Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/38332e3137312e3234382e302f32322d3234203d3e203631333137.roa
File:                     38332e3137312e3234382e302f32322d3234203d3e203631333137.roa (raw, json)
Hash identifier:          ZKZbVmxK0TW6J+4wlTGtyhDbnHI/n5ETYPF7fbFI5V8=
Subject key identifier:   01:E5:9B:30:D5:57:DE:69:00:BE:61:F7:1A:73:15:E6:02:28:AE:C1
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       A3A620785581CF231EE3574B2387AC59A938D0
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/38332e3137312e3234382e302f32322d3234203d3e203631333137.roa
Signing time:             Fri 29 Oct 2021 16:00:09 +0000
ROA not before:           Fri 29 Oct 2021 15:55:09 +0000
ROA not after:            Fri 28 Oct 2022 16:00:09 +0000
asID:                     61317
IP address blocks:        83.171.248.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a3:a6:20:78:55:81:cf:23:1e:e3:57:4b:23:87:ac:59:a9:38:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Oct 29 15:55:09 2021 GMT
            Not After : Oct 28 16:00:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4b:0e:e8:9b:1b:4d:0a:81:09:dd:2c:44:1b:
                    fc:0f:a2:d7:f9:71:c8:49:90:37:6b:cd:27:f9:1d:
                    db:ff:55:74:c1:12:cd:bb:b7:4a:82:49:d2:32:3b:
                    6f:88:a4:a8:19:df:97:3b:ab:ef:ea:54:2f:c7:b6:
                    4f:45:43:6c:df:fb:d7:df:31:43:79:b6:41:15:36:
                    cc:6c:3a:bf:a0:40:4a:60:ce:10:f8:81:ca:42:f3:
                    15:e2:7f:4c:60:93:1e:80:41:18:f8:fd:bb:ce:3a:
                    50:bf:55:69:24:c7:da:13:3c:5b:19:71:39:cf:17:
                    60:78:97:46:6b:4b:46:2a:90:df:fe:f2:2e:8a:06:
                    72:30:33:c6:08:c0:37:77:e0:71:39:d0:08:f2:9e:
                    93:7d:ca:70:dd:e4:82:98:0e:60:90:71:36:fc:e8:
                    5b:7a:2b:0f:b6:5a:12:f8:d9:6b:ad:c8:ba:b0:cc:
                    38:74:35:e9:53:09:e4:e7:b3:85:da:77:de:6e:79:
                    5e:50:ad:e0:f5:1d:6a:2b:b4:e4:16:71:32:d1:39:
                    bf:96:73:2d:dc:b9:fc:0a:79:50:19:59:2e:0e:0f:
                    5f:de:90:9b:d4:a2:64:22:72:f0:ed:8d:10:af:36:
                    26:05:b4:9c:72:f7:ea:c8:38:a6:ed:d4:1c:ae:ed:
                    9a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E5:9B:30:D5:57:DE:69:00:BE:61:F7:1A:73:15:E6:02:28:AE:C1
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/38332e3137312e3234382e302f32322d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.171.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:c9:1e:20:c9:1c:3a:41:7c:2b:5b:a0:2b:ea:53:b1:3c:c9:
         f8:95:58:a3:c7:ba:20:c0:a6:7f:28:6e:05:c7:7f:9c:16:dd:
         cc:23:f8:8f:48:e5:b7:2c:ac:0e:5a:e2:0c:71:af:13:90:18:
         ed:0d:e6:86:a1:b0:ac:ff:ea:49:69:62:54:0d:0e:fd:a4:37:
         1c:aa:24:86:65:53:dd:2b:9b:4b:c7:3f:18:ce:78:20:ed:24:
         43:1d:ad:ef:d2:ad:a4:d1:ce:ec:27:8e:87:dd:6e:fa:bf:d4:
