Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232322e3234322e302f32342d3234203d3e20323132373335.roa
File:                     3138352e3232322e3234322e302f32342d3234203d3e20323132373335.roa (raw, json)
Hash identifier:          XVZ81CBmo/XhIIM48bsbgrOhdzvqKmlBeSL6oRXTW3s=
Subject key identifier:   6F:F6:5C:5B:37:14:B1:41:44:26:5F:84:E3:6A:9B:F9:18:A9:11:BB
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       73659EFFAFDD98B9D5681A0DF2B997070D5603D6
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232322e3234322e302f32342d3234203d3e20323132373335.roa
Signing time:             Fri 27 Nov 2020 15:10:10 +0000
ROA not before:           Fri 27 Nov 2020 15:05:10 +0000
ROA not after:            Fri 26 Nov 2021 15:10:10 +0000
asID:                     212735
IP address blocks:        185.222.242.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:65:9e:ff:af:dd:98:b9:d5:68:1a:0d:f2:b9:97:07:0d:56:03:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Nov 27 15:05:10 2020 GMT
            Not After : Nov 26 15:10:10 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:49:14:01:2f:45:48:14:5f:41:37:33:da:76:
                    aa:fb:1d:24:59:b2:10:e5:f7:07:a0:ff:39:84:23:
                    f7:e5:39:d9:3e:18:bb:e6:93:5c:a4:7c:fe:81:e8:
                    3a:87:9b:e3:db:c3:1b:a1:45:7e:77:04:ae:fe:4e:
                    e8:7e:5e:69:ec:9e:1e:7f:be:b2:5c:f0:c3:e8:cc:
                    98:03:5c:3f:a6:b9:75:d2:b0:01:5e:81:95:cf:3b:
                    95:f3:82:d9:95:80:79:f2:46:c8:92:80:bc:03:79:
                    2d:45:e9:9a:11:ad:1b:82:56:00:b2:43:4a:13:82:
                    09:fc:37:63:2b:e5:35:44:bd:57:b2:3e:b2:4d:1e:
                    a6:54:78:17:18:de:a4:f0:36:86:bb:da:3d:51:ef:
                    b2:d7:13:be:d3:29:33:6e:7f:18:09:fc:2a:78:b4:
                    f7:2f:fa:55:21:80:8b:16:25:3b:7d:50:8c:dd:f9:
                    0f:c7:6c:b9:e9:42:79:7d:d3:b7:2d:d5:65:9c:c0:
                    f8:69:e2:85:f3:10:bb:54:91:4c:cf:0a:a9:3b:a4:
                    99:16:bd:42:8f:e1:95:a5:09:80:49:41:81:39:7d:
                    44:bd:7e:49:8f:64:29:ea:8d:9b:c3:4c:fd:c8:6f:
                    1b:8f:cc:b2:63:dc:ae:1c:56:c6:b5:14:f6:65:3f:
                    12:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F6:5C:5B:37:14:B1:41:44:26:5F:84:E3:6A:9B:F9:18:A9:11:BB
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232322e3234322e302f32342d3234203d3e20323132373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.222.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:40:eb:da:da:9f:78:90:69:89:39:92:4c:58:87:7b:f7:69:
         f2:44:d7:7d:89:29:8f:cb:61:f3:9b:15:df:48:1b:c1:95:a8:
         94:0b:85:4c:d6:60:00:07:d3:b1:3f:0a:1c:fe:25:6f:9c:59:
         08:ea:7f:d1:6a:07:2f:2a:62:84:6f:09:19:7a:14:9d:ea:de:
         8d:ec:7b:2a:ce:69:3c:8c:2e:30:c9:bb:bd:f0:2c:a0:67:f3:
         67:85:d3:d7:9e:73:f5:51:31:71:d9:3f:0f:37:aa:95:14:3c:
