Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3233362e302f32322d3234203d3e203631333137.roa
File:                     3138352e3230322e3233362e302f32322d3234203d3e203631333137.roa (raw, json)
Hash identifier:          2zT9iZTLoyxqzmheJwOZmiMEU1lrfDk8kLg1FWEFlWM=
Subject key identifier:   70:B8:51:B8:94:7E:6C:15:E7:3D:50:DD:A3:85:1B:81:71:22:E9:17
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       2BE2230202972C511D88D1E2F7916ED9B065FFA1
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3233362e302f32322d3234203d3e203631333137.roa
Signing time:             Fri 27 Nov 2020 15:10:10 +0000
ROA not before:           Fri 27 Nov 2020 15:05:10 +0000
ROA not after:            Fri 26 Nov 2021 15:10:10 +0000
asID:                     61317
IP address blocks:        185.202.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:e2:23:02:02:97:2c:51:1d:88:d1:e2:f7:91:6e:d9:b0:65:ff:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Nov 27 15:05:10 2020 GMT
            Not After : Nov 26 15:10:10 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:40:67:8e:f9:a4:3a:4e:e6:c5:a5:5f:2c:53:
                    f6:52:3a:3c:40:ce:d8:8f:3d:02:32:02:ee:0d:42:
                    02:5d:6a:22:21:14:08:27:8d:3e:0f:ea:4e:56:48:
                    81:06:4e:33:12:d1:97:9e:f5:81:53:ff:d0:f9:4c:
                    8d:18:91:6f:d0:6a:14:e6:f3:e3:51:63:7e:84:9a:
                    0e:3f:6d:63:ec:d2:fd:ab:19:2e:2e:71:71:ac:68:
                    c1:55:a6:e8:5b:72:63:09:7d:c0:62:d0:0b:8d:11:
                    ae:2a:e9:4d:42:68:32:eb:d6:a9:a0:ee:18:e4:3a:
                    0d:32:7d:1d:7a:34:04:00:69:99:f0:92:44:b6:f6:
                    f6:ee:0a:d9:36:09:a7:bd:dd:55:09:98:a5:9c:22:
                    50:af:a1:4d:30:f5:b0:7e:30:fd:e7:aa:8a:5a:08:
                    0a:fb:03:97:ec:3d:7a:dd:f7:f6:46:fc:ba:76:06:
                    0c:26:77:01:90:22:5d:a3:b7:2e:87:aa:f6:16:19:
                    5a:f5:c8:9a:0d:63:50:97:65:23:0b:ee:76:69:b1:
                    41:63:6c:78:7a:ad:1f:b8:d1:df:37:f7:b0:7d:b9:
                    69:7d:3f:e5:f1:9d:26:e7:5d:4a:b9:37:10:5b:d3:
                    2c:d6:a9:25:66:83:c5:5f:f0:d9:62:7a:17:78:88:
                    8f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B8:51:B8:94:7E:6C:15:E7:3D:50:DD:A3:85:1B:81:71:22:E9:17
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3233362e302f32322d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:3a:d2:cb:ba:4f:a6:83:f8:fc:30:95:0b:20:3d:e2:3b:1c:
         17:11:28:30:25:eb:c0:bb:a9:52:68:67:02:cc:6f:c9:2a:24:
         16:d8:38:00:d2:87:bc:c1:b9:c8:a9:0f:de:54:22:0a:c4:d4:
         2d:49:4a:9f:19:d1:66:a9:a5:8d:cd:a9:91:f5:e7:1a:3b:93:
         f4:88:bb:17:54:b1:5d:9c:2c:3b:c0:0d:29:92:9b:7a:3b:e5:
         e7:fa:fb:a6:a5:75:cd:6f:11:57:c2:b9:f8:bc:1b:e5:6f:fe:
         ba:4b:94:8c:75:ed:60:fb:9c:fe:7c:b2:da:92:45:47:09:6d:
         30:f6:5f:53:ce:c0:6a:6a:59:62:7b:e7:3c:7f:78:ff:8b:4d:
         18:ed:19:bc:bd:dd:c6:8b:97:32:17:70:33:99:eb:d8:a7:ea:
         f5:79:03:1e:77:40:85:5f:15:81:d6:b6:0f:1d:0e:99:a0:b0:
         2f:ef:98:9b:9a:5a:ae:25:af:75:0d:08:5a:91:45:61:4f:4d:
         5b:b9:3d:f7:44:7d:53:37:09:7c:49:51:66:30:28:02:40:fe:
         43:7a:9a:fe:35:82:fd:9b:95:6c:bf:a1:20:94:ee:a1:2a:5d:
         fe:c5:21:c5:71:7f:d5:25:ed:5f:c1:2b:52:b2:ce:6e:75:02:
         8f:ab:bb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----