Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231332e38312e302f32342d3234203d3e203631333137.roa
File:                     3138352e3231332e38312e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          SsD7um+sJtrZJxPb2sLUNdWKNe3WM9DsiUP5X8umPy4=
Subject key identifier:   44:14:F9:68:E2:A0:A7:6F:C5:00:68:23:BD:75:E1:07:06:1D:E8:4D
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       73796B385BCB9D9C7EB5C80674C8F5D6B4B57104
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231332e38312e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 27 Nov 2020 15:10:14 +0000
ROA not before:           Fri 27 Nov 2020 15:05:14 +0000
ROA not after:            Fri 26 Nov 2021 15:10:14 +0000
asID:                     61317
IP address blocks:        185.213.81.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:79:6b:38:5b:cb:9d:9c:7e:b5:c8:06:74:c8:f5:d6:b4:b5:71:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Nov 27 15:05:14 2020 GMT
            Not After : Nov 26 15:10:14 2021 GMT
        Subject: CN=3082010A0282010100BFBE836A7A1F4CD50F3E624CA2D3F28FA36AFAF44B80EB99357CD413CC78F196177AE5AAB89F7AD4948F5D2010E9FDAA1A1BB3172F9A4AF11AE8C284A8B132FE13B1AFFF5D10130B01AACDA442E6A677F48D67C0D8DD86594D575FD41F248369FBDFFCA8AB5BA0323EE4D2C8A2D8153EF42BE9CE176EE51571F34EC450D05F0D4520931231107D53BB435DAE4F134C1C84E0AF4731696DCF420F48282FD698D4C33D78D6C57C15496E1E69DBB59247D95544C2884AA9F36929A22C2A767194B1875EFFADC64291C902668CB206A2CD26E1D44E9491204719956C11A594D0FB179841CF410FED3FD04AB75712EAFDA2A0C490561A542C2329DE01D932D83486C70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:be:83:6a:7a:1f:4c:d5:0f:3e:62:4c:a2:d3:
                    f2:8f:a3:6a:fa:f4:4b:80:eb:99:35:7c:d4:13:cc:
                    78:f1:96:17:7a:e5:aa:b8:9f:7a:d4:94:8f:5d:20:
                    10:e9:fd:aa:1a:1b:b3:17:2f:9a:4a:f1:1a:e8:c2:
                    84:a8:b1:32:fe:13:b1:af:ff:5d:10:13:0b:01:aa:
                    cd:a4:42:e6:a6:77:f4:8d:67:c0:d8:dd:86:59:4d:
                    57:5f:d4:1f:24:83:69:fb:df:fc:a8:ab:5b:a0:32:
                    3e:e4:d2:c8:a2:d8:15:3e:f4:2b:e9:ce:17:6e:e5:
                    15:71:f3:4e:c4:50:d0:5f:0d:45:20:93:12:31:10:
                    7d:53:bb:43:5d:ae:4f:13:4c:1c:84:e0:af:47:31:
                    69:6d:cf:42:0f:48:28:2f:d6:98:d4:c3:3d:78:d6:
                    c5:7c:15:49:6e:1e:69:db:b5:92:47:d9:55:44:c2:
                    88:4a:a9:f3:69:29:a2:2c:2a:76:71:94:b1:87:5e:
                    ff:ad:c6:42:91:c9:02:66:8c:b2:06:a2:cd:26:e1:
                    d4:4e:94:91:20:47:19:95:6c:11:a5:94:d0:fb:17:
                    98:41:cf:41:0f:ed:3f:d0:4a:b7:57:12:ea:fd:a2:
                    a0:c4:90:56:1a:54:2c:23:29:de:01:d9:32:d8:34:
                    86:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:14:F9:68:E2:A0:A7:6F:C5:00:68:23:BD:75:E1:07:06:1D:E8:4D
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231332e38312e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.213.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:e1:49:ae:73:51:a2:1b:be:61:31:a0:72:d6:46:b0:49:97:
         e5:ba:9e:18:d0:b2:8e:50:12:7c:11:82:95:4d:c1:e9:b1:fd:
         6b:07:4c:00:5b:e5:39:d8:ef:ba:e0:03:33:28:62:de:0c:df:
         a0:ac:c2:7b:cf:d7:8f:1d:89:ca:25:08:7b:91:09:81:97:ea:
         d1:ba:9b:2f:04:c1:65:59:53:2c:ea:2d:98:dc:4b:8c:31:42:
         c0:d5:80:36:94:58:2d:cb:af:d0:b5:6d:e2:27:ec:02:6c:5a:
         ea:22:52:92:ca:3c:84:ca:f2:0a:5e:97:d3:db:f6:dc:85:83:
         98:c9:02:2e:b1:5f:98:5d:c0:16:4c:7f:70:a3:72:b6:15:be:
         d2:78:e0:d7:9c:76:02:76:be:6d:e3:52:b7:df:bc:53:06:d8:
         2a:90:90:3c:ae:e2:a4:34:83:f1:c0:c1:c3:9d:9a:55:27:37:
         fc:24:43:80:d3:c8:5a:eb:d1:86:8e:1f:25:41:2c:b9:d3:44:
         49:0c:30:7f:02:03:99:82:c8:ec:fc:5f:61:ae:56:21:69:0a:
         2e:70:b5:1f:d8:bd:04:60:00:4f:4e:54:d4:9f:c9:20:d0:58:
         ea:51:62:68:5a:19:76:10:20:2d:10:75:0d:a6:33:67:1a:7b:
         3a:2f:53:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----