Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3233372e302f32342d3234203d3e20323132363330.roa
File:                     3138352e3230322e3233372e302f32342d3234203d3e20323132363330.roa (raw, json)
Hash identifier:          qADl/oB6V7bGKMzAlJBMxEwwwFQJys93s0cSCO3q4oc=
Subject key identifier:   7B:90:CD:E2:D3:72:99:69:01:8D:31:8B:B5:CD:B4:11:E1:96:92:21
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       1A20DFE7663BB66FF147C4CBE3505538D21E3229
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3233372e302f32342d3234203d3e20323132363330.roa
Signing time:             Fri 27 Nov 2020 15:10:12 +0000
ROA not before:           Fri 27 Nov 2020 15:05:12 +0000
ROA not after:            Fri 26 Nov 2021 15:10:12 +0000
asID:                     212630
IP address blocks:        185.202.237.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:20:df:e7:66:3b:b6:6f:f1:47:c4:cb:e3:50:55:38:d2:1e:32:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Nov 27 15:05:12 2020 GMT
            Not After : Nov 26 15:10:12 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:29:3b:e3:e7:08:b0:e2:58:82:5d:1d:41:c4:
                    56:71:19:9f:15:1b:90:67:5e:3a:f4:be:86:8f:53:
                    c1:2b:a8:99:e5:58:e6:98:0f:8e:d0:25:71:1f:be:
                    66:d3:b8:1f:73:62:9c:18:0d:51:fa:6d:4f:0c:56:
                    66:3d:53:d0:72:d5:dc:58:a7:a1:ce:64:42:c7:bb:
                    ca:e4:0f:c1:3a:15:7f:bf:87:a8:88:83:96:8c:59:
                    ff:a6:c8:f0:86:e2:64:69:06:97:d3:55:3f:2e:ce:
                    ae:c1:bd:d5:44:f0:25:bc:a3:cb:cb:30:f6:2f:27:
                    a1:0c:78:23:aa:76:3a:a0:67:dd:f1:87:92:4f:49:
                    e6:c7:70:c1:f4:12:ba:5f:4f:7c:4d:02:2b:f0:3c:
                    e9:b2:4d:e4:5f:0a:4f:46:29:0c:cc:74:40:85:4c:
                    8f:7f:65:73:49:86:ca:c6:7b:ce:56:37:e2:f2:08:
                    52:8a:5d:d3:67:21:4a:27:d2:58:b1:77:e6:ce:69:
                    9a:10:21:0e:40:55:e8:fc:06:9c:a6:64:5d:9c:45:
                    1a:cc:85:18:e4:d7:30:68:ed:42:5e:3a:8f:0f:f0:
                    83:25:00:48:55:77:d4:16:f8:34:01:6c:e3:31:6c:
                    4b:ef:b6:bd:34:05:43:4b:c1:d0:6e:09:45:4f:50:
                    29:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:90:CD:E2:D3:72:99:69:01:8D:31:8B:B5:CD:B4:11:E1:96:92:21
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3233372e302f32342d3234203d3e20323132363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:c2:b4:13:64:3d:1e:dc:90:8d:50:39:fb:7e:4e:ab:42:6f:
         ee:43:01:c7:db:97:45:ce:6a:f6:d9:ee:7e:d3:f7:d1:b9:e4:
         55:43:fa:23:d1:36:17:7f:6c:9a:e7:5c:89:8c:0a:77:a0:ed:
         8f:19:82:03:6c:8d:d8:20:95:34:9e:8f:13:40:bf:1a:25:1a:
         2d:ec:1c:4e:76:94:a0:53:c8:68:ca:2d:c7:a6:d3:c5:11:f9:
         15:c0:1d:a1:43:97:b1:50:c4:3f:43:fd:13:c4:ef:ce:95:6e:
         e7:72:a6:56:72:99:67:fb:d4:57:da:26:23:8b:e0:81:b1:18:
         9e:1d:c9:3f:12:6f:02:a6:52:8f:78:45:ab:63:16:0b:4c:94:
         37:de:31:fe:17:44:2d:45:2b:62:67:0d:3c:20:74:8e:74:fa:
         cb:ca:d2:6a:82:1e:92:7e:e2:26:a9:65:c7:42:f2:76:2f:62:
         cb:b9:24:7b:4d:7a:fa:42:21:78:99:76:3d:ae:ee:db:e1:cc:
         13:fe:c7:78:a8:5e:ee:79:35:b1:77:e3:a3:80:15:96:26:34:
         bb:0d:3a:70:22:7f:81:87:d7:d7:86:80:08:e3:f5:d1:55:ec:
         38:27:6f:a7:81:52:c6:18:2f:e6:a1:43:92:da:68:96:9c:e8:
         6c:19:8d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----