Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3231312e33332e302f32342d3234203d3e20323132373730.roa
File:                     3138352e3231312e33332e302f32342d3234203d3e20323132373730.roa (raw, json)
Hash identifier:          MsxYQFFQfRuObVnLGDx8wSbqX98xQuC5j4ZZcT3hwjo=
Subject key identifier:   E8:C6:8A:73:E4:32:12:08:A4:F0:0B:8C:C5:10:AE:6D:B1:E2:E5:D4
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       5F69643A411214D213A7B95160E97AA5AF882801
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3231312e33332e302f32342d3234203d3e20323132373730.roa
Signing time:             Fri 27 Nov 2020 15:10:42 +0000
ROA not before:           Fri 27 Nov 2020 15:05:42 +0000
ROA not after:            Fri 26 Nov 2021 15:10:42 +0000
asID:                     212770
IP address blocks:        185.211.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:69:64:3a:41:12:14:d2:13:a7:b9:51:60:e9:7a:a5:af:88:28:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Nov 27 15:05:42 2020 GMT
            Not After : Nov 26 15:10:42 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:17:7b:3b:e3:d5:f2:f2:7d:40:ad:d7:34:f2:
                    18:20:b8:57:96:0f:ea:69:a9:a3:2a:e6:62:c5:4a:
                    0a:bf:7f:f3:e6:e2:c3:2b:9d:29:df:0a:96:b5:c7:
                    c2:03:0e:ad:07:46:76:58:78:d3:83:3e:ba:1f:b4:
                    b8:41:92:60:4d:32:bf:76:3f:5e:17:0b:34:41:7f:
                    e2:fc:47:c1:26:e5:9c:6d:ed:e2:76:ea:7a:53:0c:
                    6f:d0:b0:9c:3e:b6:0a:0c:07:03:38:13:72:7d:3f:
                    6b:47:11:8a:91:eb:e1:30:9a:57:18:ee:7d:1c:08:
                    29:66:81:fe:1a:00:cf:bf:6e:28:78:8f:89:a6:14:
                    cd:20:2f:05:1d:b3:81:9a:e9:f0:d3:94:ea:63:a8:
                    50:e2:fa:36:16:b8:8d:7c:b3:b4:b3:f6:07:94:c2:
                    a4:25:65:99:4e:c1:f1:5c:47:c2:f5:56:6e:33:17:
                    78:95:0f:c8:fa:3d:1a:8c:35:77:8d:c7:25:02:10:
                    18:7e:36:d4:5d:fc:5e:8c:86:45:40:f9:b8:70:ea:
                    84:35:8f:16:6a:d5:b7:cc:62:59:a6:a1:23:90:fd:
                    09:c3:e2:fc:05:63:6b:22:fe:d7:48:4d:39:4e:23:
                    1a:41:32:67:cb:3e:b1:87:93:59:1a:cf:3a:6c:b9:
                    e1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C6:8A:73:E4:32:12:08:A4:F0:0B:8C:C5:10:AE:6D:B1:E2:E5:D4
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3231312e33332e302f32342d3234203d3e20323132373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.211.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:50:0b:5c:8b:2d:3d:a6:71:c5:e7:f6:00:2d:3a:0c:10:75:
         ca:ff:de:f4:56:da:4c:08:63:e1:96:84:c5:94:85:30:75:5d:
         0d:d9:0f:38:f3:54:a5:02:65:01:8f:6d:27:d9:9a:14:a6:af:
         81:42:c3:e3:85:24:83:12:e1:71:cd:c0:a0:f2:9c:f9:db:0a:
         c7:95:58:b1:0b:22:ad:e3:3f:5f:6c:46:85:83:fe:df:71:f3:
         86:16:4c:01:12:60:09:34:19:46:61:dd:5f:38:6f:52:d0:1a:
         33:a4:d7:20:71:75:9b:ae:db:9c:ea:42:94:29:43:0a:3e:b6:
         63:f8:6c:59:7f:66:ac:1e:18:0a:78:fc:5e:c0:07:b8:15:9f:
         cf:11:55:c0:95:f2:af:0c:19:96:07:b7:0c:65:c4:66:2b:5b:
         5e:33:c7:69:0b:96:36:88:53:80:ba:aa:5a:57:46:28:64:a8:
         29:84:db:2b:96:64:be:ea:17:cc:b8:ef:9f:43:35:6d:6b:29:
         3b:f3:b4:cd:e1:1d:db:3d:c2:47:ce:1c:77:58:20:e2:e1:2f:
         b7:ba:7b:b6:24:d4:5e:88:6d:0e:ae:c8:0e:37:ed:0b:da:2b:
         2b:89:9f:2d:b6:3a:56:69:15:b7:44:5a:7d:58:39:97:fd:e8:
         1b:da:bd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----