Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139372e3139342e302f32332d3234203d3e2033333536.roa
File:                     3138352e3139372e3139342e302f32332d3234203d3e2033333536.roa (raw, json)
Hash identifier:          raYeQPWG4AUCA7btRs04tFeHwaPtrXKFFYFPfKSoLB8=
Subject key identifier:   DA:2C:2C:9F:0F:04:15:51:27:B7:A0:72:FB:ED:C8:F1:7A:ED:F6:75
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       057CBF72F9EED67A32E63432DA9F97A2C3B54FD2
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139372e3139342e302f32332d3234203d3e2033333536.roa
Signing time:             Fri 27 Nov 2020 15:10:13 +0000
ROA not before:           Fri 27 Nov 2020 15:05:13 +0000
ROA not after:            Fri 26 Nov 2021 15:10:13 +0000
asID:                     3356
IP address blocks:        185.197.194.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:7c:bf:72:f9:ee:d6:7a:32:e6:34:32:da:9f:97:a2:c3:b5:4f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Nov 27 15:05:13 2020 GMT
            Not After : Nov 26 15:10:13 2021 GMT
        Subject: CN=3082010A0282010100B932F78B872490103CF3A68B1C8A3D0D46D676B15AFE152C35CD5CBC84D4337780187A3F4E4166CEA2893ABD7A7723184CB011E0BE645C3C47F0D77568D45667CED2AF4C682923BBE4EC1C47928E19CD2AF45320208B86FFC9A03AF02C8E5FD1CF531A2EB11470A0545513230A32A499DA1EFD1436C19BFC8BC7895B5436798C66003578AF6A3074CD6C8B84A493F061FCD8F647F88B11AF2F17B134172CD90DF9767A41E71FA32F639271886600EB78977EFEA7EEE4611F49D32E1A88D199B22C9B00EC010246C1B5DCCAC69D895DD789E1ED759C1970C94CE021F7C93AF0F38F587B21F5097C64D38917701ADC84966AEB0CD682C953DBA7AADF37A8D93B9D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:32:f7:8b:87:24:90:10:3c:f3:a6:8b:1c:8a:
                    3d:0d:46:d6:76:b1:5a:fe:15:2c:35:cd:5c:bc:84:
                    d4:33:77:80:18:7a:3f:4e:41:66:ce:a2:89:3a:bd:
                    7a:77:23:18:4c:b0:11:e0:be:64:5c:3c:47:f0:d7:
                    75:68:d4:56:67:ce:d2:af:4c:68:29:23:bb:e4:ec:
                    1c:47:92:8e:19:cd:2a:f4:53:20:20:8b:86:ff:c9:
                    a0:3a:f0:2c:8e:5f:d1:cf:53:1a:2e:b1:14:70:a0:
                    54:55:13:23:0a:32:a4:99:da:1e:fd:14:36:c1:9b:
                    fc:8b:c7:89:5b:54:36:79:8c:66:00:35:78:af:6a:
                    30:74:cd:6c:8b:84:a4:93:f0:61:fc:d8:f6:47:f8:
                    8b:11:af:2f:17:b1:34:17:2c:d9:0d:f9:76:7a:41:
                    e7:1f:a3:2f:63:92:71:88:66:00:eb:78:97:7e:fe:
                    a7:ee:e4:61:1f:49:d3:2e:1a:88:d1:99:b2:2c:9b:
                    00:ec:01:02:46:c1:b5:dc:ca:c6:9d:89:5d:d7:89:
                    e1:ed:75:9c:19:70:c9:4c:e0:21:f7:c9:3a:f0:f3:
                    8f:58:7b:21:f5:09:7c:64:d3:89:17:70:1a:dc:84:
                    96:6a:eb:0c:d6:82:c9:53:db:a7:aa:df:37:a8:d9:
                    3b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:2C:2C:9F:0F:04:15:51:27:B7:A0:72:FB:ED:C8:F1:7A:ED:F6:75
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139372e3139342e302f32332d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.197.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:42:af:f5:b1:b5:5b:b1:b5:24:50:ca:fc:db:4f:b3:db:fa:
         9f:43:22:c1:79:df:06:e8:26:4d:25:74:f4:9c:98:6d:73:f7:
         8d:2a:ba:95:06:5c:f9:c9:71:78:e8:cb:f9:ae:a0:2d:3b:d2:
         82:27:be:86:f6:e6:fa:3c:bf:69:45:61:bc:fb:f5:60:8c:12:
         2d:2c:ae:06:32:b4:7c:3b:0e:76:9a:50:f5:55:8d:f1:4d:91:
         9c:8e:38:c9:84:c6:9d:c9:4b:bc:a4:60:49:be:1e:1c:d4:d7:
         ac:f9:75:7d:ed:39:17:28:25:e2:e8:ef:f2:e5:c8:58:32:b8:
         a1:34:3b:ce:62:24:7d:b7:07:13:99:64:16:ea:63:6a:a9:8f:
         87:77:fe:90:4e:9a:6b:f7:c7:f6:19:7d:a2:ea:71:0f:f2:47:
         7b:a6:f1:07:28:bc:31:01:e3:42:4a:26:32:62:f3:c2:19:89:
         70:ed:b5:24:57:4b:03:12:6c:49:74:af:6e:3d:29:38:bc:5e:
         be:e6:0b:be:66:42:a0:1b:b6:f2:ea:d8:38:1a:c0:86:0d:27:
         4f:b1:bd:62:33:fd:cf:ea:42:4c:d3:a5:15:61:e7:dd:9a:38:
         96:fc:d1:ed:85:3c:28:5f:7b:c9:62:1d:f8:0c:d5:88:74:e4:
         86:d2:5d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----