Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234312e3135302e302f32332d3234203d3e203630353438.roa
File:                     3138352e3234312e3135302e302f32332d3234203d3e203630353438.roa (raw, json)
Hash identifier:          TT8/SOD2qvcHj1B+d745ls0ihxJFBcI9iROqdCmb35I=
Subject key identifier:   12:D0:2D:98:B0:5C:CF:18:63:C1:F3:3E:6C:4D:48:40:28:71:D5:7B
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       3BC0D143E380A172677FED7F27AE0DAD32250CF4
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234312e3135302e302f32332d3234203d3e203630353438.roa
Signing time:             Fri 27 Nov 2020 15:10:15 +0000
ROA not before:           Fri 27 Nov 2020 15:05:15 +0000
ROA not after:            Fri 26 Nov 2021 15:10:15 +0000
asID:                     60548
IP address blocks:        185.241.150.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c0:d1:43:e3:80:a1:72:67:7f:ed:7f:27:ae:0d:ad:32:25:0c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Nov 27 15:05:15 2020 GMT
            Not After : Nov 26 15:10:15 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a0:79:c8:1d:51:aa:3e:01:00:80:02:b4:f4:
                    5b:9c:08:a8:a5:90:d9:f5:51:f2:42:89:10:8c:e7:
                    1a:1b:fe:bd:b3:82:d3:89:13:1e:64:50:1c:8c:1a:
                    38:e5:b6:3a:a8:c5:ff:d4:26:e2:6c:86:8f:33:07:
                    50:d5:dd:7d:0b:f4:7c:3a:99:11:d9:ac:cb:9d:34:
                    81:e1:eb:7f:c8:a4:d9:51:fa:c2:a0:70:8c:19:52:
                    c2:5f:df:55:18:a2:19:a5:b6:7a:60:97:92:e1:f6:
                    7e:1c:93:59:ce:47:af:be:93:47:6e:69:6f:b4:11:
                    c7:b1:ac:c5:16:41:bf:80:78:9c:67:7c:32:cb:6c:
                    0a:e3:4e:39:22:27:1b:dd:fe:3b:27:5d:43:d3:7c:
                    f2:83:7a:b8:4f:da:1b:f8:68:61:cc:c8:5f:a9:85:
                    fa:f9:ca:0f:2c:7e:94:47:14:ae:b4:76:97:14:92:
                    b2:13:ef:c4:93:3e:8a:cc:9f:2a:65:9c:df:90:7d:
                    21:2b:0d:4e:a0:19:7a:c3:62:30:7a:2a:5d:73:02:
                    6d:66:6a:c3:3e:49:35:86:95:65:07:81:6e:ac:59:
                    bd:18:76:a2:1f:fe:62:ed:81:de:62:19:3f:90:68:
                    24:61:1e:a0:ba:21:cc:5e:b6:17:05:c9:cb:61:20:
                    d5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D0:2D:98:B0:5C:CF:18:63:C1:F3:3E:6C:4D:48:40:28:71:D5:7B
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234312e3135302e302f32332d3234203d3e203630353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.241.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:d5:4e:30:64:f6:35:32:4b:18:e0:37:4b:28:e0:5a:e1:56:
         67:70:a2:cb:44:19:4e:c8:e3:51:94:04:e1:ee:bc:68:f5:1f:
         91:56:8c:0d:d6:b9:23:68:10:42:ee:3a:32:79:3e:11:3c:06:
         73:24:30:5c:ce:9d:67:4f:9a:b3:cb:2f:8d:be:7a:ca:1f:f1:
         69:75:b5:ae:5b:44:7d:42:3e:44:05:e4:7f:f7:18:06:d5:ad:
         a1:5b:b5:32:fd:ae:94:87:d2:4d:6e:05:b1:35:ea:c5:ec:c2:
