Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233342e302f32342d3234203d3e203630373231.roa
File:                     3138352e3138372e3233342e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          0Kjtgx7HR4xs3v96NEx48DAp6JCPz02Q51mi26fU7dA=
Subject key identifier:   8A:44:71:F9:A2:CE:51:4F:CA:A0:E1:F9:AD:BF:B5:C0:83:87:4F:63
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       3425CD951C0D0166CFA759CA4B0EBFA96AF4CEF8
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233342e302f32342d3234203d3e203630373231.roa
Signing time:             Fri 27 Nov 2020 15:10:12 +0000
ROA not before:           Fri 27 Nov 2020 15:05:12 +0000
ROA not after:            Fri 26 Nov 2021 15:10:12 +0000
asID:                     60721
IP address blocks:        185.187.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:25:cd:95:1c:0d:01:66:cf:a7:59:ca:4b:0e:bf:a9:6a:f4:ce:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Nov 27 15:05:12 2020 GMT
            Not After : Nov 26 15:10:12 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a2:a2:8b:bb:fe:e5:e9:83:23:cb:0f:ba:dc:
                    dd:24:30:6d:cc:48:f1:54:8c:ff:e4:ea:2d:7b:9c:
                    1f:75:39:ed:80:88:13:e0:c7:f2:91:da:16:da:32:
                    3e:8f:e4:2d:52:9a:a2:a2:a7:d6:c2:5b:a6:1c:c6:
                    94:46:ed:52:a4:5a:93:dc:1a:48:d9:73:fc:9a:fe:
                    b5:13:a1:3c:79:8d:8a:20:82:8d:e7:35:10:f6:54:
                    67:22:63:5f:b2:34:32:ed:b8:4b:28:b1:3d:58:d9:
                    a6:bc:71:66:7f:4d:7c:f5:f8:ff:3f:c0:c7:b1:b4:
                    eb:b8:78:3c:b8:43:cc:7b:5f:20:1e:10:d3:22:07:
                    69:41:8d:79:90:9d:e8:b0:92:bb:d0:bd:e3:fa:db:
                    ee:0d:7e:b2:de:87:f0:b6:53:83:b4:6a:db:1b:28:
                    3a:3b:81:94:88:f3:05:dd:6c:0c:1c:de:d3:b6:52:
                    eb:2d:2f:aa:68:36:c6:84:2a:99:1e:05:8e:1c:bc:
                    f2:11:c1:45:d8:5b:3b:88:ed:84:f9:75:44:63:41:
                    e8:3d:bc:52:57:81:93:67:bd:99:a2:be:57:ed:cc:
                    bc:f6:50:5c:95:3d:d4:08:c7:9d:7a:7b:ec:b9:a8:
                    83:f9:0f:d5:bc:d9:e4:74:8b:f0:7a:80:8c:79:de:
                    42:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:44:71:F9:A2:CE:51:4F:CA:A0:E1:F9:AD:BF:B5:C0:83:87:4F:63
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233342e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:9d:c9:54:3b:fc:fd:88:3d:68:f2:12:59:0b:9f:af:cd:68:
         53:ee:e4:7f:c4:f0:e1:c0:db:f1:6a:e3:fb:ee:72:40:1a:58:
         6b:8d:12:a8:29:8d:b6:4f:64:6c:88:52:74:93:ca:83:34:4e:
         dd:28:f0:e9:f6:b9:05:35:21:9c:ad:46:a2:af:9d:e3:b0:55:
         ff:fb:05:0c:66:03:11:4f:90:a3:20:22:f5:f2:bd:fd:a8:a6:
         2a:2d:64:65:8e:0b:bc:32:cd:8b:aa:15:a5:f0:2d:fa:d8:d9:
         3e:49:19:7c:a2:9c:00:f7:0f:1e:7d:ff:c4:8a:d8:54:34:e5:
         5a:fe:8f:9e:cc:6c:cd:51:1c:bd:1a:a7:76:b5:2c:a6:e5:ae:
         70:fe:c8:74:30:ef:ab:b0:f8:09:89:0f:c8:a6:8a:73:9b:1b:
         cf:70:84:92:43:c5:9c:17:73:dc:18:5b:ea:5d:47:f6:76:10:
         f1:4a:d6:e7:c2:c6:2b:e1:3c:c5:e9:bd:b9:94:4d:bf:88:ce:
         65:f2:19:c4:3c:0a:8c:ac:a8:f7:4b:c0:0b:06:61:ec:21:e0:
         3c:39:26:44:5e:99:4e:04:41:e5:b4:ed:9c:46:28:58:43:9d:
         b6:dc:63:18:dc:b6:46:d3:6d:cf:83:cb:71:90:c2:d4:bb:22:
         58:13:bd:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----