Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233322e302f32332d3234203d3e20323731333735.roa
File:                     3138352e3138372e3233322e302f32332d3234203d3e20323731333735.roa (raw, json)
Hash identifier:          g6uL4baNcs2450I8ay8yXySjUhyfQi2908+WM4zX4dk=
Subject key identifier:   9F:B8:B2:22:02:2F:DA:7D:F0:A9:FF:53:B7:CB:3A:BD:A1:BF:A3:57
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       3538DCD6C17127FD0FC0FEC1B7BA13E10F64271D
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233322e302f32332d3234203d3e20323731333735.roa
Signing time:             Fri 27 Nov 2020 15:10:10 +0000
ROA not before:           Fri 27 Nov 2020 15:05:10 +0000
ROA not after:            Fri 26 Nov 2021 15:10:10 +0000
asID:                     271375
IP address blocks:        185.187.232.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:38:dc:d6:c1:71:27:fd:0f:c0:fe:c1:b7:ba:13:e1:0f:64:27:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Nov 27 15:05:10 2020 GMT
            Not After : Nov 26 15:10:10 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ef:d0:c0:20:3f:06:68:4c:63:da:01:85:b3:
                    32:0e:44:ad:f9:cb:af:3d:bc:47:d8:64:f5:da:a0:
                    f1:fb:2a:67:8b:f1:e0:9e:e7:ce:03:2e:f4:df:d9:
                    23:4f:bc:f0:5c:c2:62:a7:78:61:f2:6a:0d:38:fe:
                    8c:c0:4d:56:cd:b9:e5:be:7b:c8:c6:94:14:9e:45:
                    a7:63:7a:22:61:c3:e0:21:50:39:27:a5:42:14:64:
                    ca:52:12:e6:f0:e3:1c:6f:9c:7d:3b:6a:9d:b1:7c:
                    91:ca:c3:9b:53:d4:71:08:43:7b:bf:10:29:fa:91:
                    ff:c4:3f:45:e6:5f:19:85:82:67:84:43:23:b6:bc:
                    d3:ce:7a:95:dc:7d:9e:ab:1e:5d:b7:02:1f:10:78:
                    b5:62:58:ce:9f:49:ed:ac:47:7c:fb:12:c8:9e:e5:
                    46:8e:0e:68:a1:5e:ae:25:c2:86:44:2c:50:55:b4:
                    b4:e7:b7:d2:f9:b0:ad:81:95:7a:3d:ee:a8:28:eb:
                    29:5e:08:ac:1b:a5:c8:7c:c7:1c:39:49:5e:f6:21:
                    c5:ee:01:da:f7:30:c5:9c:ed:78:50:6c:39:c5:92:
                    49:ec:1f:0b:6e:d5:6c:c5:03:70:95:d5:d9:ba:91:
                    c7:6e:ed:bf:55:84:e2:93:2d:77:9a:7a:b4:11:e8:
                    18:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B8:B2:22:02:2F:DA:7D:F0:A9:FF:53:B7:CB:3A:BD:A1:BF:A3:57
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233322e302f32332d3234203d3e20323731333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bc:f7:17:62:48:74:87:85:87:e1:3c:a7:38:ac:e9:df:e2:a2:
         3d:69:ae:7f:52:7a:13:e0:42:b6:be:1a:48:c6:cb:e6:ea:c7:
         a4:08:2e:36:06:8f:12:33:a1:43:d0:2d:ff:6d:46:3f:fc:f3:
         5d:51:f8:7c:b9:e5:80:b0:08:e6:3e:e5:67:5e:6e:99:c5:00:
         ae:b4:ac:19:ea:ca:56:75:24:30:65:00:4c:90:26:6d:3c:82:
         89:f9:56:a9:4d:84:99:83:5f:25:01:61:8a:34:79:78:f0:20:
         a6:e4:71:15:dc:09:12:8c:45:66:a5:17:cf:e1:88:08:c5:69:
         d6:d8:ec:7c:f6:49:fb:2a:f7:ee:9b:29:7f:f7:85:41:56:bd:
         b5:3f:9e:0e:db:04:3b:2d:b7:e0:21:12:ba:1b:5d:37:c7:d7:
         c6:4e:81:f8:c6:2c:b5:c4:32:d0:f6:f4:87:50:5f:2f:73:41:
         87:db:19:45:d0:21:68:79:7f:34:ec:47:31:8c:3f:7c:28:55:
         d1:7d:8c:c6:53:82:24:0d:53:48:d3:8c:19:2c:3e:4f:4b:4c:
         93:fb:e3:14:33:68:e1:dc:4d:b4:7f:ac:12:28:4c:3b:f9:75:
         21:6d:24:ae:a3:7a:40:0d:d7:68:83:3f:87:11:c8:1a:81:62:
         f5:8a:d9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----