Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234312e3134382e302f32342d3234203d3e2037383537.roa
File:                     3138352e3234312e3134382e302f32342d3234203d3e2037383537.roa (raw, json)
Hash identifier:          1nPlEqjL2oOIeV0apCf0h8yC6whUFyfkCxUM1veKLSc=
Subject key identifier:   93:A0:0C:B0:2A:05:20:38:E1:04:3C:73:8B:BE:3B:31:5F:AF:96:5F
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       63547519C955FABDCD82EDA7DD200529E594F0F7
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234312e3134382e302f32342d3234203d3e2037383537.roa
Signing time:             Fri 27 Nov 2020 15:10:16 +0000
ROA not before:           Fri 27 Nov 2020 15:05:16 +0000
ROA not after:            Fri 26 Nov 2021 15:10:16 +0000
asID:                     7857
IP address blocks:        185.241.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:54:75:19:c9:55:fa:bd:cd:82:ed:a7:dd:20:05:29:e5:94:f0:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Nov 27 15:05:16 2020 GMT
            Not After : Nov 26 15:10:16 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:31:06:50:e9:f7:5d:fd:14:1a:8a:35:b8:6b:
                    7b:a3:70:a8:60:ef:c2:6d:eb:fc:38:33:5a:7d:cd:
                    a1:05:b9:2c:bc:d9:68:76:0e:be:66:c4:f7:42:5f:
                    89:cf:c4:6b:06:40:70:97:8e:26:76:b4:1f:c5:a5:
                    3a:b5:86:8f:08:75:3a:f8:20:0d:e5:c7:df:77:fc:
                    b3:f0:80:49:f2:c5:23:13:70:4a:15:91:d0:e1:01:
                    aa:36:2c:67:33:2d:ad:d0:36:78:71:ac:dc:d1:56:
                    4a:e8:3b:0b:7d:0d:e3:d6:be:5a:e6:5c:b0:55:b9:
                    51:91:b9:31:5e:0f:46:d4:75:bb:93:6a:b5:87:03:
                    57:89:6e:3e:42:5d:b3:8e:e0:6f:5a:1c:2d:a5:2a:
                    51:f8:55:c6:0f:d6:11:8a:4b:ae:a9:ae:4f:d3:4c:
                    a3:b2:a0:ea:11:94:72:b2:7d:4d:1c:df:69:eb:3b:
                    cd:37:2e:25:ca:d3:9c:6c:f7:fe:1d:cd:7f:9a:ce:
                    3d:8c:9c:d6:60:2a:f5:3c:69:ee:7b:62:59:bf:d8:
                    43:39:9a:9e:bd:0b:bf:0b:5e:eb:f7:45:61:0e:70:
                    29:25:8f:af:0e:93:16:bd:ee:55:c9:8c:a1:20:92:
                    c3:09:12:97:21:8a:71:52:93:82:5c:73:50:30:a0:
                    b7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A0:0C:B0:2A:05:20:38:E1:04:3C:73:8B:BE:3B:31:5F:AF:96:5F
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234312e3134382e302f32342d3234203d3e2037383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.241.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:44:c2:8a:66:df:03:52:4c:aa:18:c3:c1:d7:54:c5:cd:56:
         59:c1:99:3a:0c:8c:24:d9:38:37:ef:da:0b:87:d0:86:43:dc:
         a8:6c:72:35:09:c9:25:30:70:a3:89:3f:38:de:ab:3b:35:a7:
         14:35:c8:73:e3:5a:78:64:9b:c9:fe:2a:46:af:54:93:24:cf:
         ad:ad:3d:2d:21:49:ea:ca:3e:c9:d6:cf:8d:b9:b2:1a:93:b9:
         a5:01:bd:17:bc:a0:f7:2c:3e:0a:98:3d:9c:27:c0:08:52:84:
         dd:50:20:b5:9d:ee:c2:34:07:6f:51:e1:b2:39:dd:b6:8d:29:
         57:ae:85:e6:e2:7b:fd:f9:6d:ef:c4:ce:fa:8b:40:7b:89:d6:
         5f:55:e5:a1:5a:5b:7a:91:5e:67:c5:aa:8a:6c:fb:53:e7:f3:
         e7:fb:89:8c:0a:46:b9:e5:cf:78:41:8d:6e:59:11:68:a4:86:
         36:c6:47:98:a6:b2:a0:9c:e0:2f:c8:19:cd:09:bb:a3:50:6e:
         bb:71:d4:67:38:96:9b:80:2f:85:aa:0b:12:3a:18:60:be:0b:
         d5:06:76:1e:81:04:46:e1:49:d6:f4:57:ed:c9:ea:2e:a5:c9:
         59:36:89:3c:f5:07:e1:6b:b6:cd:2b:23:e4:18:d4:e5:5c:18:
         90:79:b4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----