         96:ce:cc:2e:c0:8c:2f:8b:ab:aa:1f:4d:e1:4a:de:70:10:30:
         42:07:6b:62:59:08:d5:df:50:f3:2a:97:21:4f:8f:b0:84:90:
         79:5b:12:21:00:b6:ea:d5:28:60:04:22:66:32:37:ea:ff:04:
         67:f1:e4:bf:5d:94:77:35:5d:e4:0a:ad:5b:97:f9:ba:73:d3:
         3d:70:83:87:af:34:79:6a:88:8b:d0:74:2a:54:69:c8:7e:e8:
         e9:8a:79:f2:ba:e6:4b:71:b5:f9:96:40:dd:05:2d:1c:91:ed:
         fd:8e:e3:99:01:f7:bb:64:c8:09:d5:a4:23:36:6a:bd:b8:ca:
         22:8c:d3:00:da:11:81:5e:74:7d:30:71:c1:5e:da:31:90:f3:
         f0:04:ef:55
-----BEGIN CERTIFICATE-----
MIIG5TCCBc2gAwIBAgIUO8DRQ+OAoXJnf+1/J64NrTIlDPQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5OTRlZTkzYmFiZTYwYzEzZTA0NDg3ZmE1Y2QzNGZk
MjNmYzkzZjAeFw0yMDExMjcxNTA1MTVaFw0yMTExMjYxNTEwMTVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjZBMDc5QzgxRDUxQUEzRTAx
MDA4MDAyQjRGNDVCOUMwOEE4QTU5MEQ5RjU1MUYyNDI4OTEwOENFNzFBMUJGRUJE
QjM4MkQzODkxMzFFNjQ1MDFDOEMxQTM4RTVCNjNBQThDNUZGRDQyNkUyNkM4NjhG
MzMwNzUwRDVERDdEMEJGNDdDM0E5OTExRDlBQ0NCOUQzNDgxRTFFQjdGQzhBNEQ5
NTFGQUMyQTA3MDhDMTk1MkMyNUZERjU1MThBMjE5QTVCNjdBNjA5NzkyRTFGNjdF
MUM5MzU5Q0U0N0FGQkU5MzQ3NkU2OTZGQjQxMUM3QjFBQ0M1MTY0MUJGODA3ODlD
Njc3QzMyQ0I2QzBBRTM0RTM5MjIyNzFCRERGRTNCMjc1RDQzRDM3Q0YyODM3QUI4
NEZEQTFCRjg2ODYxQ0NDODVGQTk4NUZBRjlDQTBGMkM3RTk0NDcxNEFFQjQ3Njk3
MTQ5MkIyMTNFRkM0OTMzRThBQ0M5RjJBNjU5Q0RGOTA3RDIxMkIwRDRFQTAxOTdB
QzM2MjMwN0EyQTVENzMwMjZENjY2QUMzM0U0OTM1ODY5NTY1MDc4MTZFQUM1OUJE
MTg3NkEyMUZGRTYyRUQ4MURFNjIxOTNGOTA2ODI0NjExRUEwQkEyMUNDNUVCNjE3
MDVDOUNCNjEyMEQ1OTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtqB5yB1Rqj4BAIACtPRbnAiopZDZ9VHyQokQjOcaG/69s4LTiRMe
ZFAcjBo45bY6qMX/1CbibIaPMwdQ1d19C/R8OpkR2azLnTSB4et/yKTZUfrCoHCM
GVLCX99VGKIZpbZ6YJeS4fZ+HJNZzkevvpNHbmlvtBHHsazFFkG/gHicZ3wyy2wK
4045Iicb3f47J11D03zyg3q4T9ob+GhhzMhfqYX6+coPLH6URxSutHaXFJKyE+/E
kz6KzJ8qZZzfkH0hKw1OoBl6w2IweipdcwJtZmrDPkk1hpVlB4FurFm9GHaiH/5i
7YHeYhk/kGgkYR6guiHMXrYXBcnLYSDVlQIDAQABo4IB8zCCAe8wHQYDVR0OBBYE
FBLQLZiwXM8YY8HzPmxNSEAocdV7MB8GA1UdIwQYMBaAFGGZTuk7q+YME+BEh/pc
00/SP8k/MA4GA1UdDwEB/wQEAwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC82LzYxOTk0
RUU5M0JBQkU2MEMxM0UwNDQ4N0ZBNUNEMzRGRDIzRkM5M0YuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9ZWmxPNlR1cjVnd1Q0RVNILWx6VFQ5SV95VDguY2VyMIGK
BggrBgEFBQcBCwR+MHwwegYIKwYBBQUHMAuGbnJzeW5jOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0LzYvMzEzODM1MmUzMjM0MzEyZTMx
MzUzMDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM2MzAzNTM0Mzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAG58ZYwDQYJKoZIhvcNAQELBQADggEBAHHVTjBk9jUySxjgN0so4FrhVmdwostE
GU7I41GUBOHuvGj1H5FWjA3WuSNoEELuOjJ5PhE8BnMkMFzOnWdPmrPLL42+esof
8Wl1ta5bRH1CPkQF5H/3GAbVraFbtTL9rpSH0k1uBbE16sXswpbOzC7AjC+Lq6of
TeFK3nAQMEIHa2JZCNXfUPMqlyFPj7CEkHlbEiEAturVKGAEImYyN+r/BGfx5L9d
lHc1XeQKrVuX+bpz0z1wg4evNHlqiIvQdCpUach+6OmKefK65ktxtfmWQN0FLRyR
7f2O45kB97tkyAnVpCM2ar24yiKM0wDaEYFedH0wccFe2jGQ8/AE71U=
-----END CERTIFICATE-----