Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230372e3235302e302f32342d3234203d3e20323133303335.roa
File:                     3138352e3230372e3235302e302f32342d3234203d3e20323133303335.roa (raw, json)
Hash identifier:          Wn5bxHGHk2NG3xnrpYWgZKyOoaFCzRTrANM4D0JlkHM=
Subject key identifier:   56:A6:E0:62:A4:E2:E0:77:35:6E:46:83:BD:7E:FA:BF:D7:81:86:F4
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       14EC5A2AE3D31C4473796AAF4FEBBBCA0D37265B
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230372e3235302e302f32342d3234203d3e20323133303335.roa
Signing time:             Fri 18 Dec 2020 11:45:28 +0000
ROA not before:           Fri 18 Dec 2020 11:40:28 +0000
ROA not after:            Fri 17 Dec 2021 11:45:28 +0000
asID:                     213035
IP address blocks:        185.207.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ec:5a:2a:e3:d3:1c:44:73:79:6a:af:4f:eb:bb:ca:0d:37:26:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Dec 18 11:40:28 2020 GMT
            Not After : Dec 17 11:45:28 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:50:94:53:8c:28:00:72:bb:fa:fb:4e:54:f5:
                    78:f1:98:7a:4a:08:19:8f:f7:fa:3c:f9:28:dc:2d:
                    c3:43:e7:2e:0a:6b:9f:49:b3:58:92:00:09:ca:34:
                    b7:1e:90:ee:8a:e3:78:99:75:5e:62:3e:f6:d4:64:
                    57:5b:b0:19:67:3f:d8:9e:c4:c4:20:bf:42:94:eb:
                    bd:dd:44:91:05:bb:84:83:c4:90:f4:97:ef:ba:4a:
                    d2:2d:2f:a3:95:3e:6e:57:7a:39:25:c6:5f:33:de:
                    27:e2:83:ae:0d:58:07:97:9c:14:ea:56:87:19:81:
                    ad:72:74:9a:87:fa:1a:3f:ca:59:26:03:c7:e7:e7:
                    b7:0c:ad:b2:42:10:ba:39:c0:46:16:01:14:b3:86:
                    6a:bf:1e:13:d8:ac:c8:47:09:ac:52:5e:42:d9:a4:
                    85:90:71:96:6b:3a:c4:48:82:e8:08:7e:e9:a2:55:
                    27:ee:69:bd:98:d5:6b:fc:38:ea:53:96:d2:f6:75:
                    22:47:be:b1:e4:19:d6:79:29:6f:f0:b4:3d:2a:5c:
                    3a:fa:82:7f:8e:45:a3:39:8c:f7:9d:66:11:81:37:
                    ae:e8:79:e8:3e:ac:c0:93:ef:e8:27:83:32:3a:6e:
                    10:cf:47:45:c1:04:e9:2d:bc:f3:35:9f:9b:bf:4a:
                    dd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A6:E0:62:A4:E2:E0:77:35:6E:46:83:BD:7E:FA:BF:D7:81:86:F4
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230372e3235302e302f32342d3234203d3e20323133303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.207.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:72:78:85:d5:d5:13:8c:a4:17:e1:6d:30:aa:f8:62:40:74:
         a5:18:dc:29:9a:3a:c1:83:19:98:03:3d:1d:50:13:b8:07:b2:
         96:c2:1e:2b:a2:37:9c:17:e5:aa:96:5b:c4:f6:dd:8c:51:a3:
         01:ca:41:a7:2d:0e:56:f6:22:d4:86:5c:d2:31:e6:2b:b4:8b:
         a5:7c:5e:3b:ac:99:52:9e:0b:3f:95:6b:b8:f1:b8:6a:d7:f1:
         b4:32:d0:f4:d3:75:db:84:9a:63:88:74:84:fd:01:b1:af:80:
