Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3233382e302f32342d3234203d3e203134363138.roa
File:                     3138352e3230322e3233382e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          lF8XMwU4l26lxHDQprV7lhpoOQBThQePGGVDreH09Hs=
Subject key identifier:   74:1E:CA:65:62:D1:64:8D:0E:87:72:F9:B1:B5:12:12:39:F1:55:7E
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       39E51D6544ACDACEB43D0100EEA66551A69E5F19
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3233382e302f32342d3234203d3e203134363138.roa
Signing time:             Thu 18 Feb 2021 17:39:34 +0000
ROA not before:           Thu 18 Feb 2021 17:34:34 +0000
ROA not after:            Thu 17 Feb 2022 17:39:34 +0000
asID:                     14618
IP address blocks:        185.202.238.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e5:1d:65:44:ac:da:ce:b4:3d:01:00:ee:a6:65:51:a6:9e:5f:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Feb 18 17:34:34 2021 GMT
            Not After : Feb 17 17:39:34 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:33:5d:ab:7e:5c:21:fd:ae:ac:78:11:76:8b:
                    f5:05:4f:97:64:ba:65:fb:28:fb:f2:2a:5d:e4:d9:
                    d2:e2:29:52:5f:e3:46:11:b6:1f:ad:6c:d6:27:7a:
                    52:2c:0e:0c:54:68:f0:ca:03:ad:24:38:fb:74:99:
                    bc:6c:ad:a5:c4:62:65:64:19:5b:a9:e3:76:b0:d9:
                    bb:7c:5a:60:29:ba:17:24:69:5f:d1:36:c8:28:83:
                    91:77:e7:62:65:50:98:02:e3:2f:ef:67:2d:88:bb:
                    4f:8c:8b:3a:06:ab:d9:1e:f8:bc:37:c1:e9:5c:37:
                    1e:50:78:df:4f:17:6d:8c:26:25:f3:09:99:6e:71:
                    b9:57:18:8b:ee:bc:49:13:4f:b3:50:3c:91:d1:19:
                    04:a0:83:d6:ed:19:e0:9c:9d:9a:e2:2c:53:1c:b4:
                    0f:56:30:5d:46:41:41:46:da:d9:fd:9d:76:b1:c7:
                    ed:c7:30:36:3b:02:40:54:1f:ee:f4:1a:1d:3d:21:
                    7d:98:da:70:15:9f:f5:05:50:ba:62:0c:be:e5:65:
                    38:02:cf:e5:ce:f0:58:47:7a:97:9d:97:00:52:91:
                    e3:1a:9f:30:38:a0:7b:f1:7e:69:4f:37:55:39:b6:
                    10:d6:d9:93:d4:f4:9e:2e:39:2c:11:f7:6b:d3:dd:
                    41:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:1E:CA:65:62:D1:64:8D:0E:87:72:F9:B1:B5:12:12:39:F1:55:7E
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3233382e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:35:94:3e:f4:f0:77:90:4a:90:24:43:76:8c:37:80:16:2f:
         03:28:70:2d:53:89:cf:e0:2b:d3:db:4f:45:92:53:ac:99:74:
         ae:00:a2:37:99:af:c3:c1:f6:93:95:f2:76:49:c5:5e:75:f1:
         8b:57:a3:2c:b5:31:a4:af:05:b5:d9:ad:76:39:a2:d3:95:a8:
         a4:66:42:a4:69:62:e6:9e:54:d8:9f:de:d0:14:fe:8a:00:4e:
         9b:44:24:e9:c3:a1:85:5a:11:49:41:c5:be:81:e6:8c:12:da:
         fc:f6:39:bc:09:d0:32:b1:d8:87:8c:8d:8e:45:3b:99:f4:9e:
         52:e6:10:08:a7:52:c0:81:a2:70:a9:5a:f6:0b:56:13:4b:4e:
         d4:1e:7b:5e:13:c0:eb:b6:7e:52:94:41:df:7d:24:db:94:c5:
         f0:b7:47:88:d4:bb:ba:10:55:77:9c:d8:d3:e1:2e:a0:38:07:
         8d:77:26:d4:26:ad:ea:db:d2:3f:fc:fd:94:a7:ba:49:66:09:
         23:49:d5:3d:7f:c1:3f:55:ab:73:10:92:31:66:06:ae:fa:3b:
         46:92:f3:1d:fb:f4:9b:98:a0:20:bc:c1:43:36:3c:36:35:f7:
         9e:62:1b:a2:d3:6c:13:7c:c8:ad:0e:3e:7f:c3:e2:41:3f:4d:
         33:92:e8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----