Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232322e3234322e302f32332d3234203d3e203631333137.roa
File:                     3138352e3232322e3234322e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          dnaXqgX/oLxgVYiLq7eib3vYTmL25MdefRTF2Z7QAc4=
Subject key identifier:   60:D3:88:20:84:AE:91:7F:BF:85:97:64:E4:34:E4:18:C2:65:5C:5D
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       4CC48295F8D6E00084F864AB2B0739F142BF7759
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232322e3234322e302f32332d3234203d3e203631333137.roa
Signing time:             Fri 27 Nov 2020 15:10:10 +0000
ROA not before:           Fri 27 Nov 2020 15:05:10 +0000
ROA not after:            Fri 26 Nov 2021 15:10:10 +0000
asID:                     61317
IP address blocks:        185.222.242.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:c4:82:95:f8:d6:e0:00:84:f8:64:ab:2b:07:39:f1:42:bf:77:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Nov 27 15:05:10 2020 GMT
            Not After : Nov 26 15:10:10 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:1a:90:f8:c4:76:3b:17:6b:d3:16:a5:fd:0e:
                    29:bc:a6:76:0a:33:3e:a8:5b:e6:7b:51:75:77:30:
                    70:f2:bd:b0:b0:a0:d0:31:a9:71:4e:57:dc:aa:57:
                    98:b0:cc:30:3b:46:70:64:81:0d:11:0c:ee:7c:fc:
                    8c:5b:2b:f1:61:3a:15:07:fb:3b:91:8a:5f:5d:99:
                    14:56:04:ba:47:37:a0:21:72:a9:1e:b0:16:4e:1a:
                    ea:45:8f:d4:b4:c1:61:bc:f6:1f:f6:77:3e:88:be:
                    af:df:d8:33:9a:bd:46:a0:0c:0a:c0:c7:60:6b:56:
                    93:b2:bc:4e:78:70:cf:62:e2:c4:71:89:14:d0:9c:
                    c4:12:3f:df:fc:55:8c:a6:1e:3c:75:56:43:b0:a4:
                    3f:91:f0:b8:31:dd:88:56:0c:cb:c5:88:82:11:3f:
                    42:6c:cb:fd:ee:7c:f5:ce:92:b1:84:77:24:b7:18:
                    ef:a1:e4:8b:33:36:c2:5e:36:07:cd:12:34:ca:ed:
                    f8:d1:aa:f4:5b:93:28:34:ac:7d:cd:e8:4c:60:4b:
                    4d:ea:5a:d5:2f:44:49:be:a9:ed:73:6f:e9:f3:f8:
                    a1:aa:0e:46:e2:ad:37:1c:44:93:f0:91:32:c2:4b:
                    b2:67:cb:7f:68:67:ca:22:ba:31:46:20:e7:28:cf:
                    06:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D3:88:20:84:AE:91:7F:BF:85:97:64:E4:34:E4:18:C2:65:5C:5D
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232322e3234322e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.222.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:06:c6:af:1e:78:d5:78:d4:b0:9a:13:65:0d:c3:60:f3:3c:
         0c:12:59:6e:72:1e:3e:c3:47:94:12:b4:df:db:77:44:46:e8:
         b4:d1:e1:d0:3e:23:65:dd:1e:91:0e:e7:8a:e9:c0:fd:25:71:
         ee:4a:f5:da:f7:11:d9:5f:89:ea:a9:e8:8d:4b:c7:ce:e4:dd:
         0a:6d:e7:4c:29:db:26:f4:48:ac:db:75:f7:c4:09:f4:9e:89:
         16:cf:62:24:39:d3:ff:e8:8e:48:20:e5:b1:ca:da:39:e4:d9:
         ac:cf:12:36:e2:2d:96:59:45:5c:ed:c0:4e:48:02:15:d3:85:
         00:c9:59:25:b1:0e:a7:b4:48:57:e7:18:78:90:5c:05:88:eb:
         4c:ae:6e:27:ca:84:eb:bb:56:ec:b3:45:7c:2b:bd:e9:6c:7c:
         1f:0a:fd:54:0c:e9:24:13:f3:64:b4:72:00:ee:ad:5c:a3:02:
         1c:41:b2:c3:e4:b9:45:0b:5d:80:e5:df:94:1f:07:1e:c6:64:
         a1:c4:87:a8:0f:ea:ee:65:1f:6b:d3:91:47:9a:11:bc:00:bb:
         b2:78:4f:4b:d9:99:c2:92:73:35:74:a7:e3:82:06:1c:94:7e:
         de:2b:21:5d:65:91:af:04:49:78:15:b3:8e:82:f5:5e:80:2b:
         f1:36:c5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----