Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/38302e36352e3230392e302f32342d3234203d3e203433323630.roa
File:                     38302e36352e3230392e302f32342d3234203d3e203433323630.roa (raw, json)
Hash identifier:          YkKQodvIdnkKTfHL4bpaBHHlIVxUWpSHhzjUMtBuY30=
Subject key identifier:   9A:33:CC:3E:58:33:CF:E6:3B:F4:98:DF:39:22:E7:E1:22:C7:BF:8E
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       1611E0580687A6B93DC6A8EA656700BE98C924E9
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/38302e36352e3230392e302f32342d3234203d3e203433323630.roa
Signing time:             Fri 27 Nov 2020 15:10:26 +0000
ROA not before:           Fri 27 Nov 2020 15:05:26 +0000
ROA not after:            Fri 26 Nov 2021 15:10:26 +0000
asID:                     43260
IP address blocks:        80.65.209.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:11:e0:58:06:87:a6:b9:3d:c6:a8:ea:65:67:00:be:98:c9:24:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Nov 27 15:05:26 2020 GMT
            Not After : Nov 26 15:10:26 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a4:99:4f:69:ac:f4:73:e1:43:5f:91:c7:c9:
                    4e:c0:4e:64:da:10:39:5a:a1:0c:29:28:09:90:29:
                    59:e1:d2:87:8c:d7:16:0a:ad:69:8a:ee:a5:8e:87:
                    3f:af:6a:6d:4d:76:c2:38:e5:19:1a:6c:ca:14:51:
                    b3:2a:20:ae:d1:59:fc:6d:0f:e6:86:44:46:31:86:
                    62:e1:0a:ea:6f:93:13:88:85:39:fe:29:31:e3:0d:
                    ab:a1:fc:69:2a:47:83:57:2c:19:71:a5:3e:0d:a0:
                    62:98:ed:12:2e:79:ff:1a:a7:17:06:5d:4e:ed:c2:
                    8a:bc:f1:c2:da:1d:9c:2d:a3:12:43:ac:42:09:60:
                    3d:a6:d2:13:c8:0f:1d:f0:7b:b4:5e:ca:3e:be:ce:
                    0d:5f:e2:4c:18:8a:2d:a1:3a:d9:cf:aa:33:98:7a:
                    30:df:0f:64:92:63:e6:56:91:f6:da:c8:39:d4:1c:
                    bc:7a:cc:7f:64:53:2f:3e:3e:13:57:d8:e4:c7:bc:
                    50:44:6f:02:a4:ad:fd:8f:0c:0e:23:47:4b:5f:79:
                    5d:0e:77:af:03:19:9c:c4:b2:da:92:f5:6d:fb:73:
                    db:1e:ac:22:b7:9d:3d:07:e7:40:22:af:aa:ac:3f:
                    7b:63:48:e4:47:16:a7:8f:9f:39:25:8c:a7:0a:66:
                    2e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:33:CC:3E:58:33:CF:E6:3B:F4:98:DF:39:22:E7:E1:22:C7:BF:8E
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/38302e36352e3230392e302f32342d3234203d3e203433323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.65.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:7d:19:c2:b4:a0:8e:fe:63:ba:4e:db:b7:b7:8c:ff:fe:28:
         32:a9:1c:d1:b5:7a:75:f4:d7:41:e7:75:63:ec:c5:07:db:a0:
         08:c3:95:12:b4:de:9f:cf:4d:51:28:f9:dc:14:80:59:4a:e3:
         90:20:72:d8:b5:53:db:62:88:1d:0b:3b:98:0d:f9:89:6a:16:
         d7:c4:88:de:94:41:31:e3:a3:1d:aa:9d:e5:39:8e:1f:f9:8b:
         39:8d:4f:a7:b6:ed:87:90:72:f4:6f:10:19:d8:ba:bc:62:c1:
