Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231382e3132372e302f32342d3234203d3e203630353438.roa
File:                     3138352e3231382e3132372e302f32342d3234203d3e203630353438.roa (raw, json)
Hash identifier:          6jYTiE5MsVzmxgU3hpAHV4bp7pCu4pXx1jG7lDc0Mzs=
Subject key identifier:   75:9E:E6:F6:51:00:B3:5F:8C:C7:21:77:51:AE:5D:81:97:0E:24:FC
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       7F1A15142FC5B9705FEB27B6EAC6EE00138B5C0A
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231382e3132372e302f32342d3234203d3e203630353438.roa
Signing time:             Mon 11 Jan 2021 12:34:02 +0000
ROA not before:           Mon 11 Jan 2021 12:29:02 +0000
ROA not after:            Mon 10 Jan 2022 12:34:02 +0000
asID:                     60548
IP address blocks:        185.218.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:1a:15:14:2f:c5:b9:70:5f:eb:27:b6:ea:c6:ee:00:13:8b:5c:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Jan 11 12:29:02 2021 GMT
            Not After : Jan 10 12:34:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a9:94:3f:1e:88:4f:c9:be:9a:08:c6:58:24:
                    45:a7:ca:84:b4:fa:ac:28:86:e0:52:e8:7e:c7:bf:
                    9f:95:cd:fa:e4:c6:c9:6e:ed:b5:c2:4b:70:85:7c:
                    c3:f2:81:6b:b4:b8:57:d4:16:c2:36:4c:cf:01:e3:
                    06:ad:6b:18:8d:c7:62:c9:00:59:01:8e:66:73:74:
                    5d:28:3b:16:a5:d6:b0:7d:0b:b6:e2:49:09:09:2e:
                    ad:8c:b7:b4:ef:45:9c:49:c5:68:da:d8:cf:2b:f9:
                    8a:63:76:98:32:ef:34:6c:3a:3c:87:66:c0:dc:63:
                    8e:d8:75:c8:72:04:1e:39:c0:c7:80:f7:1d:33:44:
                    c4:64:c2:07:70:b4:20:52:92:b9:2b:af:6d:e6:fa:
                    e3:de:48:18:4a:67:6e:cd:72:d3:02:49:ab:00:61:
                    a8:d3:f6:c0:fc:81:0d:35:d5:2e:24:eb:dc:c4:8f:
                    82:e5:01:35:71:1f:67:c5:ce:c3:a5:96:6c:8c:43:
                    01:f1:6e:79:7e:53:c6:2b:bd:0e:43:7b:15:a0:84:
                    03:5c:30:0f:2d:a9:08:c6:ef:b3:e2:6e:fb:12:7a:
                    13:94:73:79:25:32:82:34:36:8e:9e:db:0d:86:71:
                    b3:e1:57:e8:c0:0c:14:70:d6:b1:2a:f8:91:82:d0:
                    df:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:9E:E6:F6:51:00:B3:5F:8C:C7:21:77:51:AE:5D:81:97:0E:24:FC
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231382e3132372e302f32342d3234203d3e203630353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.218.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:76:77:f1:44:15:19:a0:5a:3a:8b:ae:48:84:c5:b4:e0:a0:
         61:65:95:a0:b7:de:3d:96:c7:77:ea:ee:e5:0a:6a:7a:1c:78:
         2c:2d:a7:98:3a:d6:84:dd:8f:13:2d:a6:fe:ff:35:a0:05:81:
         62:02:35:df:90:bd:ea:1f:af:5b:7f:78:e7:69:39:f7:0c:68:
         7c:42:23:1c:0c:04:a4:ab:5a:10:83:3d:da:c4:d0:7e:76:88:
         ad:7c:22:b7:fa:74:29:c2:e6:97:cc:35:63:3b:1f:60:aa:6d:
