Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3233392e302f32342d3234203d3e20323132363330.roa
File:                     3138352e3230322e3233392e302f32342d3234203d3e20323132363330.roa (raw, json)
Hash identifier:          bkIn6sS0sKZh36Vzmk4balBq9KOtcNct/aHyGK4GuzA=
Subject key identifier:   99:EC:B9:8A:CA:7E:BD:1C:4C:88:B4:3E:41:8D:C5:97:F1:D5:AC:16
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       1DDF82D4F5468CC325A8A1361BEC737D9020B0CB
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3233392e302f32342d3234203d3e20323132363330.roa
Signing time:             Fri 27 Nov 2020 15:10:12 +0000
ROA not before:           Fri 27 Nov 2020 15:05:12 +0000
ROA not after:            Fri 26 Nov 2021 15:10:12 +0000
asID:                     212630
IP address blocks:        185.202.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:df:82:d4:f5:46:8c:c3:25:a8:a1:36:1b:ec:73:7d:90:20:b0:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Nov 27 15:05:12 2020 GMT
            Not After : Nov 26 15:10:12 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5c:eb:21:57:91:4a:30:cd:dd:41:d2:a9:be:
                    89:4f:03:3d:a3:4a:63:a5:cc:46:81:a4:b8:cf:d4:
                    0c:90:9d:11:df:a1:3c:26:67:85:5c:fd:32:a1:f8:
                    b7:f3:a0:f0:f3:07:6d:3f:98:d4:44:45:a5:11:21:
                    a9:3d:10:ae:65:14:c2:92:c7:10:ee:6c:c3:fd:4a:
                    09:18:a4:d2:00:2f:94:04:70:43:4e:7a:57:9f:43:
                    04:4b:07:99:7a:0e:5f:f7:18:11:ad:61:6b:79:85:
                    40:43:fe:4a:01:30:9c:02:5e:6c:b5:92:1e:7d:01:
                    24:48:a6:61:a7:fa:6a:b9:7e:54:c2:9e:31:6f:f9:
                    2c:63:2d:5e:10:72:82:2a:3c:35:00:25:a4:d6:ab:
                    c0:78:6c:3e:ef:3b:71:61:9f:67:f4:d5:9e:25:0e:
                    08:d2:f0:07:d0:ca:c6:f7:0a:97:cb:06:9a:4a:84:
                    4a:c2:c0:0c:ee:85:42:6d:ef:af:69:63:19:62:28:
                    cb:c4:93:d2:50:a0:ed:73:89:70:88:b1:be:3f:16:
                    ab:e6:ef:d8:9d:7b:07:ff:bb:ba:4b:bc:e5:22:a1:
                    1d:a8:43:0f:73:42:fe:25:b1:7e:c4:18:81:0e:6e:
                    c8:dd:b0:7a:c7:ae:db:07:de:77:fb:f5:ee:31:42:
                    9e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EC:B9:8A:CA:7E:BD:1C:4C:88:B4:3E:41:8D:C5:97:F1:D5:AC:16
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3233392e302f32342d3234203d3e20323132363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:e8:f5:25:6e:bc:5c:50:38:ec:9d:25:75:36:e0:71:79:f8:
         0a:5b:77:ff:56:b4:5e:a8:31:54:18:80:00:01:85:31:a9:91:
         12:c3:34:95:f0:42:2c:ee:b2:21:38:1f:70:b0:f8:79:7b:95:
         98:a6:0c:9c:5b:a0:97:6c:e0:d3:14:f1:09:fb:96:70:f2:87:
         bc:7a:65:60:a0:84:4d:1e:dd:5e:be:e2:33:a2:04:3b:39:c0:
         df:e9:f9:eb:b2:62:9c:8e:d1:a2:40:90:f1:8c:95:19:d0:2d:
         99:6f:ef:7f:2c:86:53:a3:90:2b:20:bb:80:84:d1:96:90:51:
         fa:15:99:ce:86:27:61:01:04:84:e9:21:d2:e1:6b:06:a0:84:
         2e:20:48:78:ce:87:3f:67:9e:97:73:26:b2:c5:ae:c5:29:25:
         7b:10:94:68:a7:05:86:c8:44:40:50:fc:dd:bc:e1:a2:5d:4d:
         3f:e5:14:cb:11:b7:e2:56:95:b7:df:44:f3:c3:58:3b:a7:7f:
         1c:e3:56:65:b8:d0:93:99:21:13:cd:53:5d:95:48:21:11:c6:
         53:80:62:3f:7e:f9:16:1a:58:8c:0c:ac:c4:ea:0d:ed:0e:14:
         69:b7:45:98:f6:fe:0a:e3:10:c5:99:be:b9:0c:35:eb:c4:03:
         4b:03:03:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----