         88:f5:b5:ad:f7:78:b9:d1:dd:b7:85:42:58:38:bb:b0:ca:b5:
         76:94:3a:25:c1:a8:8b:f7:fc:b1:06:85:f9:a2:79:b7:31:97:
         f5:57:21:5a:17:b2:57:ec:7f:56:af:83:39:21:7c:7e:a2:1b:
         a4:6d:d5:4a:32:66:c5:ac:e2:47:e9:f1:12:1a:0c:7a:09:78:
         10:f1:0a:2f:13:ad:ad:46:06:88:5d:d6:57:5f:9c:4a:39:50:
         6b:4c:84:a0:df:fd:28:cd:88:4a:1d:b2:9a:4d:91:63:ac:bc:
         88:50:a0:8c:43:00:09:3d:a9:d0:b0:d7:fc:b9:13:7d:d2:98:
         87:d7:28:ae:a3:28:67:12:64:64:a2:f5:7c:a8:b5:fc:54:86:
         fd:99:a4:aa
-----BEGIN CERTIFICATE-----
MIIG4TCCBcmgAwIBAgIUFhHgWAaHprk9xqjqZWcAvpjJJOkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWU3OTNiNWMxMjM5MjMxZTA4ZGVkZDZmYjgwNjA3MzJj
ZDA2M2Y0ZDAeFw0yMDExMjcxNTA1MjZaFw0yMTExMjYxNTEwMjZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDhBNDk5NEY2OUFDRjQ3M0Ux
NDM1RjkxQzdDOTRFQzA0RTY0REExMDM5NUFBMTBDMjkyODA5OTAyOTU5RTFEMjg3
OENENzE2MEFBRDY5OEFFRUE1OEU4NzNGQUY2QTZENEQ3NkMyMzhFNTE5MUE2Q0NB
MTQ1MUIzMkEyMEFFRDE1OUZDNkQwRkU2ODY0NDQ2MzE4NjYyRTEwQUVBNkY5MzEz
ODg4NTM5RkUyOTMxRTMwREFCQTFGQzY5MkE0NzgzNTcyQzE5NzFBNTNFMERBMDYy
OThFRDEyMkU3OUZGMUFBNzE3MDY1RDRFRURDMjhBQkNGMUMyREExRDlDMkRBMzEy
NDNBQzQyMDk2MDNEQTZEMjEzQzgwRjFERjA3QkI0NUVDQTNFQkVDRTBENUZFMjRD
MTg4QTJEQTEzQUQ5Q0ZBQTMzOTg3QTMwREYwRjY0OTI2M0U2NTY5MUY2REFDODM5
RDQxQ0JDN0FDQzdGNjQ1MzJGM0UzRTEzNTdEOEU0QzdCQzUwNDQ2RjAyQTRBREZE
OEYwQzBFMjM0NzRCNUY3OTVEMEU3N0FGMDMxOTlDQzRCMkRBOTJGNTZERkI3M0RC
MUVBQzIyQjc5RDNEMDdFNzQwMjJBRkFBQUMzRjdCNjM0OEU0NDcxNkE3OEY5RjM5
MjU4Q0E3MEE2NjJFODUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2KSZT2ms9HPhQ1+Rx8lOwE5k2hA5WqEMKSgJkClZ4dKHjNcWCq1p
iu6ljoc/r2ptTXbCOOUZGmzKFFGzKiCu0Vn8bQ/mhkRGMYZi4Qrqb5MTiIU5/ikx
4w2rofxpKkeDVywZcaU+DaBimO0SLnn/GqcXBl1O7cKKvPHC2h2cLaMSQ6xCCWA9
ptITyA8d8Hu0Xso+vs4NX+JMGIotoTrZz6ozmHow3w9kkmPmVpH22sg51By8esx/
ZFMvPj4TV9jkx7xQRG8CpK39jwwOI0dLX3ldDnevAxmcxLLakvVt+3PbHqwit509
B+dAIq+qrD97Y0jkRxanj585JYynCmYuhQIDAQABo4IB7zCCAeswHQYDVR0OBBYE
FJozzD5YM8/mO/SY3zki5+Eix7+OMB8GA1UdIwQYMBaAFB55O1wSOSMeCN7db7gG
BzLNBj9NMA4GA1UdDwEB/wQEAwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC84LzFFNzkz
QjVDMTIzOTIzMUUwOERFREQ2RkI4MDYwNzMyQ0QwNjNGNEQuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9Ibms3WEJJNUl4NEkzdDF2dUFZSE1zMEdQMDAuY2VyMIGG
BggrBgEFBQcBCwR6MHgwdgYIKwYBBQUHMAuGanJzeW5jOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0LzgvMzgzMDJlMzYzNTJlMzIzMDM5
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMzMyMzYzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFBB
0TANBgkqhkiG9w0BAQsFAAOCAQEAPX0ZwrSgjv5juk7bt7eM//4oMqkc0bV6dfTX
Qed1Y+zFB9ugCMOVErTen89NUSj53BSAWUrjkCBy2LVT22KIHQs7mA35iWoW18SI
3pRBMeOjHaqd5TmOH/mLOY1Pp7bth5By9G8QGdi6vGLBiPW1rfd4udHdt4VCWDi7
sMq1dpQ6JcGoi/f8sQaF+aJ5tzGX9VchWheyV+x/Vq+DOSF8fqIbpG3VSjJmxazi
R+nxEhoMegl4EPEKLxOtrUYGiF3WV1+cSjlQa0yEoN/9KM2ISh2ymk2RY6y8iFCg
jEMACT2p0LDX/LkTfdKYh9corqMoZxJkZKL1fKi1/FSG/Zmkqg==
-----END CERTIFICATE-----