         e3:59:eb:7f:70:08:8f:ca:20:7e:f2:37:68:65:f6:f1:bb:f2:
         2d:a0:44:e1:70:da:75:ef:23:99:7f:52:d1:35:7a:da:38:ad:
         6d:71:28:ee:58:b8:1c:28:ff:51:c0:4a:2d:44:a3:96:42:b4:
         df:8d:7b:25:78:aa:17:b4:99:42:1d:ce:f9:73:f6:62:2f:83:
         f7:74:bc:13:4e:e4:fd:8e:38:3e:a5:bd:34:48:b6:a4:0d:f1:
         6a:fb:11:f0:e7:fe:db:9e:1a:19:52:db:33:01:58:2d:dd:2d:
         d2:e8:2e:5d:41:02:0b:04:5c:99:cb:3b:3d:b7:b7:59:c8:3e:
         1f:7d:dc:e8:ae:df:54:26:a4:e9:60:4d:13:ff:7c:59:82:f6:
         51:ac:60:07
-----BEGIN CERTIFICATE-----
MIIG5TCCBc2gAwIBAgIUfxoVFC/FuXBf6ye26sbuABOLXAowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5OTRlZTkzYmFiZTYwYzEzZTA0NDg3ZmE1Y2QzNGZk
MjNmYzkzZjAeFw0yMTAxMTExMjI5MDJaFw0yMjAxMTAxMjM0MDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkFBOTk0M0YxRTg4NEZDOUJF
OUEwOEM2NTgyNDQ1QTdDQTg0QjRGQUFDMjg4NkUwNTJFODdFQzdCRjlGOTVDREZB
RTRDNkM5NkVFREI1QzI0QjcwODU3Q0MzRjI4MTZCQjRCODU3RDQxNkMyMzY0Q0NG
MDFFMzA2QUQ2QjE4OERDNzYyQzkwMDU5MDE4RTY2NzM3NDVEMjgzQjE2QTVENkIw
N0QwQkI2RTI0OTA5MDkyRUFEOENCN0I0RUY0NTlDNDlDNTY4REFEOENGMkJGOThB
NjM3Njk4MzJFRjM0NkMzQTNDODc2NkMwREM2MzhFRDg3NUM4NzIwNDFFMzlDMEM3
ODBGNzFEMzM0NEM0NjRDMjA3NzBCNDIwNTI5MkI5MkJBRjZERTZGQUUzREU0ODE4
NEE2NzZFQ0Q3MkQzMDI0OUFCMDA2MUE4RDNGNkMwRkM4MTBEMzVENTJFMjRFQkRD
QzQ4RjgyRTUwMTM1NzExRjY3QzVDRUMzQTU5NjZDOEM0MzAxRjE2RTc5N0U1M0M2
MkJCRDBFNDM3QjE1QTA4NDAzNUMzMDBGMkRBOTA4QzZFRkIzRTI2RUZCMTI3QTEz
OTQ3Mzc5MjUzMjgyMzQzNjhFOUVEQjBEODY3MUIzRTE1N0U4QzAwQzE0NzBENkIx
MkFGODkxODJEMERGNDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuqmUPx6IT8m+mgjGWCRFp8qEtPqsKIbgUuh+x7+flc365MbJbu21
wktwhXzD8oFrtLhX1BbCNkzPAeMGrWsYjcdiyQBZAY5mc3RdKDsWpdawfQu24kkJ
CS6tjLe070WcScVo2tjPK/mKY3aYMu80bDo8h2bA3GOO2HXIcgQeOcDHgPcdM0TE
ZMIHcLQgUpK5K69t5vrj3kgYSmduzXLTAkmrAGGo0/bA/IENNdUuJOvcxI+C5QE1
cR9nxc7DpZZsjEMB8W55flPGK70OQ3sVoIQDXDAPLakIxu+z4m77EnoTlHN5JTKC
NDaOntsNhnGz4VfowAwUcNaxKviRgtDfQwIDAQABo4IB8zCCAe8wHQYDVR0OBBYE
FHWe5vZRALNfjMchd1GuXYGXDiT8MB8GA1UdIwQYMBaAFGGZTuk7q+YME+BEh/pc
00/SP8k/MA4GA1UdDwEB/wQEAwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC82LzYxOTk0
RUU5M0JBQkU2MEMxM0UwNDQ4N0ZBNUNEMzRGRDIzRkM5M0YuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9ZWmxPNlR1cjVnd1Q0RVNILWx6VFQ5SV95VDguY2VyMIGK
BggrBgEFBQcBCwR+MHwwegYIKwYBBQUHMAuGbnJzeW5jOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0LzYvMzEzODM1MmUzMjMxMzgyZTMx
MzIzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzAzNTM0Mzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC52n8wDQYJKoZIhvcNAQELBQADggEBAFF2d/FEFRmgWjqLrkiExbTgoGFllaC3
3j2Wx3fq7uUKanoceCwtp5g61oTdjxMtpv7/NaAFgWICNd+Qveofr1t/eOdpOfcM
aHxCIxwMBKSrWhCDPdrE0H52iK18Irf6dCnC5pfMNWM7H2CqbeNZ639wCI/KIH7y
N2hl9vG78i2gROFw2nXvI5l/UtE1eto4rW1xKO5YuBwo/1HASi1Eo5ZCtN+NeyV4
qhe0mUIdzvlz9mIvg/d0vBNO5P2OOD6lvTRItqQN8Wr7EfDn/tueGhlS2zMBWC3d
LdLoLl1BAgsEXJnLOz23t1nIPh993Oiu31QmpOlgTRP/fFmC9lGsYAc=
-----END CERTIFICATE-----