Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139372e3139342e302f32342d3234203d3e20323037343239.roa
File:                     3138352e3139372e3139342e302f32342d3234203d3e20323037343239.roa (raw, json)
Hash identifier:          ebjWJb/j6COzituMUwcJi3BAnVF6fAbu0njdsjdsiqs=
Subject key identifier:   A5:CA:E0:BF:FD:3B:D7:31:66:91:54:E2:72:5D:94:60:DF:B3:1A:05
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       66F695EC6DCE98D7D7C661EA5FB8C2D32211F722
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139372e3139342e302f32342d3234203d3e20323037343239.roa
Signing time:             Tue 17 Aug 2021 18:36:35 +0000
ROA not before:           Tue 17 Aug 2021 18:31:35 +0000
ROA not after:            Tue 16 Aug 2022 18:36:35 +0000
asID:                     207429
IP address blocks:        185.197.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f6:95:ec:6d:ce:98:d7:d7:c6:61:ea:5f:b8:c2:d3:22:11:f7:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Aug 17 18:31:35 2021 GMT
            Not After : Aug 16 18:36:35 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:6d:f2:a4:66:7a:f5:60:5c:16:47:80:c5:7d:
                    08:cf:3d:bb:8d:49:20:9a:12:a2:64:47:52:5c:fa:
                    a7:f9:f5:a3:fd:a2:2d:33:68:e1:c4:52:2e:53:15:
                    3a:21:64:34:04:1c:6f:a7:ec:c2:23:f9:2c:36:e5:
                    61:71:75:df:f1:94:34:18:88:08:b0:a8:07:6c:c0:
                    f8:cf:6a:38:e2:16:e1:7a:3d:a0:f9:2e:68:31:82:
                    a6:7a:95:84:5e:95:51:8e:6a:01:f6:19:6e:1f:b2:
                    b6:55:7a:89:b9:d3:9b:9e:02:bd:48:14:ba:83:5f:
                    53:ce:2e:82:f1:94:f1:51:26:01:4f:80:4f:91:cb:
                    65:fe:e7:8b:9b:60:10:eb:e9:66:77:d8:67:5e:8d:
                    a5:bd:df:bb:4f:06:d3:db:93:73:5e:3e:96:63:4f:
                    c7:27:39:0b:bf:cb:68:b9:f6:af:37:4f:51:ba:a7:
                    39:33:a2:cd:de:9b:57:73:bb:09:20:40:f0:89:a0:
                    9e:fe:e0:06:3b:02:3a:a5:8d:02:6e:3b:1b:e8:6a:
                    04:15:5d:3c:3b:1b:2a:d8:d7:c3:af:bf:a9:b9:1f:
                    60:8f:82:06:93:af:9c:6e:97:67:e8:bc:34:1f:33:
                    7b:ba:db:9b:77:15:42:47:08:ea:c9:da:88:94:f4:
                    42:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:CA:E0:BF:FD:3B:D7:31:66:91:54:E2:72:5D:94:60:DF:B3:1A:05
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139372e3139342e302f32342d3234203d3e20323037343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.197.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:92:91:84:dd:cd:57:72:3c:f5:56:60:87:86:3b:b3:81:92:
         19:24:f6:e6:da:f4:bf:91:d3:e4:fb:3b:85:da:84:48:81:75:
         44:83:5d:aa:85:e3:02:f8:fb:a5:49:bf:e1:f1:d2:36:a2:43:
         c3:28:bd:d5:43:3c:b4:32:57:be:44:3e:06:52:a0:f8:a6:3e:
         c9:84:52:0e:43:51:6b:1b:8c:1f:f5:9f:73:95:ac:e7:19:a6:
         f6:42:71:85:bc:63:96:b3:cb:07:84:e1:e1:0e:2b:5d:a5:e1:
         4b:64:b6:d1:8d:c2:ff:65:30:0f:fc:60:33:c7:a8:2e:c4:56:
         58:cd:e0:f4:44:ac:cb:ed:7d:eb:9e:8b:50:71:93:1d:91:3b:
         bd:f4:a8:cc:d2:e0:29:87:42:04:48:cd:fa:70:ea:85:2b:95:
         ea:f1:0e:05:fd:a3:f8:2e:6f:08:b8:3f:48:d2:73:81:58:e8:
         5b:96:85:0d:cb:4f:44:00:0d:7d:03:c4:36:62:7d:34:e2:38:
         c2:07:55:fb:6d:13:3f:4e:9d:5e:2b:ff:2c:51:64:6a:03:61:
         af:2a:9e:2d:c5:eb:85:64:3e:f3:2e:2e:54:94:52:3a:5a:da:
         4c:b7:c4:7a:cd:8c:bf:e4:32:f8:9c:3b:0a:d7:1f:53:67:cc:
         9a:54:bd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----