         8c:2b:7e:5a:46:56:98:62:c6:c4:01:be:b7:e4:8e:bf:5b:02:
         2c:05:d3:06:1f:2b:3f:b9:43:2f:4e:4c:61:52:a9:5d:57:5c:
         82:83:b1:d9:6e:44:dc:a0:75:ba:99:4b:87:16:ca:49:59:41:
         59:f0:a7:ed:c4:9d:99:05:db:22:ec:08:2c:b6:d4:90:6e:5d:
         b3:b9:e4:32:40:82:87:92:1d:01:be:b7:43:f9:5f:35:1f:c2:
         f7:c8:d3:70:c0:da:75:c2:3a:3a:13:a2:b6:89:66:7a:c3:ca:
         34:f2:63:43:63:59:39:b1:fe:08:26:aa:12:09:93:2b:29:de:
         54:4b:4a:0b:e6:48:72:eb:79:bb:5a:b6:2d:6f:cb:9e:97:7a:
         27:68:9a:ca
-----BEGIN CERTIFICATE-----
MIIG6DCCBdCgAwIBAgIUc2We/6/dmLnVaBoN8rmXBw1WA9YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5OTRlZTkzYmFiZTYwYzEzZTA0NDg3ZmE1Y2QzNGZk
MjNmYzkzZjAeFw0yMDExMjcxNTA1MTBaFw0yMTExMjYxNTEwMTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRjE0OTE0MDEyRjQ1NDgxNDVG
NDEzNzMzREE3NkFBRkIxRDI0NTlCMjEwRTVGNzA3QTBGRjM5ODQyM0Y3RTUzOUQ5
M0UxOEJCRTY5MzVDQTQ3Q0ZFODFFODNBODc5QkUzREJDMzFCQTE0NTdFNzcwNEFF
RkU0RUU4N0U1RTY5RUM5RTFFN0ZCRUIyNUNGMEMzRThDQzk4MDM1QzNGQTZCOTc1
RDJCMDAxNUU4MTk1Q0YzQjk1RjM4MkQ5OTU4MDc5RjI0NkM4OTI4MEJDMDM3OTJE
NDVFOTlBMTFBRDFCODI1NjAwQjI0MzRBMTM4MjA5RkMzNzYzMkJFNTM1NDRCRDU3
QjIzRUIyNEQxRUE2NTQ3ODE3MThERUE0RjAzNjg2QkJEQTNENTFFRkIyRDcxM0JF
RDMyOTMzNkU3RjE4MDlGQzJBNzhCNEY3MkZGQTU1MjE4MDhCMTYyNTNCN0Q1MDhD
RERGOTBGQzc2Q0I5RTk0Mjc5N0REM0I3MkRENTY1OUNDMEY4NjlFMjg1RjMxMEJC
NTQ5MTRDQ0YwQUE5M0JBNDk5MTZCRDQyOEZFMTk1QTUwOTgwNDk0MTgxMzk3RDQ0
QkQ3RTQ5OEY2NDI5RUE4RDlCQzM0Q0ZEQzg2RjFCOEZDQ0IyNjNEQ0FFMUM1NkM2
QjUxNEY2NjUzRjEyNDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA8UkUAS9FSBRfQTcz2naq+x0kWbIQ5fcHoP85hCP35TnZPhi75pNc
pHz+geg6h5vj28MboUV+dwSu/k7ofl5p7J4ef76yXPDD6MyYA1w/prl10rABXoGV
zzuV84LZlYB58kbIkoC8A3ktRemaEa0bglYAskNKE4IJ/DdjK+U1RL1Xsj6yTR6m
VHgXGN6k8DaGu9o9Ue+y1xO+0ykzbn8YCfwqeLT3L/pVIYCLFiU7fVCM3fkPx2y5
6UJ5fdO3LdVlnMD4aeKF8xC7VJFMzwqpO6SZFr1Cj+GVpQmASUGBOX1EvX5Jj2Qp
6o2bw0z9yG8bj8yyY9yuHFbGtRT2ZT8SRQIDAQABo4IB9jCCAfIwHQYDVR0OBBYE
FG/2XFs3FLFBRCZfhONqm/kYqRG7MB8GA1UdIwQYMBaAFGGZTuk7q+YME+BEh/pc
00/SP8k/MA4GA1UdDwEB/wQEAwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC82LzYxOTk0
RUU5M0JBQkU2MEMxM0UwNDQ4N0ZBNUNEMzRGRDIzRkM5M0YuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9ZWmxPNlR1cjVnd1Q0RVNILWx6VFQ5SV95VDguY2VyMIGN
BggrBgEFBQcBCwSBgDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kxLnRlcnJh
dHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC82LzMxMzgzNTJlMzIzMjMyMmUz
MjM0MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzNzMzMzUucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAC53vIwDQYJKoZIhvcNAQELBQADggEBAE9A69ran3iQaYk5kkxYh3v3afJE
132JKY/LYfObFd9IG8GVqJQLhUzWYAAH07E/Chz+JW+cWQjqf9FqBy8qYoRvCRl6
FJ3q3o3seyrOaTyMLjDJu73wLKBn82eF09eec/VRMXHZPw83qpUUPIwrflpGVphi
xsQBvrfkjr9bAiwF0wYfKz+5Qy9OTGFSqV1XXIKDsdluRNygdbqZS4cWyklZQVnw
p+3EnZkF2yLsCCy21JBuXbO55DJAgoeSHQG+t0P5XzUfwvfI03DA2nXCOjoToraJ
ZnrDyjTyY0NjWTmx/ggmqhIJkysp3lRLSgvmSHLrebtati1vy56Xeidomso=
-----END CERTIFICATE-----