Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230372e3235302e302f32342d3234203d3e203139333138.roa
File:                     3138352e3230372e3235302e302f32342d3234203d3e203139333138.roa (raw, json)
Hash identifier:          xkzS6CTJoZXVbsbGxhtem2crCjs63ZeG/J52+86NYwM=
Subject key identifier:   24:90:85:DF:7A:A5:F1:28:66:FF:71:F9:22:A7:65:AE:AF:54:65:9E
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       3E9B67E5F4A50C390FC05D93C3725F93CCAEE7A6
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230372e3235302e302f32342d3234203d3e203139333138.roa
Signing time:             Fri 27 Nov 2020 15:10:14 +0000
ROA not before:           Fri 27 Nov 2020 15:05:14 +0000
ROA not after:            Fri 26 Nov 2021 15:10:14 +0000
asID:                     19318
IP address blocks:        185.207.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:9b:67:e5:f4:a5:0c:39:0f:c0:5d:93:c3:72:5f:93:cc:ae:e7:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Nov 27 15:05:14 2020 GMT
            Not After : Nov 26 15:10:14 2021 GMT
        Subject: CN=3082010A0282010100CC02DD4F7E4BE2B1D462A445A0215CAA8AD43EEE153D7D331D82417EB87C50E5C65D9086C0F8671BB1D2AE9E70AD736AF95ED99AF4B58A92BAC1F3D1653F0590486FCC384AAF9AB40465405367A55A63CBA5CED09A2E80D4182BFF8DF6403F82F066D74A26C06F3009B2A5EFCA24897AC0F8DD33A3060323030D8C3BE2379875E104000EBAE1DC571F016F639A26DB425B72250022637748B7C67ED7F1D665EB6788E3DF0796EB4E278334EBA4A85076E2460C69ECA3714E32EE25E34CCBEC5DDC4E517A40ABD1862A3EC3E0700B75C01C95ED126EDFFF0816A5A076CAC522EBDC8E518E4FB4434C3A4756204A4BB3F1EA8F30425AD82990F45BA2E438F403FB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:02:dd:4f:7e:4b:e2:b1:d4:62:a4:45:a0:21:
                    5c:aa:8a:d4:3e:ee:15:3d:7d:33:1d:82:41:7e:b8:
                    7c:50:e5:c6:5d:90:86:c0:f8:67:1b:b1:d2:ae:9e:
                    70:ad:73:6a:f9:5e:d9:9a:f4:b5:8a:92:ba:c1:f3:
                    d1:65:3f:05:90:48:6f:cc:38:4a:af:9a:b4:04:65:
                    40:53:67:a5:5a:63:cb:a5:ce:d0:9a:2e:80:d4:18:
                    2b:ff:8d:f6:40:3f:82:f0:66:d7:4a:26:c0:6f:30:
                    09:b2:a5:ef:ca:24:89:7a:c0:f8:dd:33:a3:06:03:
                    23:03:0d:8c:3b:e2:37:98:75:e1:04:00:0e:ba:e1:
                    dc:57:1f:01:6f:63:9a:26:db:42:5b:72:25:00:22:
                    63:77:48:b7:c6:7e:d7:f1:d6:65:eb:67:88:e3:df:
                    07:96:eb:4e:27:83:34:eb:a4:a8:50:76:e2:46:0c:
                    69:ec:a3:71:4e:32:ee:25:e3:4c:cb:ec:5d:dc:4e:
                    51:7a:40:ab:d1:86:2a:3e:c3:e0:70:0b:75:c0:1c:
                    95:ed:12:6e:df:ff:08:16:a5:a0:76:ca:c5:22:eb:
                    dc:8e:51:8e:4f:b4:43:4c:3a:47:56:20:4a:4b:b3:
                    f1:ea:8f:30:42:5a:d8:29:90:f4:5b:a2:e4:38:f4:
                    03:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:90:85:DF:7A:A5:F1:28:66:FF:71:F9:22:A7:65:AE:AF:54:65:9E
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230372e3235302e302f32342d3234203d3e203139333138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.207.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:de:db:99:ba:c6:cd:de:cf:db:e0:5e:c6:a3:cb:24:99:b6:
         06:51:aa:aa:e0:36:d9:59:41:c6:13:56:59:d4:3c:0b:e4:9d:
         e3:ce:cb:55:1f:75:37:6a:26:9f:09:55:ba:a5:af:af:eb:3e:
         d9:a0:4c:64:23:ca:48:22:88:a1:f7:85:7e:53:ad:51:3d:21:
         97:0f:d0:8f:a2:40:5f:6d:80:6e:c5:11:0f:48:28:ba:94:96:
         2a:c1:9d:e0:5e:38:ab:9a:00:fb:27:08:fd:68:95:e4:91:0a:
         79:46:d8:98:70:c9:e6:b4:12:75:6a:ff:9b:8b:a9:ce:0f:02:
         99:77:c6:08:83:0f:b6:4a:a0:12:e0:d1:6d:18:ff:dc:c7:f2:
         cd:b3:b5:7e:1d:77:13:b2:e6:ed:b1:c8:a2:87:60:64:91:99:
         28:b4:23:95:7a:60:c6:06:ab:b4:6a:10:b9:4e:fd:94:19:5b:
         4a:c9:89:3e:14:fd:20:30:2e:8f:f1:13:f7:50:26:f0:07:ec:
         54:e0:d7:5a:c3:ff:9f:e9:26:4c:3e:93:8c:6c:9f:6d:75:6f:
         22:49:73:fa:b5:b2:eb:3e:07:91:c9:58:a4:b4:f8:16:9f:42:
         ed:30:65:56:bd:a5:ba:b6:ce:81:04:49:5a:97:32:e2:c8:85:
         c3:0a:96:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----