Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3233362e302f32342d3234203d3e20323132363330.roa
File:                     3138352e3230322e3233362e302f32342d3234203d3e20323132363330.roa (raw, json)
Hash identifier:          YA13GvEXeOVVWlVZxuKuYa0o0SPuXsyIjZIJ2TUWHQk=
Subject key identifier:   39:1B:8A:C0:9F:A7:59:E1:42:54:7A:76:E8:A8:90:78:5E:40:8D:28
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       576ECC763DA323771C216A5B7F07C7B3ADFD8D87
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3233362e302f32342d3234203d3e20323132363330.roa
Signing time:             Fri 27 Nov 2020 15:10:13 +0000
ROA not before:           Fri 27 Nov 2020 15:05:13 +0000
ROA not after:            Fri 26 Nov 2021 15:10:13 +0000
asID:                     212630
IP address blocks:        185.202.236.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:6e:cc:76:3d:a3:23:77:1c:21:6a:5b:7f:07:c7:b3:ad:fd:8d:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Nov 27 15:05:13 2020 GMT
            Not After : Nov 26 15:10:13 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0d:af:18:bb:28:76:5e:1b:0f:57:8a:90:f8:
                    da:6c:b9:01:58:77:96:65:cd:d0:24:1e:47:52:6d:
                    15:42:45:d2:bd:2c:44:61:b7:2f:a5:d7:52:2b:17:
                    6c:24:d7:fd:97:2a:02:a8:63:cb:a7:19:cd:5a:e3:
                    40:5a:99:2c:7a:17:2c:f9:52:0b:67:07:c4:30:97:
                    de:9e:1b:8c:8e:91:08:4e:d7:c5:95:bb:fc:25:cc:
                    79:5d:3f:16:d7:c0:a4:c2:33:9b:a1:54:4b:8b:ca:
                    82:95:ae:ac:a5:52:88:41:e0:8e:41:f0:e0:c5:59:
                    4e:d4:fb:26:65:65:30:b0:31:30:c8:a9:b2:1a:2b:
                    2b:4b:c5:52:cb:d5:31:eb:07:57:43:31:5b:2c:93:
                    d2:b7:74:5a:b0:a5:84:5f:e5:ca:e2:fc:3c:9e:33:
                    7e:10:6b:a8:6c:74:2e:ca:83:e5:a7:ff:5a:37:6c:
                    19:20:e4:43:3f:6f:a0:88:30:89:50:be:21:37:62:
                    71:f8:ad:09:44:93:75:0b:0a:9e:18:8b:4c:0c:71:
                    fe:18:0e:96:0f:9a:59:ee:cf:86:8d:30:5e:c7:73:
                    a8:c6:eb:8d:51:63:ea:33:23:75:fc:31:b2:63:6d:
                    c1:0d:e5:6f:7c:04:31:78:57:51:20:d2:06:54:d8:
                    c6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:1B:8A:C0:9F:A7:59:E1:42:54:7A:76:E8:A8:90:78:5E:40:8D:28
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3233362e302f32342d3234203d3e20323132363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:0a:50:66:ee:f6:eb:7e:66:5b:61:34:00:5a:dd:cc:3b:b9:
         5b:b6:ab:68:22:fc:b5:0b:a3:cf:f4:3a:ae:ca:ea:ee:4c:f7:
         0e:6f:26:60:fc:f2:0e:9d:e3:47:07:91:03:55:b1:5d:95:0b:
         e4:50:be:0f:99:0c:57:06:9e:34:f6:d7:89:81:4f:81:31:f9:
         d4:07:35:19:04:ed:20:00:c0:98:b7:d9:39:2f:7d:96:3f:ff:
         22:1b:be:99:b3:44:db:81:6a:d9:16:5b:c9:f9:a5:56:c7:51:
         20:19:25:38:71:0f:8c:42:9b:92:a1:47:e1:c3:e1:9b:e2:9d:
