Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3233392e302f32342d3234203d3e20323132303737.roa
File:                     3138352e3230322e3233392e302f32342d3234203d3e20323132303737.roa (raw, json)
Hash identifier:          l7MP6xjrBZugjoApXzIRWBxX5Ra1yuouhCxaM0lZE9U=
Subject key identifier:   FF:8C:5A:43:BF:B3:BE:77:76:E0:BC:73:A8:CC:76:EB:D3:F9:D0:94
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       3865806B577504F6B89D7F844946766806D7E0A9
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3233392e302f32342d3234203d3e20323132303737.roa
Signing time:             Thu 31 Dec 2020 18:51:37 +0000
ROA not before:           Thu 31 Dec 2020 18:46:37 +0000
ROA not after:            Thu 30 Dec 2021 18:51:37 +0000
asID:                     212077
IP address blocks:        185.202.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:65:80:6b:57:75:04:f6:b8:9d:7f:84:49:46:76:68:06:d7:e0:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Dec 31 18:46:37 2020 GMT
            Not After : Dec 30 18:51:37 2021 GMT
        Subject: CN=3082010A0282010100C3382DE9D229D085703DA7EE217AC60127FFE79593D4EE7BF896D43E0C63F2C6E5809F7428623DE498BC719F17CD6AA4598682267442B7FA9A012BC3F52799A2791C78D6E2DCFEDFCACAA1FD9A29EF96A0E977FF6EC8ADC257513FCC6AA9044F4387932D1BB4F49EC88217A4391E031434CDB71A2979E374AB97FF8A05C6B55390FE9E7BACDC1FF41F74F775706C6E978AF5008809AE93A81EDCF3D4142273B223CD33F9A6F125F9FFE5C3C4289940F38A9C979CD4B6B005DCD5EBDFE02D2A91AE6919011807B616790499D97A696D31AB189626CA16F757C0396F2D720FA6AA8444DE6D3BD782FE2712FBB52F3EDA7DF5DDD6A09F3D20BD78740D0A79547D7D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:38:2d:e9:d2:29:d0:85:70:3d:a7:ee:21:7a:
                    c6:01:27:ff:e7:95:93:d4:ee:7b:f8:96:d4:3e:0c:
                    63:f2:c6:e5:80:9f:74:28:62:3d:e4:98:bc:71:9f:
                    17:cd:6a:a4:59:86:82:26:74:42:b7:fa:9a:01:2b:
                    c3:f5:27:99:a2:79:1c:78:d6:e2:dc:fe:df:ca:ca:
                    a1:fd:9a:29:ef:96:a0:e9:77:ff:6e:c8:ad:c2:57:
                    51:3f:cc:6a:a9:04:4f:43:87:93:2d:1b:b4:f4:9e:
                    c8:82:17:a4:39:1e:03:14:34:cd:b7:1a:29:79:e3:
                    74:ab:97:ff:8a:05:c6:b5:53:90:fe:9e:7b:ac:dc:
                    1f:f4:1f:74:f7:75:70:6c:6e:97:8a:f5:00:88:09:
                    ae:93:a8:1e:dc:f3:d4:14:22:73:b2:23:cd:33:f9:
                    a6:f1:25:f9:ff:e5:c3:c4:28:99:40:f3:8a:9c:97:
                    9c:d4:b6:b0:05:dc:d5:eb:df:e0:2d:2a:91:ae:69:
                    19:01:18:07:b6:16:79:04:99:d9:7a:69:6d:31:ab:
                    18:96:26:ca:16:f7:57:c0:39:6f:2d:72:0f:a6:aa:
                    84:44:de:6d:3b:d7:82:fe:27:12:fb:b5:2f:3e:da:
                    7d:f5:dd:d6:a0:9f:3d:20:bd:78:74:0d:0a:79:54:
                    7d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:8C:5A:43:BF:B3:BE:77:76:E0:BC:73:A8:CC:76:EB:D3:F9:D0:94
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3233392e302f32342d3234203d3e20323132303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:7d:61:88:ea:c4:39:0d:d9:40:cb:08:60:c6:80:70:0e:ec:
         de:50:59:3d:b7:09:9c:6b:40:48:4c:7c:c0:4b:c1:78:a5:4a:
         1d:53:16:85:61:50:bb:da:ad:55:8c:94:b8:be:53:76:7d:7c:
         3c:17:b4:76:3c:40:51:35:56:9f:be:c2:e5:9d:d2:97:7f:2b:
         3b:a1:d3:d7:3e:a2:f7:8c:9a:ef:b1:c6:7d:be:96:94:74:8e:
         1f:61:a7:f7:e1:28:be:74:3f:e3:84:cc:7f:21:91:15:15:0a:
         7e:47:27:24:0d:0d:86:da:ae:0d:b9:71:02:35:1d:2a:49:fe:
         be:7a:aa:50:2f:bb:d2:64:ba:03:d7:8e:1b:84:f2:79:c9:d6:
         55:c9:75:85:07:d5:3a:10:5a:bd:9a:42:2d:d3:0e:36:78:f2:
         32:12:d3:fb:8b:e2:2c:d6:98:df:86:35:da:0e:02:79:6e:09:
         49:a2:5e:56:14:a0:5d:c8:77:07:d8:f3:5a:f3:06:2c:3a:78:
         c8:5b:ef:4d:2b:67:82:19:3c:f5:fd:55:58:5f:de:9d:86:b3:
         9d:e6:0a:87:9f:cf:5c:74:09:ec:f3:70:4a:45:eb:e2:55:7c:
         35:ed:c6:eb:07:9c:ef:07:93:90:48:d1:c2:65:cf:31:b1:aa:
         72:43:d7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----