Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138372e3137302e302f32342d3234203d3e203631333137.roa
File:                     3138352e3138372e3137302e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          Z1Yu8nf1HVSStdncu5oKrwUR8RNdCufwyK+ZsEK7xsE=
Subject key identifier:   62:B7:93:33:F1:C5:21:B7:1D:31:36:CF:5E:2B:EF:E9:71:95:95:5E
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       66775E21851A8252D951632E9F07C06DB4E95F63
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138372e3137302e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 29 Oct 2021 16:00:13 +0000
ROA not before:           Fri 29 Oct 2021 15:55:13 +0000
ROA not after:            Fri 28 Oct 2022 16:00:13 +0000
asID:                     61317
IP address blocks:        185.187.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:77:5e:21:85:1a:82:52:d9:51:63:2e:9f:07:c0:6d:b4:e9:5f:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 29 15:55:13 2021 GMT
            Not After : Oct 28 16:00:13 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:80:51:46:ae:35:27:c4:e4:be:a6:57:1e:86:
                    47:f2:6f:dc:8c:79:9e:4b:fa:99:c8:37:71:da:ca:
                    d4:d9:10:3e:d8:ae:b3:06:49:93:75:7f:74:ff:71:
                    77:4e:cd:e0:9a:56:f4:45:58:be:00:69:95:32:55:
                    c3:04:ac:43:cf:35:25:ec:92:b1:a6:69:b1:44:16:
                    e4:22:44:74:b9:b2:82:14:ce:f3:dc:ac:a2:0f:5b:
                    49:8d:18:a4:b8:2f:3e:96:be:25:f7:85:33:1c:97:
                    31:b7:75:19:cc:26:f8:a5:a2:70:bf:4c:68:0e:b3:
                    d7:9e:d1:b8:f6:51:6b:28:3a:33:25:e7:3a:7d:42:
                    d3:8e:88:fd:7f:8a:7a:41:04:f2:d0:93:c8:0f:d6:
                    f0:ab:d0:70:d8:47:87:32:69:2f:22:06:78:59:8a:
                    c9:42:ed:a6:61:c4:fe:0d:b9:ed:ca:dc:51:96:0e:
                    13:d7:7d:ff:e4:e2:79:a6:54:e3:32:6f:52:76:d6:
                    ea:c6:e8:a7:7f:57:7a:51:df:ba:5d:88:26:6e:39:
                    1c:4c:f4:c7:26:f9:82:d2:2f:f2:73:31:fc:cd:7d:
                    de:c7:c4:00:df:a0:c1:73:5b:f8:5c:57:eb:6c:86:
                    16:fa:38:65:6c:27:05:5d:4a:87:ab:e1:01:0c:f7:
                    be:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B7:93:33:F1:C5:21:B7:1D:31:36:CF:5E:2B:EF:E9:71:95:95:5E
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138372e3137302e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:ec:72:a7:8b:47:29:f3:b3:f1:d1:4c:55:2f:4b:20:f4:14:
         d2:ed:76:01:a5:17:1b:4b:bf:e9:3b:8e:f1:53:2d:61:2c:19:
         73:01:9e:33:d9:5c:51:2c:ef:f7:43:68:4e:40:8f:3b:15:44:
         73:ec:75:15:81:b5:02:3f:21:ca:4f:c6:8a:f5:ef:05:99:77:
         d1:c7:17:fc:94:51:5c:66:62:92:9d:c5:5c:91:aa:f8:30:f0:
         5a:7a:2a:cd:b2:68:03:34:72:9b:d8:40:f5:10:a1:6c:05:53:
         7a:8d:93:cb:de:ec:ff:8f:40:55:01:6a:82:65:cb:eb:6a:af:
         9e:7b:84:f9:a2:26:58:2c:d1:e5:8a:2c:0e:9f:8e:f5:3d:aa:
         4d:f9:cd:3d:a0:06:27:e8:3d:08:f9:d3:56:92:f3:a4:bd:5a:
         a3:5c:dd:07:23:e9:14:e8:ee:f6:ac:4a:44:d1:64:bf:12:42:
         ee:01:88:5a:cd:26:a1:10:7c:e2:2c:9b:06:1a:bd:bb:60:37:
         11:25:28:af:8a:2c:d0:ea:ee:0f:1d:6b:a9:c2:54:cd:2f:08:
         4f:99:72:a5:d4:ad:ef:27:35:22:87:72:51:7f:78:0d:f7:ad:
         ff:6f:ea:38:b4:01:ab:e3:79:fa:1d:72:be:8b:61:39:28:a7:
         9e:83:76:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----