Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232322e3234322e302f32342d3234203d3e20323132333430.roa
File:                     3138352e3232322e3234322e302f32342d3234203d3e20323132333430.roa (raw, json)
Hash identifier:          JcFTqsU4T7zbsXymbkiMriA8dlBJqNrGIuVKQ7Z/cL8=
Subject key identifier:   4A:07:C7:B0:F2:63:B9:4A:CC:E7:26:3F:CF:9B:E9:04:BC:A2:A7:24
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       51A1F1DEB6735756B186924FA6E11FCFEC6B3694
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232322e3234322e302f32342d3234203d3e20323132333430.roa
Signing time:             Fri 27 Nov 2020 15:10:17 +0000
ROA not before:           Fri 27 Nov 2020 15:05:17 +0000
ROA not after:            Fri 26 Nov 2021 15:10:17 +0000
asID:                     212340
IP address blocks:        185.222.242.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a1:f1:de:b6:73:57:56:b1:86:92:4f:a6:e1:1f:cf:ec:6b:36:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Nov 27 15:05:17 2020 GMT
            Not After : Nov 26 15:10:17 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0d:21:ef:2b:ea:88:35:d7:c0:6b:f5:dd:93:
                    2d:49:a1:4f:e2:d8:b6:2d:7e:51:88:f7:61:97:de:
                    8e:6c:09:20:c4:d1:b2:31:24:a4:90:52:2f:81:fd:
                    5d:a2:5f:87:c3:8f:06:7b:9c:ca:1c:99:ff:49:ba:
                    de:4f:51:e9:df:fe:05:08:7d:75:94:1e:83:7c:b3:
                    15:84:4a:3f:f4:29:77:9c:1f:8f:8f:97:fe:44:f0:
                    0d:88:e2:67:73:40:46:f4:c3:85:73:09:04:b2:2a:
                    a3:6e:15:25:58:68:ac:da:f7:e5:33:a0:5e:a4:99:
                    a0:1e:0c:3c:e0:86:32:91:cc:4d:78:30:9f:53:58:
                    9c:4d:e8:2e:96:91:c0:e8:78:c7:ae:71:d0:33:55:
                    e4:49:0b:2b:23:da:8a:f6:28:70:fa:bc:76:43:f0:
                    e6:e3:e6:71:d5:15:66:23:21:a7:6f:59:b8:37:22:
                    bf:ad:53:87:b0:c0:b5:70:ec:5a:11:55:38:64:85:
                    d4:23:fd:d7:67:4b:c4:af:20:3e:f3:1c:db:e5:de:
                    81:21:4b:31:7d:70:2b:16:0b:b5:63:4d:6d:9f:02:
                    ad:87:d6:a6:45:82:7f:57:ea:ed:cd:b6:1f:82:a3:
                    61:d6:99:4f:d3:ad:a5:80:51:21:1b:49:8d:cb:14:
                    3a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:07:C7:B0:F2:63:B9:4A:CC:E7:26:3F:CF:9B:E9:04:BC:A2:A7:24
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232322e3234322e302f32342d3234203d3e20323132333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.222.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:e6:6e:3e:78:c0:4e:0d:84:3a:a2:e8:8e:e2:b7:00:c6:f7:
         0e:de:f1:b8:35:d9:41:33:ef:9f:a9:b8:8e:b0:78:47:14:59:
         59:d2:bb:ad:05:58:bd:aa:9f:46:f4:b8:be:12:de:f3:f8:0e:
         8e:8e:42:75:4a:c4:2e:ae:28:b3:d0:3d:3e:78:5f:a6:05:1b:
         7d:0c:60:9a:bb:93:dc:c1:91:28:50:0e:b1:d7:d4:ec:fd:67:
         a7:ab:a2:4a:18:0c:f2:3c:70:13:a9:fd:b9:78:01:86:67:09:
