Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139342e3231362e302f32332d3234203d3e20323034393538.roa
File:                     3138352e3139342e3231362e302f32332d3234203d3e20323034393538.roa (raw, json)
Hash identifier:          HUjuf9AY4ETy0Iff+BDoIpC7MLbkyn+TSV2ibNmKvA0=
Subject key identifier:   E3:F1:14:E8:64:65:D8:F2:16:98:9F:17:71:8C:A8:61:DC:5D:A9:CB
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       776BC1367BDA15AC43239899EFCCF7164E412EE9
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139342e3231362e302f32332d3234203d3e20323034393538.roa
Signing time:             Fri 27 Nov 2020 15:10:11 +0000
ROA not before:           Fri 27 Nov 2020 15:05:11 +0000
ROA not after:            Fri 26 Nov 2021 15:10:11 +0000
asID:                     204958
IP address blocks:        185.194.216.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:6b:c1:36:7b:da:15:ac:43:23:98:99:ef:cc:f7:16:4e:41:2e:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Nov 27 15:05:11 2020 GMT
            Not After : Nov 26 15:10:11 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:86:a6:b0:ee:6f:d1:29:95:f5:a6:60:71:8a:
                    a2:31:b6:24:b0:29:d6:34:c2:54:2e:7d:c1:5d:cd:
                    36:e0:89:46:eb:4a:f7:1a:ef:f1:f3:bf:88:c3:b2:
                    65:8d:9e:d5:bc:be:d9:62:40:42:bc:54:e1:9d:34:
                    e2:59:87:61:b7:99:60:e4:07:1f:ce:ee:09:2f:ba:
                    b2:fa:a3:e4:54:9f:ad:5b:cb:3f:45:4f:07:21:85:
                    62:6f:39:01:66:24:93:08:08:a7:ee:9c:88:bc:23:
                    fb:d7:d2:f9:9a:f7:50:20:1e:99:3f:3a:8b:ed:b4:
                    9b:17:39:73:ed:7c:ed:f9:8c:49:18:be:79:0f:91:
                    9a:ef:cd:17:00:b6:07:07:c2:c7:22:a7:ad:d3:be:
                    37:2a:ce:b5:b7:af:1d:eb:9b:cb:41:79:7f:b7:3a:
                    ab:50:5b:1a:c1:f1:0d:f9:5d:17:33:8e:bf:22:7d:
                    87:ae:e1:c5:4a:a3:bf:bf:01:5f:91:6c:58:0d:90:
                    8a:ed:64:0c:40:18:55:b8:e5:b7:80:67:2d:d4:3f:
                    71:14:f7:84:68:af:e4:75:aa:f7:69:84:ee:e6:c7:
                    f8:91:62:1d:a9:5a:cd:cc:be:d4:fa:9a:f5:22:c5:
                    f6:6a:79:07:97:20:fa:bf:33:94:9a:2b:d0:ca:6c:
                    38:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F1:14:E8:64:65:D8:F2:16:98:9F:17:71:8C:A8:61:DC:5D:A9:CB
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139342e3231362e302f32332d3234203d3e20323034393538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.194.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:8e:2d:43:0f:7e:3d:44:06:9a:e9:de:08:7d:7c:5b:d8:bf:
         f4:18:30:2b:83:2d:b6:d7:4f:3f:07:87:ff:a2:42:37:07:2c:
         67:e4:5a:fa:79:4e:ad:6c:6e:fa:3c:2c:23:0a:d6:d0:5a:48:
         61:03:8b:70:98:c2:26:46:b7:a8:29:38:72:95:2f:35:ca:74:
         9a:9d:eb:54:47:a9:a5:93:80:08:e3:f6:0c:4c:6d:f6:61:8c:
         01:c6:1b:45:f9:34:7b:f3:28:6b:6e:ad:bc:cf:69:35:eb:69:
         34:98:a8:4d:6c:cf:ec:d1:73:52:5a:20:9c:c1:91:e1:92:72:
         ce:64:91:f9:43:2c:94:72:a2:cc:a7:96:28:63:c0:88:c5:fb:
         31:d8:4a:14:dd:b3:21:5d:39:19:d2:15:47:10:5b:93:5e:f2:
         84:b8:ab:51:a3:46:e2:0d:27:2e:b3:60:e6:1b:e7:4f:d0:e9:
         52:43:6b:3f:fa:c4:dc:61:5d:08:03:84:80:d4:a4:58:a4:4f:
         9a:74:04:89:2b:6a:82:9f:fe:c2:66:89:9f:3d:14:02:78:42:
         2a:3e:48:59:fa:ed:1e:82:bd:28:fd:7e:ea:92:8d:a3:f9:7d:
         b1:5b:86:73:9e:b2:4c:bd:dc:f6:56:69:71:0e:07:3c:d7:7d:
         9f:fe:11:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----