Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e35302e302f32332d3234203d3e203631333137.roa
File:                     38352e3230382e35302e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          z5Gp1VLcAQ0ZIvu9/7ag6LlYE+XV7+7oS7z3+5gFhlg=
Subject key identifier:   7F:0D:9C:2E:BF:C5:37:C3:4D:96:E9:61:55:24:D8:B8:BA:D3:FB:B2
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       13C52DC3EF1FFC4DECA22A7465E54A143A4DA309
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e35302e302f32332d3234203d3e203631333137.roa
Signing time:             Fri 27 Nov 2020 15:10:16 +0000
ROA not before:           Fri 27 Nov 2020 15:05:16 +0000
ROA not after:            Fri 26 Nov 2021 15:10:16 +0000
asID:                     61317
IP address blocks:        85.208.50.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c5:2d:c3:ef:1f:fc:4d:ec:a2:2a:74:65:e5:4a:14:3a:4d:a3:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Nov 27 15:05:16 2020 GMT
            Not After : Nov 26 15:10:16 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:40:1d:da:39:0c:85:5b:db:ae:dd:48:cf:fc:
                    43:d3:8b:7b:6c:56:29:03:e7:8d:8a:6f:5f:86:59:
                    13:a6:0d:74:26:8e:34:99:16:dc:e1:fb:7e:c9:37:
                    21:c9:7a:20:f4:f4:09:92:dd:76:3d:46:a6:4c:f9:
                    83:fe:96:d2:4b:63:6d:b7:39:14:e2:5b:6a:7d:bd:
                    ec:e0:4c:76:e6:04:95:ec:d4:6a:e0:03:c9:20:41:
                    bd:55:6c:95:eb:69:af:1d:4d:cb:b5:e3:60:d5:49:
                    6b:17:45:10:28:8b:26:d5:69:73:8f:8e:9f:54:b8:
                    97:d2:67:b3:cf:e4:ca:3b:03:a4:a9:11:6b:ee:74:
                    d7:e5:31:f3:34:0e:43:e2:9c:43:43:de:f9:a4:ca:
                    17:89:93:fb:cb:bf:fc:76:bc:b5:dc:64:bb:78:a0:
                    42:b2:56:c0:fb:82:6c:dc:e2:fd:09:84:67:34:1b:
                    18:fb:a5:67:9a:53:a8:16:0c:99:b8:2b:4d:99:75:
                    34:7f:bb:36:4a:95:6c:0d:f6:77:73:91:34:8a:cd:
                    a5:1c:c3:d9:77:b5:7c:c2:7c:20:30:29:89:a5:79:
                    20:70:25:37:fb:aa:6f:54:41:cb:83:f8:63:96:6f:
                    e1:8e:ca:e5:2f:42:fd:25:1f:96:a1:5a:62:1b:ea:
                    61:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:0D:9C:2E:BF:C5:37:C3:4D:96:E9:61:55:24:D8:B8:BA:D3:FB:B2
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e35302e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.208.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:80:ff:4d:eb:5c:35:c8:0a:9d:06:40:69:7e:ed:28:fb:e6:
         66:8e:e7:e6:50:e0:38:81:6a:46:da:e2:27:4a:50:43:77:60:
         c2:64:d8:af:9e:f6:d0:26:b0:e6:6a:03:54:81:35:23:fe:e2:
         f3:68:78:3b:6e:39:1d:83:bb:c3:fd:78:9d:64:36:0e:52:bc:
         6f:74:a5:ed:1b:c9:6d:d6:4b:39:30:c4:ce:70:94:c2:31:89:
         2f:51:23:7b:f1:47:bc:40:d7:e3:2f:db:c9:3c:ab:b2:56:d9:
         a8:e7:8b:9a:71:75:68:9c:e5:54:dd:e4:e6:7b:b3:c3:83:28:
         71:f7:68:2f:e3:5d:aa:b1:cb:20:3c:0c:89:fb:b8:e7:b0:bf:
         a9:0c:65:cc:3b:9d:24:ce:73:54:8c:86:ee:73:e4:2a:b5:cd:
         1c:0a:0f:2a:c5:af:29:59:50:04:d1:b0:4d:8d:66:e2:2f:c9:
         ef:f4:ad:5d:94:50:90:70:9d:b0:7e:a2:84:ee:cb:2a:58:af:
         13:2f:c9:b6:ef:86:1f:6e:11:4f:a8:d8:e2:87:40:ba:fe:66:
         38:f7:10:52:81:c1:3a:3d:77:e8:34:0f:3d:25:1b:ad:24:a1:
         ce:c5:8e:f1:40:3b:dc:2a:10:d8:48:c6:5a:c2:fb:5c:0a:cf:
         7c:0c:1e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----