         d4:1f:fa:03:bc:4b:d7:cd:51:a8:da:ff:44:26:0c:71:93:d6:
         d9:35:ce:1a:e6:f7:ea:05:aa:92:ef:8b:41:18:75:25:d4:76:
         3b:33:88:13:e3:f4:fd:5c:63:3c:e7:fd:0f:16:1a:bf:16:10:
         b2:55:a9:e6:95:68:a2:e5:ea:1b:af:eb:37:cf:48:c2:cc:86:
         5a:1b:b9:58:d6:19:b1:b3:1a:ca:6d:85:18:4d:a8:bb:fd:59:
         d0:95:83:ba:70:79:ee:92:b9:3f:c5:47:d7:44:7c:12:1a:af:
         6f:fd:48:36:8a:41:11:90:be:9b:da:1a:80:93:b7:80:f8:54:
         0c:e5:ab:1c:67:2b:20:64:6a:84:90:bc:20:3f:e1:f8:fb:e5:
         9e:9b:f8:d3
-----BEGIN CERTIFICATE-----
MIIG6DCCBdCgAwIBAgIUUaHx3rZzV1axhpJPpuEfz+xrNpQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5OTRlZTkzYmFiZTYwYzEzZTA0NDg3ZmE1Y2QzNGZk
MjNmYzkzZjAeFw0yMDExMjcxNTA1MTdaFw0yMTExMjYxNTEwMTdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjcwRDIxRUYyQkVBODgzNUQ3
QzA2QkY1REQ5MzJENDlBMTRGRTJEOEI2MkQ3RTUxODhGNzYxOTdERThFNkMwOTIw
QzREMUIyMzEyNEE0OTA1MjJGODFGRDVEQTI1Rjg3QzM4RjA2N0I5Q0NBMUM5OUZG
NDlCQURFNEY1MUU5REZGRTA1MDg3RDc1OTQxRTgzN0NCMzE1ODQ0QTNGRjQyOTc3
OUMxRjhGOEY5N0ZFNDRGMDBEODhFMjY3NzM0MDQ2RjRDMzg1NzMwOTA0QjIyQUEz
NkUxNTI1NTg2OEFDREFGN0U1MzNBMDVFQTQ5OUEwMUUwQzNDRTA4NjMyOTFDQzRE
NzgzMDlGNTM1ODlDNERFODJFOTY5MUMwRTg3OEM3QUU3MUQwMzM1NUU0NDkwQjJC
MjNEQThBRjYyODcwRkFCQzc2NDNGMEU2RTNFNjcxRDUxNTY2MjMyMUE3NkY1OUI4
MzcyMkJGQUQ1Mzg3QjBDMEI1NzBFQzVBMTE1NTM4NjQ4NUQ0MjNGREQ3Njc0QkM0
QUYyMDNFRjMxQ0RCRTVERTgxMjE0QjMxN0Q3MDJCMTYwQkI1NjM0RDZEOUYwMkFE
ODdENkE2NDU4MjdGNTdFQUVEQ0RCNjFGODJBMzYxRDY5OTRGRDNBREE1ODA1MTIx
MUI0OThEQ0IxNDNBNzUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtw0h7yvqiDXXwGv13ZMtSaFP4ti2LX5RiPdhl96ObAkgxNGyMSSk
kFIvgf1dol+Hw48Ge5zKHJn/SbreT1Hp3/4FCH11lB6DfLMVhEo/9Cl3nB+Pj5f+
RPANiOJnc0BG9MOFcwkEsiqjbhUlWGis2vflM6BepJmgHgw84IYykcxNeDCfU1ic
TegulpHA6HjHrnHQM1XkSQsrI9qK9ihw+rx2Q/Dm4+Zx1RVmIyGnb1m4NyK/rVOH
sMC1cOxaEVU4ZIXUI/3XZ0vEryA+8xzb5d6BIUsxfXArFgu1Y01tnwKth9amRYJ/
V+rtzbYfgqNh1plP062lgFEhG0mNyxQ6dQIDAQABo4IB9jCCAfIwHQYDVR0OBBYE
FEoHx7DyY7lKzOcmP8+b6QS8oqckMB8GA1UdIwQYMBaAFGGZTuk7q+YME+BEh/pc
00/SP8k/MA4GA1UdDwEB/wQEAwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC82LzYxOTk0
RUU5M0JBQkU2MEMxM0UwNDQ4N0ZBNUNEMzRGRDIzRkM5M0YuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9ZWmxPNlR1cjVnd1Q0RVNILWx6VFQ5SV95VDguY2VyMIGN
BggrBgEFBQcBCwSBgDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kxLnRlcnJh
dHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC82LzMxMzgzNTJlMzIzMjMyMmUz
MjM0MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzMzM0MzAucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAC53vIwDQYJKoZIhvcNAQELBQADggEBAGDmbj54wE4NhDqi6I7itwDG9w7e
8bg12UEz75+puI6weEcUWVnSu60FWL2qn0b0uL4S3vP4Do6OQnVKxC6uKLPQPT54
X6YFG30MYJq7k9zBkShQDrHX1Oz9Z6erokoYDPI8cBOp/bl4AYZnCdQf+gO8S9fN
Uaja/0QmDHGT1tk1zhrm9+oFqpLvi0EYdSXUdjsziBPj9P1cYzzn/Q8WGr8WELJV
qeaVaKLl6huv6zfPSMLMhlobuVjWGbGzGspthRhNqLv9WdCVg7pwee6SuT/FR9dE
fBIar2/9SDaKQRGQvpvaGoCTt4D4VAzlqxxnKyBkaoSQvCA/4fj75Z6b+NM=
-----END CERTIFICATE-----