         5d:41:04:ae:88:94:74:67:bb:7d:7b:a2:d4:56:b7:25:f1:0c:
         22:9f:e2:fe:6a:6d:64:fe:ba:4e:76:58:8a:8a:71:1e:c9:23:
         29:5f:75:20:21:3b:85:e0:6e:94:59:42:84:58:26:75:01:fe:
         ed:59:0f:d1:28:5d:57:c3:43:a9:b4:55:0d:df:0f:ed:09:95:
         cc:61:ab:32:54:0a:c1:b3:e5:fd:ec:2a:cd:83:b9:a1:59:89:
         36:ff:be:da:bd:48:ac:7c:6d:63:59:5a:ab:48:d3:89:62:fb:
         24:5a:b5:50:be:19:7c:d3:0f:e2:e0:81:35:b0:b6:21:be:53:
         3d:04:99:23:a9:a9:46:6f:af:d4:8c:54:8b:19:f0:f0:3f:05:
         e1:36:4e:b1
-----BEGIN CERTIFICATE-----
MIIG4zCCBcugAwIBAgIUAKOmIHhVgc8jHuNXSyOHrFmpONAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWU3OTNiNWMxMjM5MjMxZTA4ZGVkZDZmYjgwNjA3MzJj
ZDA2M2Y0ZDAeFw0yMTEwMjkxNTU1MDlaFw0yMjEwMjgxNjAwMDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjY0QjBFRTg5QjFCNEQwQTgx
MDlERDJDNDQxQkZDMEZBMkQ3Rjk3MUM4NDk5MDM3NkJDRDI3RjkxRERCRkY1NTc0
QzExMkNEQkJCNzRBODI0OUQyMzIzQjZGODhBNEE4MTlERjk3M0JBQkVGRUE1NDJG
QzdCNjRGNDU0MzZDREZGQkQ3REYzMTQzNzlCNjQxMTUzNkNDNkMzQUJGQTA0MDRB
NjBDRTEwRjg4MUNBNDJGMzE1RTI3RjRDNjA5MzFFODA0MTE4RjhGREJCQ0UzQTUw
QkY1NTY5MjRDN0RBMTMzQzVCMTk3MTM5Q0YxNzYwNzg5NzQ2NkI0QjQ2MkE5MERG
RkVGMjJFOEEwNjcyMzAzM0M2MDhDMDM3NzdFMDcxMzlEMDA4RjI5RTkzN0RDQTcw
RERFNDgyOTgwRTYwOTA3MTM2RkNFODVCN0EyQjBGQjY1QTEyRjhEOTZCQURDOEJB
QjBDQzM4NzQzNUU5NTMwOUU0RTdCMzg1REE3N0RFNkU3OTVFNTBBREUwRjUxRDZB
MkJCNEU0MTY3MTMyRDEzOUJGOTY3MzJERENCOUZDMEE3OTUwMTk1OTJFMEUwRjVG
REU5MDlCRDRBMjY0MjI3MkYwRUQ4RDEwQUYzNjI2MDVCNDlDNzJGN0VBQzgzOEE2
RURENDFDQUVFRDlBM0YwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtksO6JsbTQqBCd0sRBv8D6LX+XHISZA3a80n+R3b/1V0wRLNu7dK
gknSMjtviKSoGd+XO6vv6lQvx7ZPRUNs3/vX3zFDebZBFTbMbDq/oEBKYM4Q+IHK
QvMV4n9MYJMegEEY+P27zjpQv1VpJMfaEzxbGXE5zxdgeJdGa0tGKpDf/vIuigZy
MDPGCMA3d+BxOdAI8p6Tfcpw3eSCmA5gkHE2/OhbeisPtloS+Nlrrci6sMw4dDXp
Uwnk57OF2nfebnleUK3g9R1qK7TkFnEy0Tm/lnMt3Ln8CnlQGVkuDg9f3pCb1KJk
InLw7Y0QrzYmBbSccvfqyDim7dQcru2aPwIDAQABo4IB8TCCAe0wHQYDVR0OBBYE
FAHlmzDVV95pAL5h9xpzFeYCKK7BMB8GA1UdIwQYMBaAFB55O1wSOSMeCN7db7gG
BzLNBj9NMA4GA1UdDwEB/wQEAwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC84LzFFNzkz
QjVDMTIzOTIzMUUwOERFREQ2RkI4MDYwNzMyQ0QwNjNGNEQuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9Ibms3WEJJNUl4NEkzdDF2dUFZSE1zMEdQMDAuY2VyMIGI
BggrBgEFBQcBCwR8MHoweAYIKwYBBQUHMAuGbHJzeW5jOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0LzgvMzgzMzJlMzEzNzMxMmUzMjM0
MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNjMxMzMzMTM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
U6v4MA0GCSqGSIb3DQEBCwUAA4IBAQAHyR4gyRw6QXwrW6Ar6lOxPMn4lVijx7og
wKZ/KG4Fx3+cFt3MI/iPSOW3LKwOWuIMca8TkBjtDeaGobCs/+pJaWJUDQ79pDcc
qiSGZVPdK5tLxz8Yzngg7SRDHa3v0q2k0c7sJ46H3W76v9RdQQSuiJR0Z7t9e6LU
Vrcl8Qwin+L+am1k/rpOdliKinEeySMpX3UgITuF4G6UWUKEWCZ1Af7tWQ/RKF1X
w0OptFUN3w/tCZXMYasyVArBs+X97CrNg7mhWYk2/77avUisfG1jWVqrSNOJYvsk
WrVQvhl80w/i4IE1sLYhvlM9BJkjqalGb6/UjFSLGfDwPwXhNk6x
-----END CERTIFICATE-----