Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138352e38312e302f32342d3234203d3e20323133303335.roa
File:                     3138352e3138352e38312e302f32342d3234203d3e20323133303335.roa (raw, json)
Hash identifier:          Wm4ENuYYLWJEcx+XAbDRUSkJGQmbNFgPgyCJYaGmPgE=
Subject key identifier:   EB:49:46:3E:E8:74:50:03:E5:43:6A:0B:FF:9F:6F:F7:42:1E:1D:08
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       1BE1998DCFCE926985159FB1ED698F12E5600297
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138352e38312e302f32342d3234203d3e20323133303335.roa
Signing time:             Fri 27 Nov 2020 15:10:37 +0000
ROA not before:           Fri 27 Nov 2020 15:05:37 +0000
ROA not after:            Fri 26 Nov 2021 15:10:37 +0000
asID:                     213035
IP address blocks:        185.185.81.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e1:99:8d:cf:ce:92:69:85:15:9f:b1:ed:69:8f:12:e5:60:02:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 27 15:05:37 2020 GMT
            Not After : Nov 26 15:10:37 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bc:0a:80:a5:da:8e:4c:81:31:65:d5:74:14:
                    a9:f7:75:47:3c:88:d7:66:b8:b3:f0:86:c8:a3:62:
                    cd:ac:76:0f:49:d2:92:16:9a:fa:f2:36:51:1b:7f:
                    34:aa:90:34:18:8c:6d:d3:c3:20:ac:78:45:ad:b7:
                    e0:0a:fc:48:90:19:05:98:4a:5b:ad:64:df:1e:d9:
                    d8:ce:ed:92:3c:29:06:b5:6f:8a:fc:d9:50:07:7a:
                    21:75:55:60:b8:41:e5:45:1a:8d:af:63:12:5d:c9:
                    6a:ad:c5:c6:83:dd:f9:39:4d:c3:5f:50:b7:18:55:
                    62:e3:5d:8b:4a:41:2e:f7:eb:5d:52:f3:13:b8:e9:
                    7e:be:ad:ae:d0:9e:35:02:e9:36:b2:3d:7a:2f:44:
                    e1:68:2d:5d:5a:c9:ad:56:dd:52:f9:5c:70:79:84:
                    07:dc:97:f4:21:47:44:99:d9:f0:b2:f1:47:3e:0a:
                    77:93:78:f5:b7:5d:3a:cb:8e:35:ea:47:bb:f9:85:
                    4f:cc:76:de:8d:df:24:6a:cd:ad:e4:f8:21:07:5d:
                    fe:d6:e8:d0:0e:b7:a2:dc:43:d7:a6:05:b5:1c:48:
                    c8:23:bd:a7:aa:17:f8:21:d2:c6:34:0c:9a:02:39:
                    81:81:7a:a7:88:d2:e2:fe:ea:af:c7:c4:e6:bc:e1:
                    29:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:49:46:3E:E8:74:50:03:E5:43:6A:0B:FF:9F:6F:F7:42:1E:1D:08
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138352e38312e302f32342d3234203d3e20323133303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.185.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:44:e2:0f:78:3a:61:dd:ec:c7:6d:51:01:bb:72:b7:33:5d:
         15:93:a2:f7:fc:52:7e:f3:de:0b:cf:81:60:af:d9:3c:20:65:
         06:0a:1a:e0:d6:45:59:8d:94:5f:85:e7:99:a2:49:dd:9e:96:
         ec:08:67:cf:59:66:04:e2:4c:b5:48:d0:e2:ac:f2:4b:3c:a8:
         f5:f4:fd:ff:52:f6:00:a8:f8:f6:18:eb:a3:c1:c7:24:39:09:
         96:40:0c:66:15:54:3a:32:4e:7b:ea:7b:01:e0:3a:55:dd:d0:
         4a:4b:58:44:d5:62:2c:6b:60:c1:7a:6e:6b:fe:b3:5d:49:06:
         7d:76:ee:60:f8:97:d2:5e:8e:15:f7:be:60:a1:54:6b:da:11:
         4d:fa:47:6e:86:72:b5:c4:22:c7:01:59:c4:c4:b2:42:1e:e8:
         45:2a:51:aa:4e:11:48:7f:6c:a4:52:55:85:b9:eb:c7:2a:1e:
         24:36:1f:e1:6d:a9:72:57:b0:2f:2f:a8:12:9c:e1:14:be:42:
         fe:91:0f:28:45:5a:a3:de:76:5d:54:f2:83:ba:38:9b:27:32:
         e3:ef:b3:e7:12:68:88:df:ef:a2:07:12:e4:69:67:e9:0c:bf:
         e3:66:ca:93:7f:5d:71:c8:8a:47:36:4d:09:60:f7:5d:8e:fc:
         36:f8:87:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----