Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230382e3230352e302f32342d3234203d3e203631333137.roa
File:                     3138352e3230382e3230352e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          xfKpVUQdb/Vpe/ijNQa+dOovILGFq4RJW+PImUpMsZU=
Subject key identifier:   D6:CD:4B:F7:9B:9A:A4:62:D1:AC:2D:E7:32:28:56:16:AE:F5:A4:F8
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       6EB013F2C522669DFDBE76E99BF355390526752D
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230382e3230352e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 27 Nov 2020 15:10:41 +0000
ROA not before:           Fri 27 Nov 2020 15:05:41 +0000
ROA not after:            Fri 26 Nov 2021 15:10:41 +0000
asID:                     61317
IP address blocks:        185.208.205.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b0:13:f2:c5:22:66:9d:fd:be:76:e9:9b:f3:55:39:05:26:75:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 27 15:05:41 2020 GMT
            Not After : Nov 26 15:10:41 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:93:9c:26:e1:12:61:56:00:4e:4c:91:35:b7:
                    68:60:8b:8d:4f:58:48:6a:c3:35:d4:f3:03:17:b1:
                    b6:cb:c4:4e:c8:41:e3:3a:cc:35:4e:bd:46:cc:7a:
                    41:a8:98:67:f7:9c:60:95:61:32:f0:3a:a6:0e:57:
                    1d:23:50:ee:83:f1:b1:ba:97:8d:73:e7:fa:42:0a:
                    9a:ae:f1:d4:2e:45:34:e2:de:62:52:3c:44:74:89:
                    8b:21:8a:7f:5f:48:e0:ef:11:fe:c4:27:58:da:e5:
                    1d:ca:05:36:f1:0d:f8:8e:13:17:41:60:59:e9:8f:
                    69:40:82:f8:fe:01:9b:f1:ea:b1:d3:ac:51:19:50:
                    c0:fc:a9:82:8f:83:5e:1a:f0:32:d3:62:d5:3e:c1:
                    8c:6d:55:ad:41:e4:f6:75:05:e0:cf:22:82:cb:d6:
                    65:3a:bc:e5:83:af:68:c2:c1:5a:b7:bd:dd:b2:d0:
                    3b:e2:0a:11:8e:9a:5a:6d:7a:b4:e6:b4:fa:03:b7:
                    a3:35:48:30:90:71:97:5e:ea:9e:0b:f4:22:fc:f1:
                    4f:b0:e5:9d:13:3f:81:99:80:b6:b9:2c:69:38:67:
                    6d:6b:45:da:18:39:b2:99:58:dd:36:e9:58:3c:d9:
                    cf:5b:7a:96:71:93:57:65:ca:ee:72:98:66:38:65:
                    f7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:CD:4B:F7:9B:9A:A4:62:D1:AC:2D:E7:32:28:56:16:AE:F5:A4:F8
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230382e3230352e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.208.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:7f:aa:69:97:f5:df:9a:0e:c3:95:a1:c4:49:7b:94:25:27:
         0d:6a:60:93:5e:b4:99:63:96:a2:b9:5e:3d:ec:6a:13:21:22:
         5f:78:62:9f:c5:81:a0:6f:9e:1f:77:56:b8:a6:1e:b4:84:42:
         d2:72:f6:55:e7:b8:f1:05:31:04:f0:7a:52:bb:cd:d7:16:e6:
         6c:6b:c6:34:c1:4d:b7:d1:df:78:99:b2:5f:89:99:33:fe:8a:
         2b:a6:04:ef:55:bd:e2:ca:38:45:0d:6f:78:2b:26:99:d1:11:
         d2:00:40:e1:ae:03:47:57:93:b5:3f:ed:37:3b:a4:49:9f:e2:
         8f:c4:b7:77:d1:33:84:81:a3:f3:dc:fd:5b:eb:12:eb:53:58:
         76:b9:04:1f:9d:6e:1f:f4:9d:84:85:18:26:e7:0e:87:b6:ba:
         fd:3f:1b:3e:a0:dd:f8:5c:3d:51:e7:dc:61:8f:b9:d5:46:cc:
         1a:70:ed:5a:44:98:e8:78:ca:fe:1d:78:30:da:18:d6:b2:8b:
         1b:82:81:74:b8:ec:c9:04:6a:58:87:34:97:eb:4c:6b:b8:e4:
         2c:25:70:d0:68:94:e8:4d:ee:28:96:47:e2:ae:80:5a:3d:1a:
         d8:8a:33:d3:51:15:4d:b9:18:f1:2c:50:a5:fe:b4:1b:a7:9b:
         d1:67:67:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----