Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139302e3134302e302f32332d3234203d3e203631333137.roa
File:                     3138352e3139302e3134302e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          PI6qQvnSnjyzbYW39niDKOP4Tlw5t+C4WsmAurx5qKU=
Subject key identifier:   69:4F:DA:87:44:18:57:62:C6:13:C2:1A:99:47:8F:8B:8A:14:C9:5E
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       4DEA23CAAB94B1B536A500368A44D4AA0731D777
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139302e3134302e302f32332d3234203d3e203631333137.roa
Signing time:             Fri 27 Nov 2020 15:10:11 +0000
ROA not before:           Fri 27 Nov 2020 15:05:11 +0000
ROA not after:            Fri 26 Nov 2021 15:10:11 +0000
asID:                     61317
IP address blocks:        185.190.140.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:ea:23:ca:ab:94:b1:b5:36:a5:00:36:8a:44:d4:aa:07:31:d7:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Nov 27 15:05:11 2020 GMT
            Not After : Nov 26 15:10:11 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f8:e5:f5:5a:b2:f5:a8:1d:2c:f9:fc:7e:dc:
                    d8:da:71:3a:dd:c3:13:d0:d7:fd:07:84:75:6c:30:
                    09:25:96:ba:a8:b9:67:47:21:41:4c:29:f5:be:29:
                    6a:13:ff:50:58:c7:d2:39:0c:7d:a1:12:c1:35:45:
                    bf:42:9a:5c:c4:04:ed:f6:d3:0b:e3:a8:a3:e5:14:
                    fb:4e:53:24:07:4b:04:27:c4:d8:62:11:b4:8f:e8:
                    eb:e2:95:77:89:3f:71:72:f3:6b:3f:3e:5e:e2:12:
                    4d:40:6c:1f:b7:7f:8b:7b:17:00:dd:a5:81:a6:48:
                    ed:ea:05:ee:88:f2:74:15:ee:3f:fb:15:8d:9d:a1:
                    3c:c8:20:bf:e8:03:aa:5c:79:c2:6a:74:57:3e:9a:
                    dc:9d:e1:d1:41:b9:b5:49:e8:03:20:ec:c5:a2:f5:
                    dc:9b:49:89:da:01:24:aa:66:2c:68:85:62:31:82:
                    4c:0e:5f:cc:92:68:d3:c9:be:23:76:1c:c4:8f:71:
                    da:37:3c:c4:02:90:a9:24:55:14:53:21:31:8b:7e:
                    29:59:4e:c6:ab:5e:29:7f:e7:98:03:f4:e4:32:bd:
                    3e:a2:b0:52:cc:68:84:00:2d:11:22:aa:1f:98:64:
                    29:82:ad:13:5c:51:73:6f:a6:03:3a:60:c8:d6:fc:
                    d2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:4F:DA:87:44:18:57:62:C6:13:C2:1A:99:47:8F:8B:8A:14:C9:5E
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139302e3134302e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.190.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c8:8d:c3:67:f1:61:42:db:5d:9b:f5:21:e6:72:6e:86:45:34:
         8f:8d:ef:a7:67:68:49:f6:75:12:c5:9d:00:cd:43:05:9f:6c:
         3d:29:e3:c0:67:7b:0e:09:42:e1:c0:50:a0:85:09:22:bb:58:
         1b:f6:ef:31:63:b2:e1:50:f7:06:cd:50:f3:79:44:d6:a5:19:
         83:ff:a9:77:86:77:3d:5f:f9:e6:d4:39:7c:02:34:ba:d9:1c:
         6a:56:4c:84:37:81:aa:ec:a7:35:33:10:24:7f:41:1d:16:96:
         8d:68:71:8e:81:87:ca:2c:4c:6a:b4:f8:db:95:4b:0b:aa:53:
         b4:42:55:f6:38:63:f2:40:1e:2b:28:eb:3a:2e:69:da:d4:e0:
         d1:f5:5e:c7:86:55:a9:a4:cc:62:09:bc:aa:d3:00:1c:a1:cd:
         73:1d:c4:39:ff:a7:c6:ac:e1:f0:d2:2e:79:40:70:77:f7:b1:
         07:9b:99:bb:e7:c6:c9:de:6b:39:7d:be:48:ac:70:4d:c5:16:
         3f:67:cb:0b:70:c9:7f:b4:dc:fb:ce:aa:d1:8b:38:75:67:e0:
         6c:e9:0c:5e:ac:22:07:65:5f:6c:cb:70:08:1a:cf:3e:20:11:
         d9:7a:5b:c0:42:c9:f7:97:8a:0c:b2:07:ca:be:e0:b5:21:13:
         36:e6:58:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----