Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3233342e36392e302f32342d3234203d3e20323132373836.roa
File:                     3138352e3233342e36392e302f32342d3234203d3e20323132373836.roa (raw, json)
Hash identifier:          XlnOVuT43FIwZswil0fhsTV0k+eTZ+YDDwqzIDAn5C8=
Subject key identifier:   B7:F2:5B:3F:AE:C4:FB:AD:7C:92:41:BA:05:54:F0:BB:26:37:97:C8
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       37E7935A038230A812965DC696A8DC74A71BB291
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3233342e36392e302f32342d3234203d3e20323132373836.roa
Signing time:             Fri 27 Nov 2020 15:10:11 +0000
ROA not before:           Fri 27 Nov 2020 15:05:11 +0000
ROA not after:            Fri 26 Nov 2021 15:10:11 +0000
asID:                     212786
IP address blocks:        185.234.69.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:e7:93:5a:03:82:30:a8:12:96:5d:c6:96:a8:dc:74:a7:1b:b2:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Nov 27 15:05:11 2020 GMT
            Not After : Nov 26 15:10:11 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:48:f3:35:a5:f9:33:06:87:df:6b:ff:4f:57:
                    9c:83:58:eb:1a:9d:60:dc:77:38:51:8e:d6:52:ad:
                    57:52:03:8a:a0:ff:2f:45:e8:ed:ab:47:87:d4:38:
                    fc:9f:22:ed:5b:d2:45:c6:ca:76:f7:a1:ec:c9:79:
                    c8:2e:2b:b3:80:ad:dc:6c:ba:65:a9:f1:a3:5b:22:
                    42:ab:b9:0b:2c:29:54:c1:48:24:d4:a8:fd:52:2e:
                    83:5c:cb:fa:a9:e8:f1:9a:54:7f:5a:12:57:98:a7:
                    84:92:96:52:f1:15:a8:50:85:95:c7:bb:08:c1:b1:
                    3c:73:cd:77:80:c2:18:ad:04:b0:16:ad:10:1d:2f:
                    7c:eb:0d:4e:fa:f9:df:1e:54:71:59:67:e8:f7:68:
                    79:3c:15:a6:12:7b:eb:4d:ad:8f:ab:ce:73:62:ec:
                    9f:71:1a:24:44:1d:68:99:5b:47:13:da:29:0c:fb:
                    1a:61:ae:7f:b0:20:7f:5e:dd:47:fc:ff:22:09:3e:
                    15:05:d0:5a:41:71:ea:57:29:c8:15:18:70:0c:32:
                    f9:e2:dd:fd:52:ea:a0:55:c0:9a:bb:22:02:55:ff:
                    58:c9:dc:b5:5a:7e:a4:7d:6c:dd:94:38:19:ca:6c:
                    3b:bc:54:29:f2:5a:20:ed:60:f1:1e:ff:cb:2b:32:
                    c1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F2:5B:3F:AE:C4:FB:AD:7C:92:41:BA:05:54:F0:BB:26:37:97:C8
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3233342e36392e302f32342d3234203d3e20323132373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.234.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d6:c1:99:65:9a:e2:0d:3f:39:01:72:1e:ac:ff:64:ae:6c:a3:
         a4:6e:f0:d3:e0:ce:0e:1e:b9:19:3a:70:ee:37:1e:32:b0:62:
         1e:ce:c0:b9:8b:d6:8d:e5:aa:02:c6:16:cd:e4:cf:e3:e3:40:
         95:c8:cb:3c:a9:7a:2c:56:53:1a:ee:c3:3a:13:a3:97:ea:bf:
         49:a4:54:90:1f:98:73:b1:70:04:2d:64:48:ec:b6:3d:dc:00:
         94:1c:18:a0:f0:3f:e0:6d:85:7a:04:65:04:31:8b:c6:cb:a5:
         0a:db:29:a7:16:4b:30:89:c6:37:d0:56:f2:a6:fb:13:9b:39:
         30:9a:91:28:6b:3d:62:cc:88:62:3b:9b:49:80:5f:48:5e:4c:
         d2:62:38:5a:f3:1d:96:e7:f2:5a:5a:45:cb:37:c1:df:e8:eb:
         de:f0:64:c9:73:9f:f1:22:08:07:a4:ac:6d:e7:7c:71:0e:28:
         54:73:eb:97:3b:22:9a:96:a2:10:de:a0:59:8e:1d:8f:d0:16:
         96:4c:c9:b7:c0:b3:75:cc:9b:ad:c4:c9:7e:38:fa:6e:af:4c:
         c4:f3:ee:b1:75:ac:75:42:db:60:5b:17:e9:1a:84:3a:d2:af:
         f0:60:9c:4f:44:ac:24:f4:27:a0:98:f1:ce:19:f6:0d:59:6f:
         85:ac:40:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----