Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234352e3138322e302f32342d3234203d3e20333938343435.roa
File:                     3138352e3234352e3138322e302f32342d3234203d3e20333938343435.roa (raw, json)
Hash identifier:          WZl/2Xdg3qDokIVD2aAc8HIMSkimuz2fe36MLK7RxQw=
Subject key identifier:   62:49:73:24:56:6F:BA:77:39:8A:06:2F:53:D8:03:81:9C:A6:D7:34
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       59B4E2FFBE318D4E0B80D647DD43BFE3069A581F
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234352e3138322e302f32342d3234203d3e20333938343435.roa
Signing time:             Fri 27 Nov 2020 15:10:13 +0000
ROA not before:           Fri 27 Nov 2020 15:05:13 +0000
ROA not after:            Fri 26 Nov 2021 15:10:13 +0000
asID:                     398445
IP address blocks:        185.245.182.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b4:e2:ff:be:31:8d:4e:0b:80:d6:47:dd:43:bf:e3:06:9a:58:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Nov 27 15:05:13 2020 GMT
            Not After : Nov 26 15:10:13 2021 GMT
        Subject: CN=3082010A0282010100A6156FD6ED7A7EDBA6C80B2C1FD4A025D804769E2203FD9DAF8B589CE090980DA291B106001D29376D3773F89086AE05886C3FE154D85255FD93A45EF597AAF0D8CAAF76914688DEE1AEE99F9444005E0453602AE99D74A394B6C5DCF4AD36002D6C04E7E1DF095C05A799796791D5F00EF7C0673291BEC0BC2D2D08C5F7799764427301CC286CC73E58AEC9CF4028AE38F103375807B1F2672B467F2758F75FB72802EC27C8AC309F15C953AF1B86F5027CD36EED1D59E5524A259433EB83FEABADC10A7D712897D88561879B274D4D6DE8CCE8C4132D06B72EABD0EDC58E55761B79D276B17F4B05B7AC441C80FCD3A5AAC1EEFAFA1570698CF8ED7EF3FBEF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:15:6f:d6:ed:7a:7e:db:a6:c8:0b:2c:1f:d4:
                    a0:25:d8:04:76:9e:22:03:fd:9d:af:8b:58:9c:e0:
                    90:98:0d:a2:91:b1:06:00:1d:29:37:6d:37:73:f8:
                    90:86:ae:05:88:6c:3f:e1:54:d8:52:55:fd:93:a4:
                    5e:f5:97:aa:f0:d8:ca:af:76:91:46:88:de:e1:ae:
                    e9:9f:94:44:00:5e:04:53:60:2a:e9:9d:74:a3:94:
                    b6:c5:dc:f4:ad:36:00:2d:6c:04:e7:e1:df:09:5c:
                    05:a7:99:79:67:91:d5:f0:0e:f7:c0:67:32:91:be:
                    c0:bc:2d:2d:08:c5:f7:79:97:64:42:73:01:cc:28:
                    6c:c7:3e:58:ae:c9:cf:40:28:ae:38:f1:03:37:58:
                    07:b1:f2:67:2b:46:7f:27:58:f7:5f:b7:28:02:ec:
                    27:c8:ac:30:9f:15:c9:53:af:1b:86:f5:02:7c:d3:
                    6e:ed:1d:59:e5:52:4a:25:94:33:eb:83:fe:ab:ad:
                    c1:0a:7d:71:28:97:d8:85:61:87:9b:27:4d:4d:6d:
                    e8:cc:e8:c4:13:2d:06:b7:2e:ab:d0:ed:c5:8e:55:
                    76:1b:79:d2:76:b1:7f:4b:05:b7:ac:44:1c:80:fc:
                    d3:a5:aa:c1:ee:fa:fa:15:70:69:8c:f8:ed:7e:f3:
                    fb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:49:73:24:56:6F:BA:77:39:8A:06:2F:53:D8:03:81:9C:A6:D7:34
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234352e3138322e302f32342d3234203d3e20333938343435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.245.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:7d:2c:cd:42:ef:df:8c:36:57:4f:51:65:dd:31:72:42:c3:
         ba:0e:40:33:b3:58:2a:25:2b:39:ba:54:3d:9e:a5:d9:47:f2:
         4f:d5:e8:8a:91:2d:d1:59:73:57:a7:a2:85:25:2a:e2:16:09:
         39:a1:b1:8b:fb:8c:6e:f0:8e:a4:1c:e1:96:77:ed:51:ec:e4:
         1b:57:7a:66:2a:90:c2:3b:e6:51:d5:2e:a0:a8:5b:b1:38:8b:
         70:63:35:cf:f8:b2:e0:36:8a:ab:f7:90:55:26:fc:39:2e:a4:
         d9:2c:57:6c:7c:7e:9d:e1:4d:bc:8d:20:de:c2:91:04:7c:27:
         ca:f7:ec:79:46:99:b3:24:d2:9c:cb:34:67:3b:65:7f:c3:c9:
         7f:95:e3:27:8e:41:57:50:ae:59:6e:3f:e8:23:d5:1a:1c:be:
         41:4e:27:e2:57:31:e3:15:df:2b:11:0b:fb:d5:05:3d:bc:9f:
         83:78:73:83:60:99:ac:b5:2a:7a:ec:67:5b:57:7f:70:6c:be:
         68:5c:88:00:a9:62:ce:2f:b9:ba:e6:46:e8:06:41:42:62:8b:
         25:15:92:e5:6c:01:08:35:6f:e3:ed:95:17:da:83:e1:d2:42:
         32:b3:d2:d7:12:8d:b8:ba:c5:0c:52:c1:6c:95:05:66:4a:d1:
         c4:c0:3e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----