Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139372e3139352e302f32342d3234203d3e203632323430.roa
File:                     3138352e3139372e3139352e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier:          /bvlb8IWhE78IRzIYuV2FZ+A4WsTAzw6si+XHMxihSw=
Subject key identifier:   9B:66:D4:2A:3E:EE:84:C8:DF:91:DC:5F:AA:58:FF:65:DC:79:70:EE
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       7C953D3DDE34056F3A7163F0D56C0B119ACA9582
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139372e3139352e302f32342d3234203d3e203632323430.roa
Signing time:             Sat 29 May 2021 09:17:11 +0000
ROA not before:           Sat 29 May 2021 09:12:11 +0000
ROA not after:            Sat 28 May 2022 09:17:11 +0000
asID:                     62240
IP address blocks:        185.197.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:95:3d:3d:de:34:05:6f:3a:71:63:f0:d5:6c:0b:11:9a:ca:95:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: May 29 09:12:11 2021 GMT
            Not After : May 28 09:17:11 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:29:7a:2e:7e:cd:49:bc:e2:f9:d3:8d:95:96:
                    ce:56:c7:25:6d:52:b5:b7:f6:14:a9:df:66:52:20:
                    9f:b6:56:9e:69:68:b3:1e:dc:d2:00:14:a7:15:f9:
                    92:28:ac:12:77:e8:ac:0e:28:48:2c:43:60:53:64:
                    36:a5:3e:59:4d:43:3c:04:27:90:15:02:7f:ef:dc:
                    f9:0e:64:ad:2b:db:d9:7f:25:6b:dc:d3:df:78:92:
                    ce:06:75:47:61:35:fb:2c:46:6d:06:19:fc:8b:f8:
                    2f:1e:10:ad:e1:01:8b:e5:c9:54:7c:53:e8:e4:ed:
                    4e:3f:86:22:dd:7b:ce:78:c8:e6:f1:fb:14:23:85:
                    8b:25:12:d7:db:1f:9f:4b:4a:f1:66:e0:e7:4c:20:
                    8e:41:f7:09:df:16:bf:f6:2f:4d:d5:05:5a:8a:0e:
                    87:16:c9:60:e1:d7:c2:ba:5f:39:8f:8f:b3:23:a6:
                    d8:52:ba:a2:de:48:a7:46:d8:16:74:85:4c:8a:8f:
                    7c:41:9d:67:7c:53:92:af:7e:a8:c7:fb:cd:f9:05:
                    ca:06:65:66:2e:44:c0:50:cc:5b:95:a1:db:6d:dd:
                    72:ca:e1:ea:41:7d:9b:30:07:ee:72:09:2b:7f:b3:
                    99:6e:90:6c:2a:28:45:a5:98:d8:8b:dd:4b:f9:fe:
                    1a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:66:D4:2A:3E:EE:84:C8:DF:91:DC:5F:AA:58:FF:65:DC:79:70:EE
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139372e3139352e302f32342d3234203d3e203632323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.197.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:f0:31:4c:16:91:b2:12:2d:73:27:b6:b5:c0:2a:0e:82:02:
         2e:3e:0e:90:53:6b:08:d1:f5:3a:f0:43:04:3f:e4:42:8f:49:
         41:92:17:d6:87:dc:d9:35:fd:41:a9:7a:de:f0:31:bb:fe:d3:
         26:ce:ed:e7:c6:99:df:5f:cf:54:9f:e6:8e:a2:80:b9:fa:30:
         d7:1e:c5:51:bc:88:da:bf:9f:db:b9:2a:c9:3a:11:63:f0:35:
         fa:42:9c:57:2c:23:b7:0e:21:58:72:87:bc:3b:b4:d4:eb:a0:
