Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3139322e3134352e38322e302f32332d3233203d3e203631333137.roa
File:                     3139322e3134352e38322e302f32332d3233203d3e203631333137.roa (raw, json)
Hash identifier:          qUBWDUoI9qH9cABaFH3QsUlI6ceOCAo1I7qBenZGxmQ=
Subject key identifier:   08:24:CF:66:4E:F3:A0:09:AD:EF:40:09:41:99:7B:D5:B1:60:CB:4D
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       036046C91BA76C5940EE910511FDDF19389208ED
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3139322e3134352e38322e302f32332d3233203d3e203631333137.roa
Signing time:             Tue 29 Dec 2020 13:09:09 +0000
ROA not before:           Tue 29 Dec 2020 13:04:09 +0000
ROA not after:            Tue 28 Dec 2021 13:09:09 +0000
asID:                     61317
IP address blocks:        192.145.82.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:60:46:c9:1b:a7:6c:59:40:ee:91:05:11:fd:df:19:38:92:08:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Dec 29 13:04:09 2020 GMT
            Not After : Dec 28 13:09:09 2021 GMT
        Subject: CN=3082010A0282010100E2F14DF4571B65CFBAC1D67D1DD24103F124ED8A1A61C5FC7BEE489EABDBCFFF999685D93C1236ABAEC773CA9AC8ED8F2D9ADA0AF32C4C94297F29BE5D32C5BF599432E9014762A2C2D8EC10CE36B9EF4B2262BC5BC6DA6F7A9E293A49140BF24E8F810893D1CE9A3F4E80820D2822279ADD1BADDE7FB6AECB524825C3646402F948271C7A6A4C47B61D60D1FAFB7D1C98B8D845E40C114002E8A4763BE9A542AB74146F74426BDE1C022951275213ECE5C3287CEFD51F4FBB5261D023044F90537BDA7AAEC37DD06EBE63F61B5447EBBE61E581C2F72D0BB53C01BE5216154CF75D2C40D465B412A9FB5A71C2963826C11658A1EA5304D94C928F4A5BC48E790203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f1:4d:f4:57:1b:65:cf:ba:c1:d6:7d:1d:d2:
                    41:03:f1:24:ed:8a:1a:61:c5:fc:7b:ee:48:9e:ab:
                    db:cf:ff:99:96:85:d9:3c:12:36:ab:ae:c7:73:ca:
                    9a:c8:ed:8f:2d:9a:da:0a:f3:2c:4c:94:29:7f:29:
                    be:5d:32:c5:bf:59:94:32:e9:01:47:62:a2:c2:d8:
                    ec:10:ce:36:b9:ef:4b:22:62:bc:5b:c6:da:6f:7a:
                    9e:29:3a:49:14:0b:f2:4e:8f:81:08:93:d1:ce:9a:
                    3f:4e:80:82:0d:28:22:27:9a:dd:1b:ad:de:7f:b6:
                    ae:cb:52:48:25:c3:64:64:02:f9:48:27:1c:7a:6a:
                    4c:47:b6:1d:60:d1:fa:fb:7d:1c:98:b8:d8:45:e4:
                    0c:11:40:02:e8:a4:76:3b:e9:a5:42:ab:74:14:6f:
                    74:42:6b:de:1c:02:29:51:27:52:13:ec:e5:c3:28:
                    7c:ef:d5:1f:4f:bb:52:61:d0:23:04:4f:90:53:7b:
                    da:7a:ae:c3:7d:d0:6e:be:63:f6:1b:54:47:eb:be:
                    61:e5:81:c2:f7:2d:0b:b5:3c:01:be:52:16:15:4c:
                    f7:5d:2c:40:d4:65:b4:12:a9:fb:5a:71:c2:96:38:
                    26:c1:16:58:a1:ea:53:04:d9:4c:92:8f:4a:5b:c4:
                    8e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:24:CF:66:4E:F3:A0:09:AD:EF:40:09:41:99:7B:D5:B1:60:CB:4D
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3139322e3134352e38322e302f32332d3233203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.145.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cc:33:38:ea:bc:73:36:ae:df:6d:73:12:b2:1c:5a:de:8d:90:
         1b:cd:29:7f:78:f9:e6:be:4a:12:e4:e7:cb:d2:a7:39:48:e9:
         03:74:dd:d6:30:22:79:13:39:f6:59:9e:bc:6b:94:33:18:0c:
         3a:36:61:99:46:4d:a4:fa:5d:7d:f3:9d:b7:d5:03:44:9f:80:
         a8:e1:30:21:5e:8a:7a:c2:b4:3d:7b:eb:70:49:af:8b:46:15:
         e1:d9:08:15:bd:0b:c0:ac:40:38:9b:33:db:7d:81:43:39:81:
         05:54:13:e9:af:79:8c:2d:54:0c:6b:a0:6f:e3:c7:9d:42:ab:
         b7:be:17:39:04:cd:5c:58:2c:ad:2e:d2:6e:ce:e2:17:8a:f8:
         42:be:3a:9e:2c:a4:ba:90:d8:09:cf:14:fc:dc:2e:b5:4e:bf:
         ca:2f:07:0f:50:7b:6c:2f:3b:90:34:ff:4c:50:1b:32:b3:49:
         0a:3e:43:52:db:79:38:a3:55:4d:61:64:16:88:48:1d:fb:20:
         99:76:8f:19:3e:4b:71:87:4f:09:33:e4:2d:dc:3a:58:89:07:
         34:8e:21:35:6f:1c:98:57:12:fa:73:33:b2:90:92:fb:89:40:
         49:ff:1a:8a:3f:cd:84:f1:7b:4e:c3:29:4e:b3:fa:cc:dd:6d:
         cb:97:3a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----