Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3233382e302f32342d3234203d3e20323131383330.roa
File:                     3138352e3230322e3233382e302f32342d3234203d3e20323131383330.roa (raw, json)
Hash identifier:          GP+SA0ySJp9GqGXb9h252gPkQezfio2Xizw8/ov5YDY=
Subject key identifier:   70:BB:79:B3:1E:30:99:90:30:46:23:2F:5A:91:10:69:63:34:89:AE
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       3A26A3100C619F7040437A19DEA670B106D1ED7F
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3233382e302f32342d3234203d3e20323131383330.roa
Signing time:             Sat 13 Feb 2021 18:27:26 +0000
ROA not before:           Sat 13 Feb 2021 18:22:26 +0000
ROA not after:            Sat 12 Feb 2022 18:27:26 +0000
asID:                     211830
IP address blocks:        185.202.238.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:26:a3:10:0c:61:9f:70:40:43:7a:19:de:a6:70:b1:06:d1:ed:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Feb 13 18:22:26 2021 GMT
            Not After : Feb 12 18:27:26 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f9:30:b0:5f:7f:51:9a:0a:3b:b0:51:d1:cd:
                    5f:86:1b:06:0a:47:8b:55:07:03:01:13:19:6a:1d:
                    5c:74:d0:d9:55:ee:6d:60:d0:fe:a6:49:44:8a:75:
                    45:ab:d8:51:3c:cf:f9:4b:df:61:94:8a:22:42:1c:
                    d2:9f:04:2f:81:c3:c4:93:a0:ba:f4:2c:6e:1f:cb:
                    d2:70:b3:06:57:de:e4:a0:22:b7:87:61:a9:88:29:
                    a2:1f:52:cf:e4:26:8c:0e:04:38:5f:3e:c0:db:13:
                    84:18:5b:b3:0b:a0:e9:d8:e6:5d:cf:97:f7:41:92:
                    9c:de:3e:e6:36:70:c3:a9:1e:87:36:0f:a0:9e:53:
                    d6:5c:f4:e2:3b:fd:a5:73:51:38:fa:fb:5f:f1:ee:
                    90:c4:44:90:66:7e:15:10:cc:07:19:de:90:58:c8:
                    31:cf:84:93:92:93:9f:37:3b:92:f7:de:20:e2:63:
                    1e:86:17:2f:d8:a8:8c:74:65:f7:0b:1d:8c:54:32:
                    13:10:92:b6:c7:21:49:cc:99:05:63:0f:42:ef:63:
                    1d:d6:fd:db:8d:80:05:7b:8e:6b:3e:38:78:e9:f7:
                    ad:ef:29:6b:0a:31:33:fe:60:9f:c9:6f:40:b6:e4:
                    65:c7:f3:76:26:75:dd:74:00:eb:da:4e:8b:fa:a1:
                    07:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:BB:79:B3:1E:30:99:90:30:46:23:2F:5A:91:10:69:63:34:89:AE
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3233382e302f32342d3234203d3e20323131383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:2f:ff:c9:03:e9:5c:d0:5e:fa:70:1d:e8:3e:3c:58:74:00:
         8d:b1:66:76:57:a0:c9:12:91:b8:64:05:fc:39:0b:9f:f8:58:
         a1:32:40:b9:3e:dd:bf:b3:a0:6f:d1:f1:5c:ca:bc:f0:ea:c8:
         2b:b9:74:b6:79:3e:ff:d3:b0:21:80:c9:5c:13:2a:d0:44:5d:
         d2:7c:e6:f3:0a:65:69:3f:d1:27:7d:6f:e5:e0:65:6b:0c:83:
         3b:b7:85:66:b3:d0:3a:95:60:05:f8:9b:92:d8:15:13:70:25:
         4d:e5:bb:10:31:c3:87:1d:c7:6d:84:95:7f:de:3b:34:65:0f:
         b8:c8:fc:80:04:14:59:43:50:11:45:04:9f:e2:f2:63:aa:1b:
         f1:ca:dc:2a:4a:fa:42:86:0f:7d:44:94:e9:aa:64:56:34:a4:
         f4:87:e8:35:91:a7:e4:14:d1:f5:0c:3c:df:72:f8:5c:08:8f:
         12:ea:4c:47:2a:7b:e5:5f:0c:eb:f9:2b:f4:cc:44:9f:61:2e:
         84:2a:db:f7:c2:55:84:56:a7:7b:25:ea:e9:34:c8:86:30:58:
         48:6c:dc:33:59:f3:d4:9e:1d:1d:24:ae:95:3e:00:d0:72:25:
         19:af:08:53:2f:b5:c4:3a:aa:ce:1c:29:06:65:8f:8f:30:9d:
         b4:ed:66:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----