Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230372e3235302e302f32332d3234203d3e203631333137.roa
File:                     3138352e3230372e3235302e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          IRq3UDS/K9RZ20AnpfPPX0rweKVpsxIrgrAU+cAcPbw=
Subject key identifier:   E0:47:C5:22:0C:B4:71:0E:47:C9:9F:93:D8:CF:75:3F:7D:19:A8:D5
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       19AED39D848000295ED1C806DAB60BA3B48BEF7D
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230372e3235302e302f32332d3234203d3e203631333137.roa
Signing time:             Fri 27 Nov 2020 15:10:15 +0000
ROA not before:           Fri 27 Nov 2020 15:05:15 +0000
ROA not after:            Fri 26 Nov 2021 15:10:15 +0000
asID:                     61317
IP address blocks:        185.207.250.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ae:d3:9d:84:80:00:29:5e:d1:c8:06:da:b6:0b:a3:b4:8b:ef:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Nov 27 15:05:15 2020 GMT
            Not After : Nov 26 15:10:15 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ca:33:8e:22:b3:31:af:00:86:0e:66:80:7a:
                    f7:33:49:79:e1:c8:8a:b4:43:47:db:71:ac:be:34:
                    87:ef:7c:55:e1:bd:66:c1:7e:80:6e:df:e7:34:66:
                    28:9d:da:08:6f:6e:58:18:c8:59:d2:a8:5b:06:c0:
                    18:8a:c8:df:bf:00:2a:db:22:e4:61:84:cc:f2:98:
                    59:15:32:d4:80:b3:67:86:ef:20:67:cd:92:f1:f3:
                    8c:52:74:ba:58:d6:5c:61:f1:8c:1a:bd:8a:b1:7a:
                    7b:57:bd:5f:90:0e:08:84:33:0b:05:bd:9c:b7:1c:
                    5f:71:e1:5d:32:21:8a:51:f1:12:9d:7f:e2:70:7a:
                    a2:b2:40:91:97:5a:64:d6:f4:50:73:cd:3c:0a:1c:
                    c0:dc:b8:28:81:fd:3f:77:89:a1:6a:f0:90:31:fa:
                    bd:a5:48:1d:55:6b:d6:e7:4a:1b:7c:80:31:70:20:
                    3e:94:b9:fd:52:0f:be:30:05:f9:bc:24:5f:02:8b:
                    02:75:ae:d8:f3:e8:94:ff:44:94:5c:5a:f3:40:aa:
                    69:4a:4a:b8:a3:d8:1c:1c:14:b3:31:14:66:8f:8c:
                    2c:07:6b:cf:45:89:e0:69:7e:b1:88:b2:9d:0d:08:
                    c7:0d:73:1c:7f:f5:9c:ed:87:1c:ec:cc:1b:3d:cc:
                    72:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:47:C5:22:0C:B4:71:0E:47:C9:9F:93:D8:CF:75:3F:7D:19:A8:D5
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230372e3235302e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.207.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d6:ac:51:d9:39:56:8c:42:69:0c:37:c6:37:83:07:63:f4:64:
         14:7f:9b:bb:3f:2d:de:a9:bc:3b:06:21:cc:34:5f:37:0b:17:
         0d:b8:df:f7:c8:26:3c:54:87:79:9f:6c:98:24:d2:8c:1c:fc:
         cc:84:75:85:e6:c7:9f:60:37:47:19:a2:a4:a0:d4:31:9f:6c:
         1f:24:68:a9:f1:60:83:db:63:42:7e:45:b8:27:34:76:8b:29:
         a7:29:a3:4b:7e:d6:8b:b9:99:6b:3a:08:15:f6:b4:c8:4d:ca:
         c1:88:70:52:8b:12:19:4a:f4:24:2a:6b:a9:96:cf:32:5b:63:
         51:29:0f:c5:c7:dc:0f:2a:31:52:50:43:06:ef:cf:ad:f8:de:
         18:e0:db:be:ed:75:f3:54:8d:60:47:11:78:7b:0c:de:83:3a:
         46:45:a6:19:de:18:14:00:8b:2c:98:d4:6a:2c:dc:02:15:56:
         73:ca:d7:6f:78:ed:67:ae:38:2d:6e:df:8f:fc:b1:6b:50:56:
         55:3c:25:2d:40:f1:c9:f2:e6:38:b4:96:90:d3:93:86:fb:6a:
         63:18:c8:78:8d:32:b9:3c:06:ea:28:33:36:96:f1:22:8c:5a:
         cc:79:44:dd:b1:da:d8:9b:e1:9e:70:31:ab:69:7f:94:22:8c:
         d3:de:a4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----