDmOfApVtsltTZEskD9c35T9MB8GA1UdIwQYMBaAFKa2XUcJ9s/ZmaKHeJOS
uqbTpdzqMA4GA1UdDwEB/wQEAwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC80L0E2QjY1
RDQ3MDlGNkNGRDk5OUEyODc3ODkzOTJCQUE2RDNBNURDRUEuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9wclpkUnduMno5bVpvb2Q0azVLNnB0T2wzT28uY2VyMIGI
BggrBgEFBQcBCwR8MHoweAYIKwYBBQUHMAuGbHJzeW5jOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0LzQvMzEzODM1MmUzMjMxMzIyZTM2
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMxMzMzMTM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
udRFMA0GCSqGSIb3DQEBCwUAA4IBAQCWKS9Ca+RZ+u6Kbdsrppv2yZ0h7ZONXXZw
5reI23+31tzODUt22OG2jXz982mP8rs5Vta+REIyiUc0BM3faoqToTarxe3n7xPB
4E/ZV+9x7tFmadhsH+BTdY//JbSFz9r3yL+YAA8gW8ckVoUAHP+6YHYXDvUOGWmY
UlVbzEClGjlYaGhyK1TlPJntUmdCXc7g3t61SHDzryY51M0wWMSJyD3X0drYd/ge
2f19ZXJxG1ZxVoFcycBJymirq3yx33tKYRcSNjRoTVUQZ1pAv5F+n34OV/BQ7AYi
SokvoxmoQhv+4zFC4QXpMCj+oQErQSvAMOgIh5DWM6e5u44KlchD
-----END CERTIFICATE-----