Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3138352e3235322e3233332e302f32342d3234203d3e203235303938.roa
File:                     3138352e3235322e3233332e302f32342d3234203d3e203235303938.roa (raw, json)
Hash identifier:          toJsXS5P8BbTo9g54Zujs0D1YaCHxcnzk/vwwm26NqU=
Subject key identifier:   AB:0E:B7:2A:51:7F:A2:91:F7:4A:7A:7B:56:61:A8:A7:B6:80:96:E8
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       2C6A6CB55FAA5FC0CD80BCFA1B3869DE0454F81D
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3138352e3235322e3233332e302f32342d3234203d3e203235303938.roa
Signing time:             Fri 27 Nov 2020 15:10:20 +0000
ROA not before:           Fri 27 Nov 2020 15:05:20 +0000
ROA not after:            Fri 26 Nov 2021 15:10:20 +0000
asID:                     25098
IP address blocks:        185.252.233.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:6a:6c:b5:5f:aa:5f:c0:cd:80:bc:fa:1b:38:69:de:04:54:f8:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Nov 27 15:05:20 2020 GMT
            Not After : Nov 26 15:10:20 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:36:7f:f1:c4:5d:a2:b6:42:69:18:38:93:58:
                    2c:91:0f:d6:68:e5:4a:85:5f:f2:75:34:71:36:d3:
                    f0:f3:ad:4b:09:f3:29:bb:39:05:19:b7:1d:6c:f0:
                    ff:52:8f:1d:01:70:c7:47:4f:78:9f:28:a2:45:2b:
                    be:26:29:a3:6d:c3:68:d2:6d:d5:ce:a2:63:43:32:
                    47:53:04:40:71:cc:09:22:9a:36:1d:b8:c3:47:3e:
                    89:69:9a:ef:93:27:94:12:13:b7:44:f8:fb:70:1c:
                    cc:12:e9:4a:5a:b8:89:d4:83:b1:6f:62:ad:3a:49:
                    2b:88:fc:2b:e5:28:27:ec:a4:e5:b3:07:1c:39:d8:
                    24:d4:0c:ba:22:57:a7:ee:0b:8c:1f:0c:15:4b:30:
                    6c:67:bd:b4:85:fc:db:00:d4:df:1e:22:f6:db:cc:
                    7d:7e:88:0e:6f:84:28:fb:d9:35:ad:a1:0f:a4:cd:
                    36:bb:9d:54:52:da:37:49:82:d0:3e:f4:74:fa:5a:
                    96:bd:ec:67:66:df:1c:7b:02:92:b5:1a:04:e6:5e:
                    36:7e:18:9a:66:a1:91:d4:dc:b7:e6:f1:ab:a5:be:
                    d5:dd:05:8f:43:40:ad:d5:42:ca:18:3f:01:40:ef:
                    49:a8:f7:b9:2d:81:55:fb:e9:f4:78:bd:dd:a2:00:
                    f6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0E:B7:2A:51:7F:A2:91:F7:4A:7A:7B:56:61:A8:A7:B6:80:96:E8
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3138352e3235322e3233332e302f32342d3234203d3e203235303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.252.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:55:63:59:b2:8c:06:dc:84:02:60:78:03:bb:34:0a:6c:e8:
         0d:23:3f:17:28:23:46:a6:fb:b4:70:2d:3d:6c:fa:69:fe:c8:
         58:bb:fa:93:9f:13:ee:49:14:77:6d:29:c7:c7:ce:c5:f2:91:
         83:0d:c6:5e:92:ab:95:76:b7:c2:28:5c:3d:d2:1a:a3:5d:79:
         5d:d9:e3:9d:a8:61:c0:a2:b8:f4:c1:33:69:65:e0:e9:2c:47:
         64:df:c7:ea:de:ee:1d:11:1d:4a:45:e6:8d:f4:61:0f:a8:9b:
         0f:e2:1a:58:64:92:fb:f6:1d:db:85:ee:d0:e0:5e:52:96:0b:
         d2:7e:21:71:da:48:1f:b3:3a:6d:d9:86:eb:1d:9d:e5:54:24:
         5f:91:e1:ee:df:65:d3:c0:6f:61:07:a7:69:cd:4a:a3:c2:ab:
         98:7d:0f:e8:31:55:e2:1d:08:76:13:8f:d7:0c:66:02:4f:4a:
         8f:4d:94:97:43:d8:df:06:2b:2b:6e:c4:51:97:79:ba:8d:00:
         5a:b7:67:4e:e6:5c:01:ad:ae:a4:1e:33:2c:18:19:31:89:aa:
         42:5f:2c:48:a2:28:cf:21:1c:c0:cd:07:0b:d8:df:0f:a4:1d:
         0a:61:d3:6e:a9:19:0a:e7:3c:c7:b7:48:f0:3a:5f:26:bd:46:
         14:e8:65:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----