Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3138352e3235322e3233332e302f32342d3234203d3e203631333137.roa
File:                     3138352e3235322e3233332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          77lnDvwzEs11vdlZ13A5lxiwqk24wmPvtZmSMOhvA8E=
Subject key identifier:   E0:6A:99:F2:17:72:4A:3E:36:26:0E:CD:90:D3:28:32:1D:8C:CB:52
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       4B5595A4C7527A75F2BBDAD0A5D30304FCB2924F
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3138352e3235322e3233332e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 27 Nov 2020 15:10:22 +0000
ROA not before:           Fri 27 Nov 2020 15:05:22 +0000
ROA not after:            Fri 26 Nov 2021 15:10:22 +0000
asID:                     61317
IP address blocks:        185.252.233.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:55:95:a4:c7:52:7a:75:f2:bb:da:d0:a5:d3:03:04:fc:b2:92:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Nov 27 15:05:22 2020 GMT
            Not After : Nov 26 15:10:22 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e8:49:0d:4b:b3:a1:04:7d:e1:55:7e:7d:7f:
                    70:24:9a:3a:94:39:cb:a9:ce:43:ba:8f:f1:5c:3d:
                    bb:71:b3:e4:e0:38:13:91:cb:ba:d3:d7:07:54:9a:
                    52:3d:ab:53:32:81:dc:bc:1c:9f:a5:7f:14:ce:5a:
                    1e:57:d3:c0:6e:7f:42:fe:3c:15:f2:38:1d:93:8e:
                    f4:73:17:3b:26:b1:c1:71:88:95:ef:8d:cb:54:4e:
                    b7:92:f5:a2:f8:68:23:f9:30:c6:24:f9:5d:ba:0d:
                    57:c0:66:96:dd:a9:79:3e:86:6e:0b:8b:a8:07:bb:
                    42:a3:3d:96:1d:9f:34:55:2a:d8:25:b5:0a:0d:8a:
                    4a:a3:1c:59:e4:c7:4c:37:33:be:3c:88:1d:62:5a:
                    19:37:e7:96:e7:a1:04:fd:ab:f8:9c:82:ea:2f:86:
                    1f:18:ee:7a:30:d8:19:74:7d:2e:2c:fa:e6:75:a8:
                    52:50:e9:d6:49:58:93:a9:75:7c:b7:6d:79:42:e1:
                    15:2b:ec:94:54:29:bf:81:42:0e:9d:84:2e:88:02:
                    72:a8:0c:77:38:6a:73:45:31:de:ae:17:30:bd:f5:
                    29:29:64:4f:29:af:e1:72:f1:10:fc:e0:64:8a:2c:
                    99:c0:eb:65:ae:0b:c7:fb:a3:60:8a:07:f1:4a:33:
                    93:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:6A:99:F2:17:72:4A:3E:36:26:0E:CD:90:D3:28:32:1D:8C:CB:52
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3138352e3235322e3233332e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.252.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:6d:00:61:82:2d:79:75:19:74:81:1b:c0:78:32:64:96:95:
         28:e0:bf:f9:e5:a2:78:4b:b2:75:ee:1a:61:9c:1c:a5:d6:80:
         b3:4b:11:fb:56:23:ac:8e:52:4c:37:78:b4:e5:b7:e0:3e:f7:
         a8:0e:7c:a3:94:35:3f:96:02:ff:83:af:2a:f2:37:e5:5a:4a:
         6b:b6:4e:a1:9b:e2:ac:74:dc:c2:99:ec:46:2a:85:85:69:ca:
         d4:6a:42:08:60:72:de:71:a0:1d:53:c9:61:35:dc:f5:0f:18:
         72:e8:c4:d3:d9:ef:0d:72:ca:e2:31:0b:dd:fa:94:8c:05:ba:
         7d:16:53:f0:32:f2:b7:ed:6f:09:2a:e0:72:5c:e5:6c:d6:ba:
         78:04:3c:8a:b4:1a:d3:99:a0:e6:cd:16:d1:50:e7:0d:d6:17:
         a3:9e:b2:f6:bc:4c:1d:d2:2e:c8:e7:5e:3e:e6:30:46:a2:55:
         c5:4c:c3:ad:b7:26:92:0c:94:2f:84:76:02:c9:68:fc:37:01:
         0c:cc:ba:f0:9d:ea:5e:75:de:16:bd:d5:39:24:aa:ee:32:c4:
         a1:e3:36:d3:31:3b:46:0d:5f:cf:3b:a5:84:2c:fd:35:73:21:
         29:73:80:96:56:10:86:2f:3c:51:e3:cb:d9:06:98:79:ef:21:
         46:64:45:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----