Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3232332e302f32342d3234203d3e20323133303335.roa
File:                     3138352e3230322e3232332e302f32342d3234203d3e20323133303335.roa (raw, json)
Hash identifier:          d83oSsKPPENkRusWhzHZKpkTarCULjjryeYT1OFFG1w=
Subject key identifier:   5F:BB:4D:D6:B8:90:44:32:5F:40:AD:05:33:9C:75:6A:8D:C8:B2:C4
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       52FF54A40A8C995FCB392F4437049D43335E6E7D
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3232332e302f32342d3234203d3e20323133303335.roa
Signing time:             Fri 27 Nov 2020 15:10:16 +0000
ROA not before:           Fri 27 Nov 2020 15:05:16 +0000
ROA not after:            Fri 26 Nov 2021 15:10:16 +0000
asID:                     213035
IP address blocks:        185.202.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ff:54:a4:0a:8c:99:5f:cb:39:2f:44:37:04:9d:43:33:5e:6e:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Nov 27 15:05:16 2020 GMT
            Not After : Nov 26 15:10:16 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3b:b4:f5:37:2c:8b:97:25:51:8b:da:84:b6:
                    bb:ef:e2:27:d6:9d:5f:16:7e:4a:79:02:ed:8a:6b:
                    ee:5f:ea:8b:8f:4d:3e:25:2f:0e:c5:f1:6a:16:2f:
                    7e:8e:eb:7f:a3:18:bd:e1:32:5d:d8:61:39:6b:08:
                    e1:6a:b4:91:ae:74:90:b6:06:79:95:38:da:9a:42:
                    da:c2:2b:b6:1a:ce:a1:0e:74:4a:51:71:f9:a8:30:
                    56:43:77:0e:44:57:2d:06:b8:3f:8e:9f:75:e6:e7:
                    0e:64:dc:b2:34:46:60:aa:26:ae:b7:b0:6b:c3:a0:
                    15:d6:8f:63:11:a4:3e:7c:51:77:27:28:87:74:6e:
                    c1:ec:4f:99:be:b0:75:41:74:1e:2f:11:f1:e1:f4:
                    08:01:64:76:f0:71:f1:f1:f2:c7:a4:c5:0d:29:af:
                    f7:06:f4:28:16:fc:82:ee:ef:64:e9:71:5e:da:d1:
                    2b:d2:9f:60:3a:9d:cb:bc:84:4d:a5:af:c3:f4:d0:
                    17:d7:bb:fa:47:ff:2c:f2:53:ea:10:a0:45:5b:20:
                    19:ef:11:29:15:7e:dc:9e:31:56:6e:78:98:ca:be:
                    db:d5:6f:65:2a:13:c3:46:84:3a:fc:7a:61:ab:c1:
                    3f:99:c5:a0:e8:5d:a8:c5:7d:03:1d:60:e3:6a:de:
                    24:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:BB:4D:D6:B8:90:44:32:5F:40:AD:05:33:9C:75:6A:8D:C8:B2:C4
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3232332e302f32342d3234203d3e20323133303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:31:83:93:35:d5:24:9f:04:35:44:3e:6b:e4:1e:bb:30:0a:
         12:84:f6:53:bf:a8:b6:2d:f8:11:52:c0:4b:4c:1d:6b:79:f8:
         b8:ed:7c:8b:81:d7:f5:d3:0d:64:0d:15:e0:15:63:11:71:ee:
         7f:4e:b8:d8:28:ed:02:a3:3e:1f:83:39:76:30:2e:c5:79:53:
         d7:86:cc:4d:65:58:1d:b7:41:84:d3:cf:df:6c:63:29:f9:99:
         ae:3a:14:c0:aa:0a:91:3c:5e:89:5a:b9:f9:62:93:bd:0c:e9:
         2a:06:0c:fc:c6:e2:72:c6:cf:a6:93:3e:6f:8d:2a:91:af:01:
         6e:49:00:bd:e2:0f:14:61:80:b9:99:73:ef:bf:89:5d:e3:30:
         70:d1:ac:f5:32:8a:26:23:96:b7:e5:9b:e4:19:48:fd:54:1e:
         5c:29:77:7c:84:6b:f8:99:2f:e1:7c:ba:b2:b6:7b:29:0a:82:
         19:50:76:56:1d:c0:7c:f6:4f:7a:d8:2f:1b:c7:d7:9a:18:95:
         4d:e5:95:f1:97:fc:9a:72:69:82:2a:01:45:e1:18:74:c4:cb:
         a3:62:1f:05:b3:f3:77:bc:3a:59:4f:92:8d:9d:cd:27:4a:8d:
         2a:9e:7c:4d:7c:88:11:16:80:8f:03:c3:c0:7c:9f:29:87:7d:
         d8:cb:3f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----