Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138372e3136382e302f32342d3234203d3e20323133303335.roa
File:                     3138352e3138372e3136382e302f32342d3234203d3e20323133303335.roa (raw, json)
Hash identifier:          LW6xTWXebRroQ2cFgz5M329yHW1XPJSqwO9qrs9hbgs=
Subject key identifier:   7D:49:3E:69:D3:79:E6:CA:AC:96:85:8B:03:9A:59:39:EF:F8:99:FA
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       40FB7263ABC93975190D3025FAFD78C88264A2C6
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138372e3136382e302f32342d3234203d3e20323133303335.roa
Signing time:             Fri 27 Nov 2020 15:10:29 +0000
ROA not before:           Fri 27 Nov 2020 15:05:29 +0000
ROA not after:            Fri 26 Nov 2021 15:10:29 +0000
asID:                     213035
IP address blocks:        185.187.168.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:fb:72:63:ab:c9:39:75:19:0d:30:25:fa:fd:78:c8:82:64:a2:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 27 15:05:29 2020 GMT
            Not After : Nov 26 15:10:29 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bd:86:0a:36:9f:e0:62:d0:e8:ec:18:55:cd:
                    04:72:fd:31:c8:e5:30:8e:dc:fc:e7:98:2a:6c:62:
                    d3:eb:71:05:cc:af:4a:0a:6b:2c:62:a4:84:1a:be:
                    4c:a8:a9:73:70:6e:44:b2:50:be:be:04:68:72:47:
                    7d:ce:20:be:54:7f:9c:4c:80:b5:4a:d7:69:a5:c4:
                    38:9b:87:08:11:4e:7f:29:3a:92:6f:e0:f7:77:07:
                    16:79:cc:5b:f2:b2:60:07:ff:6d:f7:cf:57:25:56:
                    b6:4a:fe:45:82:28:7d:f7:c5:38:e9:04:bd:34:6f:
                    59:18:86:63:1f:40:9f:1c:5e:4a:06:82:4f:d6:0c:
                    1f:59:3d:6b:2c:14:df:a8:c7:b9:45:07:e8:51:90:
                    a1:7d:3b:fd:6c:90:da:7d:29:b1:a7:3c:0f:7e:b4:
                    d4:04:0d:9d:ec:b6:59:c7:14:d8:8e:2b:da:d4:a5:
                    0e:26:15:50:f2:12:ea:34:3e:f7:68:2e:d2:ee:6c:
                    23:eb:06:8e:6f:e3:d9:28:2e:cd:40:91:6e:fe:7b:
                    f0:37:89:4e:f7:94:bd:b0:46:64:f4:0b:6e:2a:6a:
                    d0:1d:3f:06:06:cd:b2:da:55:99:a7:c3:aa:4c:fa:
                    5f:b0:b9:45:cb:b4:94:4d:33:0f:a4:e9:63:48:bd:
                    f7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:49:3E:69:D3:79:E6:CA:AC:96:85:8B:03:9A:59:39:EF:F8:99:FA
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138372e3136382e302f32342d3234203d3e20323133303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:b2:19:2b:5e:e3:c5:5a:25:c0:62:fb:d2:ea:7b:b0:87:24:
         d0:61:49:68:42:37:b5:8b:16:92:f5:4a:18:27:4a:cc:eb:62:
         a7:44:ea:e6:0f:22:09:47:50:5d:c4:62:69:4a:ee:a1:f7:75:
         dd:93:a1:01:f9:81:db:34:4f:64:67:a7:b5:e4:26:80:7b:d4:
         99:d5:d7:f0:ff:71:57:59:5d:65:ec:11:3a:d6:a7:c2:3b:a1:
         98:79:ef:e6:e4:70:7c:9a:df:5e:64:d4:59:30:cd:44:73:81:
         6b:a2:45:23:14:50:83:a8:46:e2:e1:b6:53:bf:94:98:e6:fe:
         84:15:61:32:70:66:17:c4:73:10:12:62:aa:60:81:78:3a:e7:
         27:21:b8:c8:04:6f:0b:ec:03:5a:7b:78:08:72:fc:3b:23:ef:
         74:2f:5d:25:90:2c:d0:ca:d6:cb:7c:f6:53:43:7b:bb:ca:09:
         af:ab:9e:c6:9a:d6:a9:88:db:98:e8:7e:f9:5a:94:97:64:73:
         e0:30:e6:9d:11:ef:9f:26:96:77:6a:ec:ff:98:48:b7:94:32:
         73:2f:fb:de:7a:95:ac:02:46:b0:15:bf:90:2a:53:90:02:1f:
         7d:01:9e:b8:58:f4:71:a7:8d:1e:8e:62:77:20:15:40:fa:cf:
         63:0c:55:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----