Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/3130392e3233362e36312e302f32342d3234203d3e203631333137.roa
File:                     3130392e3233362e36312e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          2bDXItaJ0q0bljS1S6dV3dfko/VlWytnaFiknwJVqis=
Subject key identifier:   99:2F:13:DE:41:9D:4F:B3:E1:73:DA:7F:22:A9:B3:8F:C5:B8:8E:C9
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       2F90F2F76CF631E4AB3926F5525D3C913474C1B3
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/3130392e3233362e36312e302f32342d3234203d3e203631333137.roa
Signing time:             Sat 22 Oct 2022 04:34:04 +0000
ROA not before:           Sat 22 Oct 2022 04:29:04 +0000
ROA not after:            Sat 21 Oct 2023 04:34:04 +0000
asID:                     61317
IP address blocks:        109.236.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:90:f2:f7:6c:f6:31:e4:ab:39:26:f5:52:5d:3c:91:34:74:c1:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Oct 22 04:29:04 2022 GMT
            Not After : Oct 21 04:34:04 2023 GMT
        Subject: CN=992F13DE419D4FB3E173DA7F22A9B38FC5B88EC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c0:35:a7:d0:92:b7:48:b9:d4:e0:ec:97:80:
                    44:37:a5:21:6a:70:d4:9c:95:4c:9c:49:c3:71:7e:
                    7a:39:2a:c2:02:a6:4e:cf:c9:10:6f:d5:fe:98:d8:
                    57:29:a1:d1:39:4d:42:51:8b:1a:c2:40:52:88:12:
                    6f:28:de:d9:82:4b:31:d1:73:02:ea:33:7b:69:e1:
                    b3:b8:02:b1:6c:f2:a1:dc:4e:78:30:66:c8:9b:06:
                    c3:63:55:7f:38:5d:96:cd:c0:46:45:60:4b:69:88:
                    cd:82:a8:09:25:23:b5:93:ee:24:0c:30:79:09:f3:
                    b9:9c:f1:45:e1:f0:71:20:22:06:ec:39:a6:27:96:
                    fb:9d:b9:a0:83:4d:59:17:2a:10:69:74:7e:04:fc:
                    9e:3f:34:72:4f:53:54:7a:ae:75:3e:cc:81:c1:ae:
                    69:47:43:d2:82:db:30:56:3e:0c:5e:36:d6:dd:68:
                    99:55:10:19:3c:fb:fb:29:eb:da:6e:48:b8:66:e9:
                    ea:7f:a0:61:82:3d:d2:76:32:30:d5:d8:07:bb:55:
                    b2:29:0e:de:17:5d:3b:01:e8:07:de:46:e2:e9:a0:
                    e3:87:e1:7c:cf:0d:a0:a9:c9:93:78:1a:84:3a:74:
                    7f:46:32:92:a7:76:c7:bd:c2:ab:7e:23:6e:96:ab:
                    db:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:2F:13:DE:41:9D:4F:B3:E1:73:DA:7F:22:A9:B3:8F:C5:B8:8E:C9
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/3130392e3233362e36312e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.236.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:75:f9:f2:5f:54:d3:2c:fe:67:38:37:20:f6:d4:36:4f:07:
         0b:fc:32:07:ec:71:f4:d4:85:3b:11:d3:69:29:73:44:37:f4:
         e8:97:a4:1a:bb:7b:ba:df:d1:2b:87:eb:d0:36:d2:c8:4f:7a:
         3a:cf:b7:92:7f:93:cf:72:f4:10:1b:e2:ea:e2:78:5e:c2:b9:
         3a:77:27:2a:1d:b5:a2:fb:b5:d9:0b:09:87:4e:27:ab:66:91:
         c4:5c:71:ae:54:4b:09:73:2b:a4:6b:ac:27:34:9b:58:dc:ce:
         0a:f3:7e:e7:e3:68:d9:e3:85:aa:a4:02:46:5b:b3:d2:df:79:
         00:1e:3f:6a:70:7a:30:16:31:4c:c5:7f:91:78:cb:7f:2d:2d:
         fb:ce:14:e0:fe:fa:9b:9f:f3:f9:15:e1:a9:2a:df:3c:20:bc:
         10:d7:c6:e6:0b:f7:23:18:cf:11:fc:0a:12:9d:84:cb:3a:4f:
         f7:8e:45:9e:61:5a:65:e3:08:26:9e:3f:b8:c8:61:67:7c:b2:
         ee:c4:f5:7b:53:e9:ff:5f:e3:66:f8:8c:42:83:8a:87:8c:00:
         e8:e0:ce:ef:76:ad:a9:bf:30:63:d9:e5:00:be:d3:52:9b:c6:
         a9:a6:43:38:c9:ba:88:e6:c2:aa:b2:a1:f1:4b:fb:51:41:bc:
         5b:44:5b:84
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUL5Dy92z2MeSrOSb1Ul08kTR0wbMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWU3OTNiNWMxMjM5MjMxZTA4ZGVkZDZmYjgwNjA3MzJj
ZDA2M2Y0ZDAeFw0yMjEwMjIwNDI5MDRaFw0yMzEwMjEwNDM0MDRaMDMxMTAvBgNV
BAMTKDk5MkYxM0RFNDE5RDRGQjNFMTczREE3RjIyQTlCMzhGQzVCODhFQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnwDWn0JK3SLnU4OyXgEQ3pSFq
cNSclUycScNxfno5KsICpk7PyRBv1f6Y2FcpodE5TUJRixrCQFKIEm8o3tmCSzHR
cwLqM3tp4bO4ArFs8qHcTngwZsibBsNjVX84XZbNwEZFYEtpiM2CqAklI7WT7iQM
MHkJ87mc8UXh8HEgIgbsOaYnlvuduaCDTVkXKhBpdH4E/J4/NHJPU1R6rnU+zIHB
rmlHQ9KC2zBWPgxeNtbdaJlVEBk8+/sp69puSLhm6ep/oGGCPdJ2MjDV2Ae7VbIp
Dt4XXTsB6AfeRuLpoOOH4XzPDaCpyZN4GoQ6dH9GMpKndse9wqt+I26Wq9snAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUmS8T3kGdT7Phc9p/Iqmzj8W4jskwHwYDVR0j
BBgwFoAUHnk7XBI5Ix4I3t1vuAYHMs0GP00wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzgvMUU3OTNCNUMxMjM5MjMxRTA4REVERDZGQjgwNjA3MzJD
RDA2M0Y0RC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0huazdYQkk1SXg0STN0
MXZ1QVlITXMwR1AwMC5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
OC8zMTMwMzkyZTMyMzMzNjJlMzYzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzMzMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBABt7D0wDQYJKoZIhvcNAQELBQADggEBABN1+fJf
VNMs/mc4NyD21DZPBwv8MgfscfTUhTsR02kpc0Q39OiXpBq7e7rf0SuH69A20shP
ejrPt5J/k89y9BAb4urieF7CuTp3JyodtaL7tdkLCYdOJ6tmkcRcca5USwlzK6Rr
rCc0m1jczgrzfufjaNnjhaqkAkZbs9LfeQAeP2pwejAWMUzFf5F4y38tLfvOFOD+
+puf8/kV4akq3zwgvBDXxuYL9yMYzxH8ChKdhMs6T/eORZ5hWmXjCCaeP7jIYWd8
su7E9XtT6f9f42b4jEKDioeMAOjgzu92ram/MGPZ5QC+01KbxqmmQzjJuojmwqqy
ofFL+1FBvFtEW4Q=
-----END CERTIFICATE-----