         28:a5:94:0a:a0:1c:20:52:6a:a1:e6:24:81:80:e9:19:71:3f:
         3e:7a:a9:6a:3f:e1:39:ad:62:ac:54:6c:5b:64:a5:73:ec:a7:
         ab:55:0d:a4:c8:40:b7:86:72:2a:aa:c1:92:86:85:c3:93:48:
         ec:83:1f:69:4c:fc:b3:fb:ed:f3:90:07:c1:34:95:07:2a:f9:
         8f:38:07:24:e2:fd:da:22:bf:51:14:07:e0:61:ed:d6:89:a5:
         31:41:41:d8:60:29:24:a0:87:f3:90:da:8d:c3:22:7a:ba:84:
         04:4f:e7:7d:72:bf:d8:9c:9b:94:dc:72:92:e1:c6:9a:22:89:
         2e:26:f8:2c
-----BEGIN CERTIFICATE-----
MIIG6DCCBdCgAwIBAgIUV27Mdj2jI3ccIWpbfwfHs639jYcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5OTRlZTkzYmFiZTYwYzEzZTA0NDg3ZmE1Y2QzNGZk
MjNmYzkzZjAeFw0yMDExMjcxNTA1MTNaFw0yMTExMjYxNTEwMTNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzcwREFGMThCQjI4NzY1RTFC
MEY1NzhBOTBGOERBNkNCOTAxNTg3Nzk2NjVDREQwMjQxRTQ3NTI2RDE1NDI0NUQy
QkQyQzQ0NjFCNzJGQTVENzUyMkIxNzZDMjREN0ZEOTcyQTAyQTg2M0NCQTcxOUNE
NUFFMzQwNUE5OTJDN0ExNzJDRjk1MjBCNjcwN0M0MzA5N0RFOUUxQjhDOEU5MTA4
NEVEN0M1OTVCQkZDMjVDQzc5NUQzRjE2RDdDMEE0QzIzMzlCQTE1NDRCOEJDQTgy
OTVBRUFDQTU1Mjg4NDFFMDhFNDFGMEUwQzU1OTRFRDRGQjI2NjU2NTMwQjAzMTMw
QzhBOUIyMUEyQjJCNEJDNTUyQ0JENTMxRUIwNzU3NDMzMTVCMkM5M0QyQjc3NDVB
QjBBNTg0NUZFNUNBRTJGQzNDOUUzMzdFMTA2QkE4NkM3NDJFQ0E4M0U1QTdGRjVB
Mzc2QzE5MjBFNDQzM0Y2RkEwODgzMDg5NTBCRTIxMzc2MjcxRjhBRDA5NDQ5Mzc1
MEIwQTlFMTg4QjRDMEM3MUZFMTgwRTk2MEY5QTU5RUVDRjg2OEQzMDVFQzc3M0E4
QzZFQjhENTE2M0VBMzMyMzc1RkMzMUIyNjM2REMxMERFNTZGN0MwNDMxNzg1NzUx
MjBEMjA2NTREOEM2N0QwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxw2vGLsodl4bD1eKkPjabLkBWHeWZc3QJB5HUm0VQkXSvSxEYbcv
pddSKxdsJNf9lyoCqGPLpxnNWuNAWpksehcs+VILZwfEMJfenhuMjpEITtfFlbv8
Jcx5XT8W18CkwjOboVRLi8qCla6spVKIQeCOQfDgxVlO1PsmZWUwsDEwyKmyGisr
S8VSy9Ux6wdXQzFbLJPSt3RasKWEX+XK4vw8njN+EGuobHQuyoPlp/9aN2wZIORD
P2+giDCJUL4hN2Jx+K0JRJN1CwqeGItMDHH+GA6WD5pZ7s+GjTBex3OoxuuNUWPq
MyN1/DGyY23BDeVvfAQxeFdRINIGVNjGfQIDAQABo4IB9jCCAfIwHQYDVR0OBBYE
FDkbisCfp1nhQlR6duiokHheQI0oMB8GA1UdIwQYMBaAFGGZTuk7q+YME+BEh/pc
00/SP8k/MA4GA1UdDwEB/wQEAwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC82LzYxOTk0
RUU5M0JBQkU2MEMxM0UwNDQ4N0ZBNUNEMzRGRDIzRkM5M0YuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9ZWmxPNlR1cjVnd1Q0RVNILWx6VFQ5SV95VDguY2VyMIGN
BggrBgEFBQcBCwSBgDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kxLnRlcnJh
dHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC82LzMxMzgzNTJlMzIzMDMyMmUz
MjMzMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzNjMzMzAucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAC5yuwwDQYJKoZIhvcNAQELBQADggEBAAYKUGbu9ut+ZlthNABa3cw7uVu2
q2gi/LULo8/0Oq7K6u5M9w5vJmD88g6d40cHkQNVsV2VC+RQvg+ZDFcGnjT214mB
T4Ex+dQHNRkE7SAAwJi32TkvfZY//yIbvpmzRNuBatkWW8n5pVbHUSAZJThxD4xC
m5KhR+HD4ZvinSillAqgHCBSaqHmJIGA6RlxPz56qWo/4TmtYqxUbFtkpXPsp6tV
DaTIQLeGciqqwZKGhcOTSOyDH2lM/LP77fOQB8E0lQcq+Y84ByTi/doiv1EUB+Bh
7daJpTFBQdhgKSSgh/OQ2o3DInq6hARP531yv9icm5TccpLhxpoiiS4m+Cw=
-----END CERTIFICATE-----