Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/12/3135322e38392e38382e302f32322d3234203d3e203631333137.roa
File:                     3135322e38392e38382e302f32322d3234203d3e203631333137.roa (raw, json)
Hash identifier:          CTZamXL9TNbBKgIoC3fjvauwtx7ikUgXB24nhWT3Nhg=
Subject key identifier:   4E:0D:3D:05:42:6B:3D:E4:21:2C:B0:32:35:6C:E2:47:48:70:F1:FC
Certificate issuer:       /CN=170584c3c22a791b9369e669afe83ce83dacc0ea
Certificate serial:       2F810256516AB75C6B03CBE8237A6B6883203E
Authority key identifier: 17:05:84:C3:C2:2A:79:1B:93:69:E6:69:AF:E8:3C:E8:3D:AC:C0:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FwWEw8IqeRuTaeZpr-g86D2swOo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/12/3135322e38392e38382e302f32322d3234203d3e203631333137.roa
Signing time:             Fri 27 Nov 2020 15:10:25 +0000
ROA not before:           Fri 27 Nov 2020 15:05:25 +0000
ROA not after:            Fri 26 Nov 2021 15:10:25 +0000
asID:                     61317
IP address blocks:        152.89.88.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:81:02:56:51:6a:b7:5c:6b:03:cb:e8:23:7a:6b:68:83:20:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=170584c3c22a791b9369e669afe83ce83dacc0ea
        Validity
            Not Before: Nov 27 15:05:25 2020 GMT
            Not After : Nov 26 15:10:25 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d2:b0:88:6d:a4:ec:54:14:7a:b8:a7:5b:5d:
                    24:45:ab:d5:b5:7b:a2:d8:04:b8:84:86:86:99:aa:
                    5b:3d:dc:58:b3:7b:18:b0:d5:c5:8f:06:79:49:97:
                    ec:92:85:7f:8f:de:f5:36:19:ec:5f:23:55:78:da:
                    35:cc:2a:b8:f7:51:6c:de:cd:97:f2:49:58:65:41:
                    4e:7b:5a:66:50:d1:4e:82:d7:ec:42:e8:0b:b7:60:
                    ff:d8:d6:9f:9e:f5:99:df:f4:68:3f:9f:81:85:76:
                    a8:ab:78:9e:6a:b3:01:19:78:da:60:b3:d9:ac:f2:
                    ca:76:82:6a:c7:c5:7a:40:a5:05:5f:11:ce:b9:59:
                    f6:50:e6:d3:b9:e3:6e:3b:e8:9a:35:85:c7:f5:ab:
                    e0:5b:5f:49:09:eb:c0:c5:1d:99:5a:08:a6:0d:6d:
                    bc:86:80:33:b5:64:17:c4:49:31:74:23:c1:bf:7c:
                    1b:d7:e9:ea:6b:3d:50:a9:c3:d4:b2:dc:96:22:8d:
                    08:7b:80:f1:91:fa:64:91:d2:2d:9a:6e:f4:92:38:
                    a8:8d:b6:40:4f:8a:65:d3:e9:05:10:8d:ff:54:76:
                    43:b4:37:f2:2d:1e:fc:45:d2:02:d1:00:8e:56:5f:
                    5e:9c:32:43:61:cb:b5:8e:43:b2:32:ce:32:44:4d:
                    41:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0D:3D:05:42:6B:3D:E4:21:2C:B0:32:35:6C:E2:47:48:70:F1:FC
            X509v3 Authority Key Identifier:
                keyid:17:05:84:C3:C2:2A:79:1B:93:69:E6:69:AF:E8:3C:E8:3D:AC:C0:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/12/170584C3C22A791B9369E669AFE83CE83DACC0EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwWEw8IqeRuTaeZpr-g86D2swOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/12/3135322e38392e38382e302f32322d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.89.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:cb:78:56:ba:34:6a:87:67:4e:20:c0:52:74:19:c0:d6:9a:
         dc:d1:19:70:5f:80:22:ee:f5:36:b6:50:82:ed:59:58:5a:9f:
         4d:cf:ed:52:c1:b5:e2:91:75:22:32:e6:86:5a:58:27:75:37:
         c4:22:c5:4b:ba:0c:0c:82:54:28:9c:2c:ac:7d:32:71:ea:76:
         0a:13:ab:31:49:9b:17:b8:92:6b:48:90:d2:ac:57:4c:cb:e6:
         46:47:8d:c7:86:24:fe:7a:f8:e7:93:ed:78:19:23:6c:eb:83:
         11:91:e8:48:61:d3:6c:ef:36:5f:cb:78:5e:ea:e2:79:7a:b0:
         3d:8b:1d:5a:a8:a0:2c:94:0f:4a:ff:ea:59:23:cb:46:09:ec:
         eb:01:da:c1:ce:5d:da:b6:68:59:2d:ba:bb:bf:48:1d:73:90:
         98:b4:ea:d8:84:27:e2:97:54:f4:fa:4c:eb:09:0a:0b:58:e0:
         fe:57:16:60:7b:e1:d1:bc:92:b6:1e:5e:bc:7c:30:17:b5:39:
         8a:9e:94:03:5f:df:58:f6:f0:e6:bb:f2:7c:99:1d:55:79:48:
         89:a4:50:e2:f2:6c:0b:e4:a0:56:aa:cb:a6:21:67:14:13:7d:
         57:e6:f0:cc:1c:f4:3a:a5:c4:98:3b:e4:d9:3b:dd:1b:89:cd:
         a6:59:98:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----