Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/38332e3137312e3234382e302f32322d3232203d3e2033333536.roa
File:                     38332e3137312e3234382e302f32322d3232203d3e2033333536.roa (raw, json)
Hash identifier:          twWKgT3gz/dZybrroV1O0ZUf01k4KT8GJ4kj/+xYwws=
Subject key identifier:   62:E5:6E:F8:F7:55:C9:8A:DD:F2:BD:27:04:A6:B5:42:09:C9:7D:F8
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       7B07E1696A2EA30FD8E70C88B5361D4A633A1279
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/38332e3137312e3234382e302f32322d3232203d3e2033333536.roa
Signing time:             Fri 27 Nov 2020 15:10:28 +0000
ROA not before:           Fri 27 Nov 2020 15:05:28 +0000
ROA not after:            Fri 26 Nov 2021 15:10:28 +0000
asID:                     3356
IP address blocks:        83.171.248.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:07:e1:69:6a:2e:a3:0f:d8:e7:0c:88:b5:36:1d:4a:63:3a:12:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Nov 27 15:05:28 2020 GMT
            Not After : Nov 26 15:10:28 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cb:4a:91:4e:5b:4b:56:62:96:29:30:22:d5:
                    0a:13:79:c5:f1:21:9d:8d:43:11:b2:e5:82:11:2c:
                    dd:71:9a:e5:12:58:5c:bb:cd:36:2e:e1:ce:4b:d7:
                    a4:d4:5d:c1:ca:1d:05:f4:16:46:ee:6d:6b:89:ef:
                    0e:ee:39:da:7c:27:0c:f1:94:18:a1:6e:7b:d8:f8:
                    6d:b4:2d:98:9d:5a:7f:7b:9e:43:ac:39:c2:cb:c0:
                    4f:92:91:88:11:25:59:c9:4e:2a:c3:3b:42:3e:bd:
                    aa:21:c5:b0:71:3b:e4:ed:22:43:09:31:ea:ee:a6:
                    03:53:56:a3:aa:d7:fc:d0:92:2c:49:59:1b:85:d7:
                    ee:c3:36:0f:58:79:ee:ef:ae:b9:bd:2d:3c:57:b8:
                    c3:0e:e2:c6:d7:03:a3:75:99:27:e2:ea:f9:93:b1:
                    18:b1:0f:3c:0c:b7:e6:38:7b:6c:42:f5:0e:b8:28:
                    26:e4:d4:54:87:9b:69:70:99:14:ee:80:d3:0a:78:
                    77:b3:69:4b:89:3b:f5:c2:4f:03:69:e8:7a:54:5e:
                    c3:2c:b2:48:b5:62:31:98:5c:6c:a3:4c:1a:4b:9c:
                    43:56:07:db:c5:60:67:62:e3:7d:20:54:ce:a3:ef:
                    47:32:3f:94:d1:85:31:8b:ec:b6:75:1b:1d:e6:b7:
                    15:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E5:6E:F8:F7:55:C9:8A:DD:F2:BD:27:04:A6:B5:42:09:C9:7D:F8
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/38332e3137312e3234382e302f32322d3232203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.171.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:b7:30:2d:ad:c3:74:f3:03:e5:76:14:8a:de:bc:bb:ba:25:
         cf:7b:98:82:e3:8d:b4:d3:2c:e8:57:cb:86:7c:ad:a3:0f:16:
         64:c8:85:75:82:99:80:cb:95:67:ca:ea:38:79:40:3a:cf:fb:
         cb:e4:5d:d2:83:22:6b:67:d4:ab:50:54:e8:b2:d3:d1:d7:aa:
         5a:af:c2:61:2d:2f:f6:57:48:42:ec:e1:42:2c:db:8c:6d:c5:
         e6:c0:03:06:91:1c:74:7f:ad:b1:be:4b:17:f7:88:46:df:54:
         b1:eb:42:2b:84:2d:e6:64:78:58:dd:cd:1c:e5:0c:c4:db:ae:
         4c:9a:d5:b7:7b:aa:87:1c:27:d7:f0:02:9a:0f:cc:1c:98:11:
         b3:a4:54:92:0e:32:39:ee:76:bc:b0:7e:94:7a:7e:40:85:cc:
         e2:c4:b7:a3:84:ba:cd:4f:61:7d:22:b6:0f:63:e5:53:91:08:
         39:66:df:ac:88:58:2c:e0:ae:4f:f1:f3:91:47:ae:a6:d7:c2:
         1b:44:77:04:52:ec:ce:ec:12:43:f1:13:b5:1c:d2:42:34:8b:
         15:53:8e:42:82:83:d3:e8:83:1e:e1:65:75:90:92:4f:01:08:
         f9:6b:d7:63:e6:6d:af:5e:62:b2:fc:41:08:12:e8:f5:95:a7:
         54:67:11:67
-----BEGIN CERTIFICATE-----
MIIG4TCCBcmgAwIBAgIUewfhaWouow/Y5wyItTYdSmM6EnkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWU3OTNiNWMxMjM5MjMxZTA4ZGVkZDZmYjgwNjA3MzJj
ZDA2M2Y0ZDAeFw0yMDExMjcxNTA1MjhaFw0yMTExMjYxNTEwMjhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUZDQjRBOTE0RTVCNEI1NjYy
OTYyOTMwMjJENTBBMTM3OUM1RjEyMTlEOEQ0MzExQjJFNTgyMTEyQ0RENzE5QUU1
MTI1ODVDQkJDRDM2MkVFMUNFNEJEN0E0RDQ1REMxQ0ExRDA1RjQxNjQ2RUU2RDZC
ODlFRjBFRUUzOURBN0MyNzBDRjE5NDE4QTE2RTdCRDhGODZEQjQyRDk4OUQ1QTdG
N0I5RTQzQUMzOUMyQ0JDMDRGOTI5MTg4MTEyNTU5Qzk0RTJBQzMzQjQyM0VCREFB
MjFDNUIwNzEzQkU0RUQyMjQzMDkzMUVBRUVBNjAzNTM1NkEzQUFEN0ZDRDA5MjJD
NDk1OTFCODVEN0VFQzMzNjBGNTg3OUVFRUZBRUI5QkQyRDNDNTdCOEMzMEVFMkM2
RDcwM0EzNzU5OTI3RTJFQUY5OTNCMTE4QjEwRjNDMENCN0U2Mzg3QjZDNDJGNTBF
QjgyODI2RTRENDU0ODc5QjY5NzA5OTE0RUU4MEQzMEE3ODc3QjM2OTRCODkzQkY1
QzI0RjAzNjlFODdBNTQ1RUMzMkNCMjQ4QjU2MjMxOTg1QzZDQTM0QzFBNEI5QzQz
NTYwN0RCQzU2MDY3NjJFMzdEMjA1NENFQTNFRjQ3MzIzRjk0RDE4NTMxOEJFQ0I2
NzUxQjFERTZCNzE1MUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAr8tKkU5bS1ZilikwItUKE3nF8SGdjUMRsuWCESzdcZrlElhcu802
LuHOS9ek1F3Byh0F9BZG7m1rie8O7jnafCcM8ZQYoW572PhttC2YnVp/e55DrDnC
y8BPkpGIESVZyU4qwztCPr2qIcWwcTvk7SJDCTHq7qYDU1ajqtf80JIsSVkbhdfu
wzYPWHnu7665vS08V7jDDuLG1wOjdZkn4ur5k7EYsQ88DLfmOHtsQvUOuCgm5NRU
h5tpcJkU7oDTCnh3s2lLiTv1wk8Daeh6VF7DLLJItWIxmFxso0waS5xDVgfbxWBn
YuN9IFTOo+9HMj+U0YUxi+y2dRsd5rcVHQIDAQABo4IB7zCCAeswHQYDVR0OBBYE
FGLlbvj3VcmK3fK9JwSmtUIJyX34MB8GA1UdIwQYMBaAFB55O1wSOSMeCN7db7gG
BzLNBj9NMA4GA1UdDwEB/wQEAwIHgDBvBgNVHR8EaDBmMGSgYqBghl5yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC84LzFFNzkz
QjVDMTIzOTIzMUUwOERFREQ2RkI4MDYwNzMyQ0QwNjNGNEQuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9Ibms3WEJJNUl4NEkzdDF2dUFZSE1zMEdQMDAuY2VyMIGG
BggrBgEFBQcBCwR6MHgwdgYIKwYBBQUHMAuGanJzeW5jOi8vcnBraTEudGVycmF0
cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0LzgvMzgzMzJlMzEzNzMxMmUzMjM0
MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMzMzMzUzNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlOr
+DANBgkqhkiG9w0BAQsFAAOCAQEAHLcwLa3DdPMD5XYUit68u7olz3uYguONtNMs
6FfLhnytow8WZMiFdYKZgMuVZ8rqOHlAOs/7y+Rd0oMia2fUq1BU6LLT0deqWq/C
YS0v9ldIQuzhQizbjG3F5sADBpEcdH+tsb5LF/eIRt9UsetCK4Qt5mR4WN3NHOUM
xNuuTJrVt3uqhxwn1/ACmg/MHJgRs6RUkg4yOe52vLB+lHp+QIXM4sS3o4S6zU9h
fSK2D2PlU5EIOWbfrIhYLOCuT/HzkUeuptfCG0R3BFLszuwSQ/ETtRzSQjSLFVOO
QoKD0+iDHuFldZCSTwEI+WvXY+Ztr15isvxBCBLo9ZWnVGcRZw==
-----END CERTIFICATE-----