Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234352e3138302e302f32342d3234203d3e203434363835.roa
File:                     3138352e3234352e3138302e302f32342d3234203d3e203434363835.roa (raw, json)
Hash identifier:          djdy+OqFARkNunuYjvQiBXSRXKRBEnkl6vnetAY//Lc=
Subject key identifier:   E5:C5:C8:02:9F:5E:67:0A:2D:E9:93:14:12:CC:01:FD:D7:5C:E0:4B
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       74E02ADF007D69A5B7580F20FA62A388F5F6CCBC
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234352e3138302e302f32342d3234203d3e203434363835.roa
Signing time:             Fri 27 Nov 2020 15:10:11 +0000
ROA not before:           Fri 27 Nov 2020 15:05:11 +0000
ROA not after:            Fri 26 Nov 2021 15:10:11 +0000
asID:                     44685
IP address blocks:        185.245.180.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:e0:2a:df:00:7d:69:a5:b7:58:0f:20:fa:62:a3:88:f5:f6:cc:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Nov 27 15:05:11 2020 GMT
            Not After : Nov 26 15:10:11 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8c:07:45:6d:84:e1:aa:59:5e:c9:03:da:23:
                    5f:b9:d7:18:dd:7c:6a:69:0b:26:fa:e0:a9:d0:88:
                    27:72:2c:0d:cb:e0:40:c0:e9:c9:59:38:ae:d9:0c:
                    70:d9:27:95:18:f9:ae:c4:3f:22:92:db:36:15:98:
                    ef:ad:e7:dd:8f:30:8b:89:0b:7f:a8:8e:d0:d9:38:
                    f1:5b:9b:f0:f8:1c:29:f2:53:0d:6e:c0:db:59:fb:
                    c7:f1:53:5d:6f:1f:a1:30:1d:bb:2a:bc:0f:99:41:
                    23:35:66:91:cd:ef:8e:d9:91:3e:b6:7f:19:79:2c:
                    c3:1b:55:60:62:ba:bd:f1:cd:09:88:28:4c:84:11:
                    aa:59:7c:f5:b8:e0:52:74:9c:19:a3:00:7c:20:21:
                    73:3d:e1:c6:08:79:2b:1c:84:4f:25:39:54:11:bb:
                    c7:b8:68:af:aa:9f:4a:49:06:5d:92:16:8d:df:b4:
                    0b:55:51:a0:95:7a:08:f5:1b:fb:4c:59:c4:43:74:
                    93:94:86:04:c9:73:67:47:8b:8d:e5:53:bd:af:4a:
                    ec:90:51:4d:6e:6d:3a:29:ed:92:cb:ad:7c:f5:53:
                    3a:54:60:7f:46:6f:70:65:bc:fa:d3:27:09:1e:8e:
                    9a:cb:e9:ec:ae:89:d5:4b:53:78:5b:b1:07:e5:78:
                    3a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C5:C8:02:9F:5E:67:0A:2D:E9:93:14:12:CC:01:FD:D7:5C:E0:4B
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234352e3138302e302f32342d3234203d3e203434363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.245.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:53:b5:75:76:d9:00:ab:29:64:d4:4e:19:26:52:38:53:30:
         8d:12:df:2b:40:3d:0b:a0:da:9c:82:22:11:e7:84:6a:fd:bd:
         97:18:0e:64:27:1a:47:1a:98:97:f4:46:78:42:eb:31:39:49:
         95:a1:ae:66:c1:a9:c6:ab:11:1e:d2:17:4c:7c:86:35:26:52:
         75:33:ff:aa:01:e9:8f:0c:86:49:f3:11:0d:14:16:51:70:e2:
         9c:79:e6:d7:0d:47:8b:32:72:29:50:20:e8:95:47:43:39:e5:
         d7:bd:35:23:8c:ee:9c:21:8c:4f:57:2d:46:43:79:a5:b9:bb:
         03:d9:3f:b5:43:3e:7c:ae:13:ae:d3:dd:da:aa:82:36:0a:70:
         53:89:7c:cd:35:d6:68:3e:8d:14:8a:43:f3:71:9c:15:f6:51:
         52:71:63:e9:1a:9f:a1:2f:9d:1d:44:d3:9d:b0:58:4a:70:de:
         b3:d2:96:10:5d:d7:cc:71:e8:0b:d5:d7:93:e4:78:8f:b1:8d:
         5a:c1:e0:05:23:3e:03:e0:55:e1:95:05:5a:8a:7e:99:32:d3:
         fa:b3:af:2c:57:68:f2:5b:78:ca:1d:22:c7:d1:fc:4e:26:7e:
         b2:c1:73:69:93:64:e1:22:10:4f:97:8d:50:cd:52:4b:39:8e:
         e6:1b:cb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----