Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230352e3234362e302f32342d3234203d3e203631333137.roa
File:                     3138352e3230352e3234362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          wzm9MOHooFtwUodPujzE5QoTPM5y6el4O7oQVaTBto0=
Subject key identifier:   ED:3F:DB:5A:B7:51:BA:46:7A:1F:FB:28:2A:37:1D:2F:2E:66:BE:A6
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       5CF68CBA4A615B9C7294E7C7013D48AA2264B388
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230352e3234362e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 29 Oct 2021 16:00:11 +0000
ROA not before:           Fri 29 Oct 2021 15:55:11 +0000
ROA not after:            Fri 28 Oct 2022 16:00:11 +0000
asID:                     61317
IP address blocks:        185.205.246.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f6:8c:ba:4a:61:5b:9c:72:94:e7:c7:01:3d:48:aa:22:64:b3:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 29 15:55:11 2021 GMT
            Not After : Oct 28 16:00:11 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0d:81:8b:81:5c:ad:01:2c:0d:9f:24:d1:dd:
                    6d:db:85:d7:91:b6:28:98:4b:88:1c:29:7a:26:88:
                    b5:b0:1a:d6:6f:e8:f1:94:83:d1:d7:11:87:3f:58:
                    9c:5b:a7:f8:5a:ab:85:4a:44:6a:4b:45:0a:3b:4e:
                    a6:ef:8d:44:3c:b4:45:6d:e8:ed:f2:0a:91:99:38:
                    5d:80:c0:17:04:8f:ef:e5:f2:b9:3b:0c:b0:3c:bf:
                    a9:8d:51:3b:4c:f0:6f:6d:a7:72:8d:24:4f:1e:a5:
                    62:d8:e0:1b:20:96:94:d3:49:d0:87:1d:85:be:74:
                    9f:c2:b6:2e:75:21:2a:78:bd:a1:a7:7f:d5:3d:ba:
                    27:1a:d8:2a:42:29:ab:af:07:9a:3b:8c:5a:41:a3:
                    f9:b3:a3:46:25:42:e1:85:77:49:49:0d:9c:2f:9b:
                    63:a0:59:72:c0:b7:51:a6:fc:11:85:ae:c6:96:c4:
                    f0:32:c6:2f:b4:9e:c5:ea:a6:53:07:d9:9a:01:65:
                    f8:3c:05:c5:30:7b:fe:49:51:b7:e2:82:04:a1:6d:
                    57:d2:0c:4c:97:71:13:3f:9d:c3:83:7e:e1:05:90:
                    c1:23:65:bb:0d:1e:d2:54:74:ee:6c:7e:0f:57:d3:
                    77:fe:64:8d:c6:62:e8:6d:02:d1:0d:d6:5f:07:5c:
                    d1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3F:DB:5A:B7:51:BA:46:7A:1F:FB:28:2A:37:1D:2F:2E:66:BE:A6
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230352e3234362e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.205.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:4a:9d:b1:a5:f5:f0:96:88:38:e5:44:7d:d1:08:3a:b6:d8:
         ca:b1:9d:3d:8a:7d:04:4b:88:1b:c9:82:20:25:98:11:3e:d6:
         da:86:6c:51:d3:6f:b1:6f:f6:16:c1:f7:01:83:35:d0:22:8d:
         03:20:37:3b:2e:56:0b:7d:96:df:33:c5:48:fe:ce:2d:84:38:
         77:e4:c6:78:99:5d:9f:13:e5:a8:db:e5:12:30:47:86:e8:ca:
         64:58:fb:c1:d4:67:32:9b:e3:b0:6b:83:5b:8c:d7:fe:68:2a:
         d5:70:fc:56:06:eb:0f:07:da:2f:c0:5b:60:4e:d6:46:3d:48:
         08:39:d1:d3:52:f7:fe:44:02:b2:5a:08:02:84:22:f0:37:6c:
         27:2b:a2:ee:90:39:95:62:75:bc:1c:d4:86:b6:3d:53:2e:88:
         9f:8f:e8:c6:bc:d3:ea:2c:b0:d6:6d:5f:3b:24:40:e8:b4:7a:
         0e:1b:86:4c:cf:c1:14:e7:a9:bd:0c:5b:7e:7f:8e:76:3c:cf:
         02:40:70:a0:9c:e9:ab:2b:58:0e:ca:e2:f5:b3:9b:dd:bb:ee:
         3e:43:80:2f:27:a4:a9:30:d7:ec:1b:83:28:7d:f0:4e:9d:69:
         d3:59:09:36:41:76:a3:2e:ef:da:0b:3e:60:46:6e:aa:bf:e7:
         e5:0c:0b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----