Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/38352e3230322e38312e302f32342d3234203d3e20323132373836.roa
File:                     38352e3230322e38312e302f32342d3234203d3e20323132373836.roa (raw, json)
Hash identifier:          P/yr7Ksh8n9nBbXgKMx1K04eyRhZX6uH/WrnOvy5FI8=
Subject key identifier:   D2:6E:E2:F4:0E:F3:C0:01:0F:3F:29:8F:D1:FD:B7:EC:A7:E4:7E:C6
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       412BF008E1B6306CB97B1D437C6B91CC59FBF814
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/38352e3230322e38312e302f32342d3234203d3e20323132373836.roa
Signing time:             Fri 29 Oct 2021 16:00:24 +0000
ROA not before:           Fri 29 Oct 2021 15:55:24 +0000
ROA not after:            Fri 28 Oct 2022 16:00:24 +0000
asID:                     212786
IP address blocks:        85.202.81.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:2b:f0:08:e1:b6:30:6c:b9:7b:1d:43:7c:6b:91:cc:59:fb:f8:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 29 15:55:24 2021 GMT
            Not After : Oct 28 16:00:24 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d3:7d:75:28:e4:9f:a7:d1:41:62:15:86:37:
                    05:8d:f8:b4:3a:16:78:f2:6a:ed:50:12:92:66:ad:
                    6d:aa:3b:e1:58:e4:89:bf:6a:0b:91:9b:1c:91:eb:
                    54:f6:d8:8f:b0:74:eb:cf:6c:23:53:a0:70:8a:ac:
                    4c:2c:5b:7a:91:0a:90:44:99:2e:1f:40:bc:ff:0b:
                    a7:8e:d1:17:4a:ba:de:cf:a5:06:38:2f:7b:f7:94:
                    9e:ab:2b:0d:0e:de:e4:8e:92:e0:bd:ae:57:91:b4:
                    51:76:81:8a:74:ad:29:4c:8b:13:2d:8f:89:0f:be:
                    e6:83:7f:d5:d7:79:63:64:e1:fe:e7:8c:fa:35:30:
                    d4:50:4a:ed:90:2d:9c:03:d0:2e:07:2f:d0:5e:3d:
                    68:dd:6f:c6:d8:7e:30:a2:4c:37:a2:c4:b3:bb:0e:
                    49:ea:b5:ee:cb:c7:e6:25:4f:c3:98:4f:19:45:83:
                    45:ed:08:50:ce:7d:49:32:a7:03:91:58:11:44:ae:
                    c9:dc:82:7f:d9:74:87:a5:01:fc:ab:5e:8c:e8:15:
                    6a:c7:f9:88:5d:5a:5f:ec:bf:52:03:00:80:0a:33:
                    e8:c0:54:8f:32:1e:30:10:cb:0b:48:3a:96:3a:74:
                    52:08:5c:de:75:f5:b3:8c:a6:d1:a3:7d:da:13:cb:
                    aa:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:6E:E2:F4:0E:F3:C0:01:0F:3F:29:8F:D1:FD:B7:EC:A7:E4:7E:C6
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/38352e3230322e38312e302f32342d3234203d3e20323132373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.202.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:5d:25:a1:47:65:b6:22:2e:7e:98:28:ff:3f:3c:e8:26:0a:
         99:0e:37:4f:41:1a:3e:09:71:78:8d:14:0b:d1:be:8d:e8:4a:
         7d:17:f9:f7:e3:79:00:75:f8:44:ed:bb:4f:1f:9b:dc:a6:c8:
         8b:88:f9:5c:a5:d1:c1:b1:43:a6:6b:54:d5:93:e7:b9:14:cc:
         86:9e:39:12:fc:8d:cc:4e:ce:5a:2a:7c:0e:60:ff:43:44:c9:
         bd:3d:09:88:c9:8d:d3:d9:2d:5e:d2:07:95:9e:9b:20:fc:ed:
         d9:42:e2:91:5c:8f:65:cb:05:d5:80:cd:59:44:20:16:2c:0e:
         f4:04:a0:f8:db:bb:a9:4c:46:19:c2:6f:c7:dc:ec:20:d6:03:
         46:df:26:ab:84:3e:e6:34:c8:b8:04:0d:dd:2d:0d:f0:78:d5:
         c4:59:38:bf:ca:54:a9:fa:ca:4f:de:22:20:89:24:d7:88:bb:
         2c:57:c8:ee:33:35:bb:7a:69:9e:b4:91:39:89:cb:f4:25:03:
         0e:3c:00:11:8e:ad:0b:9e:6e:ae:30:c6:60:66:f1:30:36:c1:
         61:78:e4:13:af:e3:31:26:4b:1e:0a:f3:ab:6b:a8:2b:42:f1:
         ba:b6:ee:2b:a4:4e:18:a8:b9:d7:bd:85:c6:61:7f:9a:43:50:
         ea:08:a0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----