Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3233342e36392e302f32342d3234203d3e203631333137.roa
File:                     3138352e3233342e36392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          922GgmvfyRX6MIV67XkZXVF682NHWWBhtj5DrEaFv0k=
Subject key identifier:   62:40:76:6B:5D:3C:6F:DC:D9:5E:3E:13:B3:24:14:E4:4E:78:28:1E
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       474BC9678CC9727AFCB5032439C6B6B8D3BE3F3C
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3233342e36392e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 27 Nov 2020 15:10:15 +0000
ROA not before:           Fri 27 Nov 2020 15:05:15 +0000
ROA not after:            Fri 26 Nov 2021 15:10:15 +0000
asID:                     61317
IP address blocks:        185.234.69.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:4b:c9:67:8c:c9:72:7a:fc:b5:03:24:39:c6:b6:b8:d3:be:3f:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Nov 27 15:05:15 2020 GMT
            Not After : Nov 26 15:10:15 2021 GMT
        Subject: CN=3082010A0282010100EAFC233F20CF174912A8AD4A4FE09FF299FEF15EE9299FDB530E56D0554AFE1C9CDD91FE83B3BB7BA0B0A69712959B71A579815753838F7663FA2914717B11E3EC0C80C66B5B89753F5897768E44A88C121B270B567FE5D1A5A077AF3A4B7309555545704D80E1122CD99AAA4209BC76F0FA0F2E8C9D6F106000F6361C80B7E1533285D577B5565BA0FDFE6F4F0337FF396D8FFCD3E70BFC11034CF97BA81DE1FB8B0B9398E4C9FDEA18DF831062DFCCFC8DF4BE9C90355A49FBBACA1AA388B7C0AC516F7D6453873198B46CF7A51FAF03F4F722DC5C51F3D8019AE7FDCEECD6DA49157B81FE038BB8AF1926BA9CD1420E177AF7278EC606D466840A52EF80550203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fc:23:3f:20:cf:17:49:12:a8:ad:4a:4f:e0:
                    9f:f2:99:fe:f1:5e:e9:29:9f:db:53:0e:56:d0:55:
                    4a:fe:1c:9c:dd:91:fe:83:b3:bb:7b:a0:b0:a6:97:
                    12:95:9b:71:a5:79:81:57:53:83:8f:76:63:fa:29:
                    14:71:7b:11:e3:ec:0c:80:c6:6b:5b:89:75:3f:58:
                    97:76:8e:44:a8:8c:12:1b:27:0b:56:7f:e5:d1:a5:
                    a0:77:af:3a:4b:73:09:55:55:45:70:4d:80:e1:12:
                    2c:d9:9a:aa:42:09:bc:76:f0:fa:0f:2e:8c:9d:6f:
                    10:60:00:f6:36:1c:80:b7:e1:53:32:85:d5:77:b5:
                    56:5b:a0:fd:fe:6f:4f:03:37:ff:39:6d:8f:fc:d3:
                    e7:0b:fc:11:03:4c:f9:7b:a8:1d:e1:fb:8b:0b:93:
                    98:e4:c9:fd:ea:18:df:83:10:62:df:cc:fc:8d:f4:
                    be:9c:90:35:5a:49:fb:ba:ca:1a:a3:88:b7:c0:ac:
                    51:6f:7d:64:53:87:31:98:b4:6c:f7:a5:1f:af:03:
                    f4:f7:22:dc:5c:51:f3:d8:01:9a:e7:fd:ce:ec:d6:
                    da:49:15:7b:81:fe:03:8b:b8:af:19:26:ba:9c:d1:
                    42:0e:17:7a:f7:27:8e:c6:06:d4:66:84:0a:52:ef:
                    80:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:40:76:6B:5D:3C:6F:DC:D9:5E:3E:13:B3:24:14:E4:4E:78:28:1E
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3233342e36392e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.234.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:17:d2:60:7f:b3:9b:4a:e6:62:d2:ce:d1:fa:16:41:b3:80:
         9d:b4:ef:78:70:a5:a4:0b:51:d1:33:1d:6c:ba:eb:20:dc:0b:
         9e:c5:f7:59:4c:08:2a:b0:00:4d:8b:7c:cb:e6:49:fa:4b:24:
         1b:7c:5d:d5:24:93:c2:d6:23:57:c6:59:74:0c:c8:0b:63:74:
         0b:c9:0c:d6:f6:00:61:04:c1:6c:9b:fb:cf:aa:09:2b:7d:df:
         7f:ab:34:54:e3:01:a8:0d:15:fb:78:19:bd:a5:d6:10:75:0e:
         3a:5d:21:c9:43:ff:33:28:e5:e0:f3:52:e6:f7:a9:13:47:a7:
         b8:1e:c2:d8:14:71:fb:90:70:69:a5:73:65:16:d1:0e:94:ef:
         65:e2:a8:39:8b:4d:97:69:82:4f:e7:d4:eb:29:fe:47:09:63:
         d6:cb:58:81:fc:0e:64:f8:17:44:dd:0a:62:d2:03:cc:74:b7:
         37:65:c3:5d:a6:a3:cf:10:c5:aa:fc:9e:37:2c:d5:64:9f:33:
         67:a7:d2:bc:5e:93:dc:82:32:94:c2:e7:85:cf:75:9e:51:86:
         73:4e:a5:ce:4a:65:5d:60:d5:6e:63:ea:92:20:5f:f5:93:a1:
         51:d3:4b:b2:a5:4e:ae:31:5f:3d:af:85:ea:e5:43:fa:d2:2c:
         a0:38:57:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----