Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234352e3138302e302f32332d3234203d3e203631333137.roa
File:                     3138352e3234352e3138302e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          dRJzhdr2FbO2rIxX4y44mqhCx+19a4YDONFeuMlZmEg=
Subject key identifier:   6B:AB:0F:EF:53:3F:1B:26:2C:C0:82:81:28:AD:48:B0:95:0A:0E:E5
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       63743FFBD80D79E5B221F498596E989E25775BCC
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234352e3138302e302f32332d3234203d3e203631333137.roa
Signing time:             Fri 27 Nov 2020 15:10:16 +0000
ROA not before:           Fri 27 Nov 2020 15:05:16 +0000
ROA not after:            Fri 26 Nov 2021 15:10:16 +0000
asID:                     61317
IP address blocks:        185.245.180.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:74:3f:fb:d8:0d:79:e5:b2:21:f4:98:59:6e:98:9e:25:77:5b:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Nov 27 15:05:16 2020 GMT
            Not After : Nov 26 15:10:16 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ba:85:35:01:cf:bb:32:a5:f2:53:3e:4a:5a:
                    20:d9:c2:f6:11:e6:a5:14:d8:0d:bc:dd:25:af:8c:
                    88:2f:53:a2:40:3a:2f:dc:9a:f1:82:e8:0d:75:da:
                    de:5d:74:f0:f3:16:08:fa:ee:18:85:8f:0f:b8:2b:
                    eb:95:16:99:38:ce:81:e5:b2:fb:5e:9a:c8:07:b0:
                    d6:01:36:d6:18:17:a3:b4:89:e6:dd:37:0f:4d:ce:
                    e6:39:db:ee:c1:c5:d5:f8:a9:d1:d0:e5:2c:27:30:
                    6c:85:67:b4:53:8e:a7:2c:90:8f:cf:fd:43:43:14:
                    83:76:4a:54:32:33:1a:33:17:ef:de:69:6d:3c:e3:
                    03:24:3a:cf:ca:9a:bc:d0:9f:16:37:ba:90:2e:f5:
                    cd:08:9b:8f:03:84:10:81:30:fb:b0:9d:34:dd:08:
                    3c:d3:d2:91:46:10:5c:d7:71:49:91:0f:33:b4:01:
                    79:52:85:ba:7c:aa:ca:b3:af:a1:e0:a8:10:4a:84:
                    15:a9:e9:bb:b1:4b:2e:be:2d:05:34:26:7c:af:9f:
                    dd:a2:f5:bb:bb:66:87:66:b3:1e:37:38:ae:f6:4e:
                    7d:58:93:c0:88:0b:1e:4e:f4:9d:a0:50:ef:a5:b4:
                    b9:7e:24:38:4b:26:4a:27:ba:95:a2:13:14:11:e7:
                    0d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:AB:0F:EF:53:3F:1B:26:2C:C0:82:81:28:AD:48:B0:95:0A:0E:E5
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234352e3138302e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.245.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:e6:e2:89:84:cc:b1:93:dc:95:33:dc:8d:64:5e:90:15:c9:
         ea:6a:8c:13:16:e0:a2:88:fe:28:17:fb:4c:3b:80:9f:2f:97:
         e9:c1:85:18:1c:3a:8e:96:91:09:d9:44:37:0c:f9:1c:c9:d1:
         71:14:25:8b:44:1f:74:7e:08:eb:3c:4b:27:f7:6d:42:da:10:
         29:74:8a:fb:a2:f9:1d:a1:f0:b0:d3:15:15:7e:54:f1:30:70:
         06:57:11:62:13:b1:c1:82:f9:b5:86:e2:7c:ed:4d:38:2f:42:
         db:29:d2:9d:f4:7a:74:36:47:94:75:d4:a2:36:a6:62:38:53:
         6c:47:07:2f:c7:74:e9:fd:51:d8:d0:2c:9c:92:7b:3d:83:92:
         ce:71:68:ff:4f:91:da:c1:35:e1:73:84:6c:bb:51:40:be:4a:
         64:de:9d:a5:44:01:eb:b6:ec:0d:21:5d:3c:1d:9e:b7:3a:3a:
         81:c3:4a:21:82:37:59:e3:bd:43:35:14:d0:f2:74:bd:d3:66:
         24:16:f9:48:86:d6:45:6e:dc:2e:82:db:0f:93:9b:09:87:b9:
         53:1c:f8:e6:e6:4b:8d:7b:3e:a2:39:07:36:2a:46:c2:c5:1e:
         64:7e:3c:c2:9a:85:8c:36:e9:eb:61:3b:68:8c:42:d7:87:bc:
         ad:5e:43:bc
-----BEGIN CERTIFICATE-----
MIIG5TCCBc2gAwIBAgIUY3Q/+9gNeeWyIfSYWW6YniV3W8wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5OTRlZTkzYmFiZTYwYzEzZTA0NDg3ZmE1Y2QzNGZk
MjNmYzkzZjAeFw0yMDExMjcxNTA1MTZaFw0yMTExMjYxNTEwMTZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkNCQTg1MzUwMUNGQkIzMkE1
RjI1MzNFNEE1QTIwRDlDMkY2MTFFNkE1MTREODBEQkNERDI1QUY4Qzg4MkY1M0Ey
NDAzQTJGREM5QUYxODJFODBENzVEQURFNUQ3NEYwRjMxNjA4RkFFRTE4ODU4RjBG
QjgyQkVCOTUxNjk5MzhDRTgxRTVCMkZCNUU5QUM4MDdCMEQ2MDEzNkQ2MTgxN0Ez
QjQ4OUU2REQzNzBGNERDRUU2MzlEQkVFQzFDNUQ1RjhBOUQxRDBFNTJDMjczMDZD
ODU2N0I0NTM4RUE3MkM5MDhGQ0ZGRDQzNDMxNDgzNzY0QTU0MzIzMzFBMzMxN0VG
REU2OTZEM0NFMzAzMjQzQUNGQ0E5QUJDRDA5RjE2MzdCQTkwMkVGNUNEMDg5QjhG
MDM4NDEwODEzMEZCQjA5RDM0REQwODNDRDNEMjkxNDYxMDVDRDc3MTQ5OTEwRjMz
QjQwMTc5NTI4NUJBN0NBQUNBQjNBRkExRTBBODEwNEE4NDE1QTlFOUJCQjE0QjJF
QkUyRDA1MzQyNjdDQUY5RkREQTJGNUJCQkI2Njg3NjZCMzFFMzczOEFFRjY0RTdE
NTg5M0MwODgwQjFFNEVGNDlEQTA1MEVGQTVCNEI5N0UyNDM4NEIyNjRBMjdCQTk1
QTIxMzE0MTFFNzBERjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvLqFNQHPuzKl8lM+Slog2cL2EealFNgNvN0lr4yIL1OiQDov3Jrx
gugNddreXXTw8xYI+u4YhY8PuCvrlRaZOM6B5bL7XprIB7DWATbWGBejtInm3TcP
Tc7mOdvuwcXV+KnR0OUsJzBshWe0U46nLJCPz/1DQxSDdkpUMjMaMxfv3mltPOMD
JDrPypq80J8WN7qQLvXNCJuPA4QQgTD7sJ003Qg809KRRhBc13FJkQ8ztAF5UoW6
fKrKs6+h4KgQSoQVqem7sUsuvi0FNCZ8r5/dovW7u2aHZrMeNziu9k59WJPAiAse
TvSdoFDvpbS5fiQ4SyZKJ7qVohMUEecN8QIDAQABo4IB8zCCAe8wHQYDVR0OBBYE
FGurD+9TPxsmLMCCgSitSLCVCg7lMB8GA1UdIwQYMBaAFGGZTuk7q+YME+BEh/pc
00/SP8k/MA4GA1UdDwEB/wQEAwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC82LzYxOTk0
RUU5M0JBQkU2MEMxM0UwNDQ4N0ZBNUNEMzRGRDIzRkM5M0YuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9ZWmxPNlR1cjVnd1Q0RVNILWx6VFQ5SV95VDguY2VyMIGK
BggrBgEFBQcBCwR+MHwwegYIKwYBBQUHMAuGbnJzeW5jOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0LzYvMzEzODM1MmUzMjM0MzUyZTMx
MzgzMDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM2MzEzMzMxMzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAG59bQwDQYJKoZIhvcNAQELBQADggEBABTm4omEzLGT3JUz3I1kXpAVyepqjBMW
4KKI/igX+0w7gJ8vl+nBhRgcOo6WkQnZRDcM+RzJ0XEUJYtEH3R+COs8Syf3bULa
ECl0ivui+R2h8LDTFRV+VPEwcAZXEWITscGC+bWG4nztTTgvQtsp0p30enQ2R5R1
1KI2pmI4U2xHBy/HdOn9UdjQLJySez2Dks5xaP9PkdrBNeFzhGy7UUC+SmTenaVE
Aeu27A0hXTwdnrc6OoHDSiGCN1njvUM1FNDydL3TZiQW+UiG1kVu3C6C2w+TmwmH
uVMc+ObmS417PqI5BzYqRsLFHmR+PMKahYw26ethO2iMQteHvK1eQ7w=
-----END CERTIFICATE-----