Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3233392e302f32342d3234203d3e203234393631.roa
File:                     3138352e3230322e3233392e302f32342d3234203d3e203234393631.roa (raw, json)
Hash identifier:          /4aY4AvW/j+FCCJupCzR/ntGHOcBkHyd90/Id5DBymk=
Subject key identifier:   B9:E7:AF:80:EE:4B:0A:A8:7C:6D:47:59:F1:D8:57:FA:CF:60:89:CD
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       061638F82ED27AE5413E9C1E211E7983383DA973
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3233392e302f32342d3234203d3e203234393631.roa
Signing time:             Mon 22 Feb 2021 10:58:39 +0000
ROA not before:           Mon 22 Feb 2021 10:53:39 +0000
ROA not after:            Mon 21 Feb 2022 10:58:39 +0000
asID:                     24961
IP address blocks:        185.202.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:16:38:f8:2e:d2:7a:e5:41:3e:9c:1e:21:1e:79:83:38:3d:a9:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Feb 22 10:53:39 2021 GMT
            Not After : Feb 21 10:58:39 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:06:43:1a:62:13:a5:70:bf:3b:b2:5d:55:0a:
                    2a:a0:bd:08:ca:f9:4e:80:46:06:3a:78:62:cd:8a:
                    8c:ca:5f:e4:fa:ce:4b:e1:ba:4c:57:11:e5:22:48:
                    70:2f:ea:93:94:c4:82:56:98:60:b8:28:47:56:12:
                    1b:8d:8e:5d:fd:10:54:77:03:14:44:8c:6d:4b:63:
                    7e:1e:03:12:ad:6d:a2:af:b4:27:57:1b:32:25:35:
                    f0:8a:18:56:49:1b:09:9b:a6:d0:db:95:0f:a0:b0:
                    11:f6:11:bb:29:9f:12:22:0b:c9:d1:1e:55:2b:65:
                    df:f9:f7:a9:fc:7c:a4:ec:bd:c5:fe:ab:0f:79:fd:
                    c1:4d:95:cd:d5:58:23:2e:b3:8e:98:2d:21:1a:83:
                    7d:57:38:52:8a:af:9d:d1:f5:c4:9c:6e:93:38:33:
                    b4:15:06:ec:78:36:86:dc:0c:f0:a4:49:76:99:10:
                    1b:71:b9:ce:af:b5:93:6a:c5:eb:b4:b0:43:13:c1:
                    42:1f:89:9f:87:0e:f0:37:3d:94:b7:ca:d1:25:e3:
                    c9:4f:17:06:19:b8:2f:84:d9:0f:d2:25:ad:a2:76:
                    36:6c:8a:98:47:e5:3e:60:ce:66:b5:a2:2f:d8:40:
                    10:37:ea:60:44:9c:73:4b:5a:a1:e5:fc:32:43:4b:
                    89:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E7:AF:80:EE:4B:0A:A8:7C:6D:47:59:F1:D8:57:FA:CF:60:89:CD
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3233392e302f32342d3234203d3e203234393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:74:b4:d3:c6:ae:8b:67:cd:3e:8b:4e:78:b0:f3:d4:e2:1c:
         e4:98:0d:d5:bc:ef:e2:cb:f0:5a:5b:1c:9c:69:a7:19:b0:09:
         dc:70:da:c5:0e:78:02:c8:87:45:fd:0d:df:31:e8:7e:d4:17:
         be:11:cd:26:39:90:54:d2:40:6f:79:ae:ed:44:d5:a1:96:24:
         46:81:d8:ab:eb:63:61:1e:44:8e:98:d5:48:63:d5:c8:e1:63:
         48:38:2a:12:4e:5d:a2:9e:1e:7b:12:05:19:55:98:08:76:df:
         02:f2:c0:20:fc:ee:bb:db:84:e3:37:8f:ee:86:e9:70:34:5b:
         2b:8d:7f:b6:80:5d:25:be:93:cf:07:5a:93:c1:44:cb:e1:d8:
         58:44:19:af:ff:7c:fc:f2:ee:e8:9e:7c:e9:94:cb:71:c5:94:
         d3:1e:e2:b3:98:df:85:46:40:48:98:2a:d6:d8:c2:23:a6:24:
         12:12:10:d6:e6:57:0c:85:db:75:ad:4a:8b:fe:84:24:bc:34:
         af:ad:e5:3d:0e:76:6a:c3:84:61:08:9c:05:09:ea:80:f4:6f:
         33:54:ab:bc:61:21:96:eb:6f:f5:92:bb:c6:f6:67:80:4d:48:
         15:e0:fd:a9:06:43:4e:8f:34:9e:e5:68:d3:0c:c8:b4:20:a2:
         3f:99:9d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----