         98:0e:95:df:21:0d:58:4a:48:ff:16:42:22:18:67:cf:2c:0d:
         61:5a:95:2a:78:c1:aa:a5:f4:83:b5:5a:47:63:11:1a:15:12:
         d3:60:ca:18:9e:db:47:5e:6a:67:a7:cf:20:a4:94:25:c6:ac:
         a8:9b:6b:dc:1f:49:af:be:6b:45:62:33:b3:a4:aa:28:e1:93:
         8d:10:3c:17:9b:b1:45:4f:63:ca:ad:01:c7:99:aa:5d:cb:d8:
         93:1c:d9:f7:4d:98:12:80:eb:15:50:20:ee:4c:d5:f3:d6:ab:
         a1:6d:fd:b5:d5:df:f8:ce:e3:2e:3e:8d:5f:69:e4:95:ca:d5:
         ec:95:b0:1c:5f:c8:17:ca:88:25:40:c4:b4:b6:de:26:e0:bf:
         76:81:c7:8d
-----BEGIN CERTIFICATE-----
MIIG6DCCBdCgAwIBAgIUFOxaKuPTHERzeWqvT+u7yg03JlswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5OTRlZTkzYmFiZTYwYzEzZTA0NDg3ZmE1Y2QzNGZk
MjNmYzkzZjAeFw0yMDEyMTgxMTQwMjhaFw0yMTEyMTcxMTQ1MjhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDU1MDk0NTM4QzI4MDA3MkJC
RkFGQjRFNTRGNTc4RjE5ODdBNEEwODE5OEZGN0ZBM0NGOTI4REMyREMzNDNFNzJF
MEE2QjlGNDlCMzU4OTIwMDA5Q0EzNEI3MUU5MEVFOEFFMzc4OTk3NTVFNjIzRUY2
RDQ2NDU3NUJCMDE5NjczRkQ4OUVDNEM0MjBCRjQyOTRFQkJEREQ0NDkxMDVCQjg0
ODNDNDkwRjQ5N0VGQkE0QUQyMkQyRkEzOTUzRTZFNTc3QTM5MjVDNjVGMzNERTI3
RTI4M0FFMEQ1ODA3OTc5QzE0RUE1Njg3MTk4MUFENzI3NDlBODdGQTFBM0ZDQTU5
MjYwM0M3RTdFN0I3MENBREIyNDIxMEJBMzlDMDQ2MTYwMTE0QjM4NjZBQkYxRTEz
RDhBQ0M4NDcwOUFDNTI1RTQyRDlBNDg1OTA3MTk2NkIzQUM0NDg4MkU4MDg3RUU5
QTI1NTI3RUU2OUJEOThENTZCRkMzOEVBNTM5NkQyRjY3NTIyNDdCRUIxRTQxOUQ2
NzkyOTZGRjBCNDNEMkE1QzNBRkE4MjdGOEU0NUEzMzk4Q0Y3OUQ2NjExODEzN0FF
RTg3OUU4M0VBQ0MwOTNFRkU4Mjc4MzMyM0E2RTEwQ0Y0NzQ1QzEwNEU5MkRCQ0Yz
MzU5RjlCQkY0QUREMjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1VCUU4woAHK7+vtOVPV48Zh6SggZj/f6PPko3C3DQ+cuCmufSbNY
kgAJyjS3HpDuiuN4mXVeYj721GRXW7AZZz/YnsTEIL9ClOu93USRBbuEg8SQ9Jfv
ukrSLS+jlT5uV3o5JcZfM94n4oOuDVgHl5wU6laHGYGtcnSah/oaP8pZJgPH5+e3
DK2yQhC6OcBGFgEUs4Zqvx4T2KzIRwmsUl5C2aSFkHGWazrESILoCH7polUn7mm9
mNVr/DjqU5bS9nUiR76x5BnWeSlv8LQ9Klw6+oJ/jkWjOYz3nWYRgTeu6HnoPqzA
k+/oJ4MyOm4Qz0dFwQTpLbzzNZ+bv0rdIwIDAQABo4IB9jCCAfIwHQYDVR0OBBYE
FFam4GKk4uB3NW5Gg71++r/XgYb0MB8GA1UdIwQYMBaAFGGZTuk7q+YME+BEh/pc
00/SP8k/MA4GA1UdDwEB/wQEAwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC82LzYxOTk0
RUU5M0JBQkU2MEMxM0UwNDQ4N0ZBNUNEMzRGRDIzRkM5M0YuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9ZWmxPNlR1cjVnd1Q0RVNILWx6VFQ5SV95VDguY2VyMIGN
BggrBgEFBQcBCwSBgDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kxLnRlcnJh
dHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC82LzMxMzgzNTJlMzIzMDM3MmUz
MjM1MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzMzMDMzMzUucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAC5z/owDQYJKoZIhvcNAQELBQADggEBABRyeIXV1ROMpBfhbTCq+GJAdKUY
3CmaOsGDGZgDPR1QE7gHspbCHiuiN5wX5aqWW8T23YxRowHKQactDlb2ItSGXNIx
5iu0i6V8XjusmVKeCz+Va7jxuGrX8bQy0PTTdduEmmOIdIT9AbGvgJgOld8hDVhK
SP8WQiIYZ88sDWFalSp4waql9IO1WkdjERoVEtNgyhie20deamenzyCklCXGrKib
a9wfSa++a0ViM7Okqijhk40QPBebsUVPY8qtAceZql3L2JMc2fdNmBKA6xVQIO5M
1fPWq6Ft/bXV3/jO4y4+jV9p5JXK1eyVsBxfyBfKiCVAxLS23ibgv3aBx40=
-----END CERTIFICATE-----