         8a:2f:71:d4:56:7c:48:c4:60:a0:95:3b:2b:fc:e6:3a:49:91:
         05:13:1c:e3:09:88:8e:18:46:39:98:6a:44:93:85:81:e1:66:
         78:fa:d8:2d:6e:7f:c1:05:e3:eb:56:60:26:33:5c:2d:fe:20:
         83:ac:73:a1:53:66:6c:ab:10:8c:4e:cf:c7:90:77:a2:a5:5d:
         20:90:db:cc:72:ee:3a:e6:0d:89:01:70:75:19:4c:e8:77:ed:
         2c:d5:8e:b8:0e:9e:0a:87:8a:71:6f:4f:25:15:d3:21:76:8e:
         04:6c:80:52:fa:84:06:45:e2:45:b2:c1:f0:d9:3a:c7:6f:d8:
         e5:a9:c0:05:e6:6d:fc:f6:31:4e:ea:76:ef:b6:c8:9b:4c:64:
         1b:96:f1:f5
-----BEGIN CERTIFICATE-----
MIIG5TCCBc2gAwIBAgIUfJU9Pd40BW86cWPw1WwLEZrKlYIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5OTRlZTkzYmFiZTYwYzEzZTA0NDg3ZmE1Y2QzNGZk
MjNmYzkzZjAeFw0yMTA1MjkwOTEyMTFaFw0yMjA1MjgwOTE3MTFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUEyOTdBMkU3RUNENDlCQ0Uy
RjlEMzhEOTU5NkNFNTZDNzI1NkQ1MkI1QjdGNjE0QTlERjY2NTIyMDlGQjY1NjlF
Njk2OEIzMUVEQ0QyMDAxNEE3MTVGOTkyMjhBQzEyNzdFOEFDMEUyODQ4MkM0MzYw
NTM2NDM2QTUzRTU5NEQ0MzNDMDQyNzkwMTUwMjdGRUZEQ0Y5MEU2NEFEMkJEQkQ5
N0YyNTZCRENEM0RGNzg5MkNFMDY3NTQ3NjEzNUZCMkM0NjZEMDYxOUZDOEJGODJG
MUUxMEFERTEwMThCRTVDOTU0N0M1M0U4RTRFRDRFM0Y4NjIyREQ3QkNFNzhDOEU2
RjFGQjE0MjM4NThCMjUxMkQ3REIxRjlGNEI0QUYxNjZFMEU3NEMyMDhFNDFGNzA5
REYxNkJGRjYyRjRERDUwNTVBOEEwRTg3MTZDOTYwRTFEN0MyQkE1RjM5OEY4RkIz
MjNBNkQ4NTJCQUEyREU0OEE3NDZEODE2NzQ4NTRDOEE4RjdDNDE5RDY3N0M1Mzky
QUY3RUE4QzdGQkNERjkwNUNBMDY2NTY2MkU0NEMwNTBDQzVCOTVBMURCNkRERDcy
Q0FFMUVBNDE3RDlCMzAwN0VFNzIwOTJCN0ZCMzk5NkU5MDZDMkEyODQ1QTU5OEQ4
OEJERDRCRjlGRTFBNTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqil6Ln7NSbzi+dONlZbOVsclbVK1t/YUqd9mUiCftlaeaWizHtzS
ABSnFfmSKKwSd+isDihILENgU2Q2pT5ZTUM8BCeQFQJ/79z5DmStK9vZfyVr3NPf
eJLOBnVHYTX7LEZtBhn8i/gvHhCt4QGL5clUfFPo5O1OP4Yi3XvOeMjm8fsUI4WL
JRLX2x+fS0rxZuDnTCCOQfcJ3xa/9i9N1QVaig6HFslg4dfCul85j4+zI6bYUrqi
3kinRtgWdIVMio98QZ1nfFOSr36ox/vN+QXKBmVmLkTAUMxblaHbbd1yyuHqQX2b
MAfucgkrf7OZbpBsKihFpZjYi91L+f4aVQIDAQABo4IB8zCCAe8wHQYDVR0OBBYE
FJtm1Co+7oTI35HcX6pY/2XceXDuMB8GA1UdIwQYMBaAFGGZTuk7q+YME+BEh/pc
00/SP8k/MA4GA1UdDwEB/wQEAwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC82LzYxOTk0
RUU5M0JBQkU2MEMxM0UwNDQ4N0ZBNUNEMzRGRDIzRkM5M0YuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9ZWmxPNlR1cjVnd1Q0RVNILWx6VFQ5SV95VDguY2VyMIGK
BggrBgEFBQcBCwR+MHwwegYIKwYBBQUHMAuGbnJzeW5jOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0LzYvMzEzODM1MmUzMTM5MzcyZTMx
MzkzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzIzMjM0MzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5xcMwDQYJKoZIhvcNAQELBQADggEBAGHwMUwWkbISLXMntrXAKg6CAi4+DpBT
awjR9TrwQwQ/5EKPSUGSF9aH3Nk1/UGpet7wMbv+0ybO7efGmd9fz1Sf5o6igLn6
MNcexVG8iNq/n9u5Ksk6EWPwNfpCnFcsI7cOIVhyh7w7tNTroIovcdRWfEjEYKCV
Oyv85jpJkQUTHOMJiI4YRjmYakSThYHhZnj62C1uf8EF4+tWYCYzXC3+IIOsc6FT
ZmyrEIxOz8eQd6KlXSCQ28xy7jrmDYkBcHUZTOh37SzVjrgOngqHinFvTyUV0yF2
jgRsgFL6hAZF4kWywfDZOsdv2OWpwAXmbfz2MU7qdu+2yJtMZBuW8fU=
-----END CERTIFICATE-----