Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233352e302f32342d3234203d3e2033333536.roa
File:                     3138352e3138372e3233352e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier:          VWTWBXkKM4GwMFdiTrX6KEzkH8aqCVpoHJNdufuy2+g=
Subject key identifier:   74:68:7B:03:0D:E3:DB:E4:2F:8E:06:C4:33:5D:1B:00:1E:A3:6F:10
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       047461CA72553E2997CB8A39F1C5FB0716232B5F
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233352e302f32342d3234203d3e2033333536.roa
Signing time:             Fri 27 Nov 2020 15:10:13 +0000
ROA not before:           Fri 27 Nov 2020 15:05:13 +0000
ROA not after:            Fri 26 Nov 2021 15:10:13 +0000
asID:                     3356
IP address blocks:        185.187.235.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:74:61:ca:72:55:3e:29:97:cb:8a:39:f1:c5:fb:07:16:23:2b:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Nov 27 15:05:13 2020 GMT
            Not After : Nov 26 15:10:13 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ad:b1:67:15:55:be:42:3b:5c:e6:c1:8c:e3:
                    73:1e:c2:f5:44:b6:46:3c:96:6b:ff:e4:09:a1:cf:
                    a2:41:25:43:bb:28:d3:67:20:d4:c0:9a:7a:68:b0:
                    58:b9:c0:7e:27:aa:69:0e:e8:6f:54:82:68:72:d6:
                    49:c6:1d:18:36:5a:75:4a:09:01:c4:e2:cc:d5:13:
                    bd:09:67:67:68:6e:80:fd:af:d5:b2:72:c0:c5:87:
                    a0:91:17:a4:14:7c:cd:54:ba:51:96:d2:80:9f:8d:
                    25:e0:35:da:55:e2:af:aa:2d:f2:ba:53:b0:aa:91:
                    ef:ca:28:b0:51:99:21:1a:8e:a3:cc:5b:44:64:dd:
                    97:c9:c9:35:d4:a1:01:ac:c0:dd:55:c0:23:da:77:
                    d2:7b:cd:17:14:60:25:77:58:25:d7:17:81:b4:c1:
                    2b:06:67:9d:20:ba:94:3b:47:9d:c2:bb:fa:d3:38:
                    35:60:78:c8:ae:a2:d0:23:89:45:e9:86:6d:fb:02:
                    07:76:1c:44:dc:15:ef:b6:57:b8:72:aa:bd:a2:43:
                    ed:11:4a:64:38:8a:00:42:29:ab:3f:ee:a9:e7:08:
                    4e:34:83:08:7d:04:f9:ea:fd:cd:db:50:60:05:ca:
                    47:30:0a:98:8b:3e:d3:49:f5:93:e7:d1:c6:7c:e0:
                    9a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:68:7B:03:0D:E3:DB:E4:2F:8E:06:C4:33:5D:1B:00:1E:A3:6F:10
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233352e302f32342d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:38:35:dd:81:6d:fa:98:65:ca:a6:2d:c7:5f:17:5c:ca:6c:
         12:57:5d:e4:3a:ba:15:89:fd:52:a3:80:33:58:a0:ad:50:ce:
         98:e0:c2:26:1a:a0:48:07:b4:d1:91:2c:95:01:08:dc:c1:50:
         95:24:7e:cf:06:d8:a6:90:67:b1:2e:bb:17:d7:30:d8:af:9f:
         87:a7:3b:28:23:7f:06:51:2a:59:e4:86:83:5c:53:9d:4f:ac:
         48:e7:80:7c:58:1a:8c:5c:c9:a3:0d:eb:b4:8c:77:60:2f:5a:
         46:42:c8:01:1c:40:3c:35:e7:13:ad:2d:50:4a:e6:f8:a0:58:
         8b:c6:e6:19:fc:80:88:58:39:d8:82:11:89:77:02:52:d3:ae:
         69:0f:5b:7f:12:e5:ab:7f:b6:27:59:cc:66:88:c3:6a:9f:3e:
         19:89:c4:df:10:d1:c3:9a:89:21:b2:e6:20:17:ed:c4:4d:f6:
         6f:ce:f0:6f:5e:b3:0d:58:cb:f0:a7:54:be:07:26:9b:53:bc:
         5b:3f:35:a7:92:bc:04:20:d7:b0:58:82:64:d7:1a:a8:8f:5d:
         41:e3:7d:c0:6c:38:35:14:03:d9:33:b1:2a:3e:6e:e8:06:d9:
         b5:8b:fa:73:dc:86:3f:9f:48:68:d0:ee:75:62:f7:96:d0:91:
         33:a9:56:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----