Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138372e3136392e302f32342d3234203d3e20323133303336.roa
File:                     3138352e3138372e3136392e302f32342d3234203d3e20323133303336.roa (raw, json)
Hash identifier:          0ZFSDxP5CfP4Wp4QSdGgp2OBmkZzHIqed9M3Nh2qU5Q=
Subject key identifier:   FF:E2:D1:47:1E:9B:AB:8E:88:4E:45:F1:90:E2:1D:41:1C:E9:F6:BF
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       26329CEB3D72A573B9F86D4515EBD2FE25113373
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138372e3136392e302f32342d3234203d3e20323133303336.roa
Signing time:             Mon 15 Feb 2021 11:17:46 +0000
ROA not before:           Mon 15 Feb 2021 11:12:46 +0000
ROA not after:            Mon 14 Feb 2022 11:17:46 +0000
asID:                     213036
IP address blocks:        185.187.169.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:32:9c:eb:3d:72:a5:73:b9:f8:6d:45:15:eb:d2:fe:25:11:33:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Feb 15 11:12:46 2021 GMT
            Not After : Feb 14 11:17:46 2022 GMT
        Subject: CN=3082010A0282010100B37E6725BDDFFEDF30F985D696E7518AE2A14F515B4AD8445B02F41B5E6EDBADF33660AA217704748378BBFF53A1BE4F39D3C6FD7E96690FE668F8C1977C4BE529F47021BED15601495CA3FB9134050E950AA5533E179653C69C387566F4D08258048EC08A94E118FF67F4F028161F6345FB105F74AE7476422802DD484CD9DE97F03BF3B4D51E64BD68495DCC05D7B8113293D1B63A957DFBD5148D224AAB1100D21FA77C49673663F35569ED4B7B101D898812354B8FF9C912251B47197B446132F9503D761087991DFC56070CE19DA1A2E952ABAA7A974AF9816B61B1D0391870D810A6B59E8564CEAC13057A7423EF3196BE7BF36B1D9EC8D87506A40A6F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7e:67:25:bd:df:fe:df:30:f9:85:d6:96:e7:
                    51:8a:e2:a1:4f:51:5b:4a:d8:44:5b:02:f4:1b:5e:
                    6e:db:ad:f3:36:60:aa:21:77:04:74:83:78:bb:ff:
                    53:a1:be:4f:39:d3:c6:fd:7e:96:69:0f:e6:68:f8:
                    c1:97:7c:4b:e5:29:f4:70:21:be:d1:56:01:49:5c:
                    a3:fb:91:34:05:0e:95:0a:a5:53:3e:17:96:53:c6:
                    9c:38:75:66:f4:d0:82:58:04:8e:c0:8a:94:e1:18:
                    ff:67:f4:f0:28:16:1f:63:45:fb:10:5f:74:ae:74:
                    76:42:28:02:dd:48:4c:d9:de:97:f0:3b:f3:b4:d5:
                    1e:64:bd:68:49:5d:cc:05:d7:b8:11:32:93:d1:b6:
                    3a:95:7d:fb:d5:14:8d:22:4a:ab:11:00:d2:1f:a7:
                    7c:49:67:36:63:f3:55:69:ed:4b:7b:10:1d:89:88:
                    12:35:4b:8f:f9:c9:12:25:1b:47:19:7b:44:61:32:
                    f9:50:3d:76:10:87:99:1d:fc:56:07:0c:e1:9d:a1:
                    a2:e9:52:ab:aa:7a:97:4a:f9:81:6b:61:b1:d0:39:
                    18:70:d8:10:a6:b5:9e:85:64:ce:ac:13:05:7a:74:
                    23:ef:31:96:be:7b:f3:6b:1d:9e:c8:d8:75:06:a4:
                    0a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E2:D1:47:1E:9B:AB:8E:88:4E:45:F1:90:E2:1D:41:1C:E9:F6:BF
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138372e3136392e302f32342d3234203d3e20323133303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:14:78:23:59:62:2a:9a:11:89:f2:3e:97:b6:58:66:63:98:
         74:07:8a:76:8b:ab:ce:e1:22:f8:20:1f:de:05:71:61:3b:0e:
         0e:5a:e7:2f:30:41:d2:b6:5b:f1:85:68:42:4a:9f:b8:8a:54:
         99:bf:ab:e2:3b:e9:8f:4b:d3:86:e6:2c:df:7f:03:3f:57:fc:
         f3:83:97:fc:e3:a3:87:ec:31:e0:e5:a4:79:a8:77:29:11:d1:
         cd:8a:79:af:dd:d2:c1:e3:fc:50:86:ef:0d:94:b9:b1:23:7d:
         2b:04:fc:72:b2:05:b2:79:b7:ab:a5:db:08:18:b7:14:ed:37:
         2b:04:c9:2b:12:b3:58:f5:d6:eb:12:2f:5e:a5:0f:b2:99:e1:
         91:e4:98:77:1e:db:38:2a:44:34:aa:c5:6f:a1:ca:88:56:22:
         05:54:90:41:68:a3:ae:af:bd:98:2b:1d:81:10:5e:e7:ce:5b:
         b1:aa:29:3a:25:97:0e:04:e4:f0:9d:e3:08:b9:ab:f6:9a:ef:
         80:86:d7:d1:6d:25:d7:37:b7:87:ba:57:42:0d:73:dd:62:56:
         27:91:d8:d1:c5:92:53:b3:b7:af:2d:75:b6:e6:ec:bb:1b:5e:
         3a:4d:51:4d:af:31:16:fd:08:47:ed:a0:19:d2:05:3c:b7:40:
         3f:ce:cd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----