Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e34392e302f32342d3234203d3e20323131383331.roa
File:                     38352e3230382e34392e302f32342d3234203d3e20323131383331.roa (raw, json)
Hash identifier:          4TFZszvt5YjUYlQK57uazpd9ddSJLvUrKWumfgZ1b2c=
Subject key identifier:   89:8E:41:64:E7:B3:2D:15:EE:A2:52:B2:60:C2:1E:31:CE:B0:FE:FD
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       4FC3AA1AD4AFC8B025853E4D41325A94395A72B5
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e34392e302f32342d3234203d3e20323131383331.roa
Signing time:             Sat 13 Feb 2021 18:30:12 +0000
ROA not before:           Sat 13 Feb 2021 18:25:12 +0000
ROA not after:            Sat 12 Feb 2022 18:30:12 +0000
asID:                     211831
IP address blocks:        85.208.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:c3:aa:1a:d4:af:c8:b0:25:85:3e:4d:41:32:5a:94:39:5a:72:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Feb 13 18:25:12 2021 GMT
            Not After : Feb 12 18:30:12 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:46:6f:b2:c7:db:92:10:7a:00:07:53:10:6b:
                    0b:84:42:17:9a:e1:cd:ef:04:d1:52:b5:d4:ac:d9:
                    9f:e0:2f:a5:11:d6:a1:14:7d:76:30:79:94:91:73:
                    18:48:a9:c4:09:0a:34:be:49:4d:8f:7d:af:a7:00:
                    f5:41:dd:c3:54:96:aa:8a:72:dd:d3:6b:51:52:bb:
                    69:6f:83:06:32:5a:4b:ba:0a:bd:43:70:e9:6d:73:
                    b9:6c:3a:3d:75:40:5b:9b:dd:82:9b:21:94:7e:a9:
                    37:77:a8:69:d6:7b:e9:96:84:8b:95:6e:a2:3d:b3:
                    e7:b6:3a:16:18:21:3c:4b:d5:fc:50:f2:7f:03:97:
                    60:c6:98:9b:b2:a9:0b:73:a5:07:e9:3a:6a:ac:7c:
                    60:5e:a0:3a:f7:44:fd:67:53:4e:1e:74:2c:37:65:
                    54:13:c7:f8:4a:17:3c:20:55:ed:b3:28:17:d5:ff:
                    1d:b5:ab:37:b0:8a:4b:a2:8e:c1:51:63:32:82:4d:
                    d6:11:73:84:d0:f3:0e:cc:64:51:96:1e:6a:04:98:
                    bf:bb:9d:7a:ae:71:90:14:3d:18:32:3f:86:f2:73:
                    72:97:20:a1:99:74:fe:bb:3e:00:18:f7:c3:67:b6:
                    30:c6:5d:30:7c:bb:20:38:fc:2e:85:21:4a:f6:f8:
                    50:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:8E:41:64:E7:B3:2D:15:EE:A2:52:B2:60:C2:1E:31:CE:B0:FE:FD
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e34392e302f32342d3234203d3e20323131383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.208.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:33:89:79:3c:78:d8:44:87:02:f7:b1:66:01:e1:7d:0d:54:
         ea:29:2f:6e:eb:62:3d:19:4d:e4:84:49:c2:9f:3f:db:69:8c:
         94:43:76:49:c9:94:fc:d6:23:bd:12:b7:b3:46:d4:35:1c:6e:
         11:a8:21:ea:44:9a:6e:bc:5e:34:61:a7:f6:fb:36:af:7d:83:
         c5:b2:c1:c4:ef:e0:a9:5d:69:12:40:62:9f:39:22:b3:bb:a9:
         b4:5f:66:ce:d8:52:5a:78:65:0a:60:81:63:fa:09:cd:46:40:
         43:8d:0e:29:0f:44:f3:74:e5:b9:c8:47:2e:36:e0:0a:f8:14:
         3d:92:e4:07:65:26:1f:3c:eb:1c:5e:ca:88:83:a9:b8:d2:9d:
         66:cc:5b:cb:ec:1b:72:6c:12:9e:4f:7a:3d:b8:24:77:7a:8f:
         44:98:5b:63:61:4e:4d:7a:12:79:67:e6:a0:a9:d8:09:29:f6:
         8c:5b:7d:c6:50:5f:fa:66:ac:00:eb:d3:8e:cf:6b:1b:c0:c1:
         e9:44:dc:c1:48:b5:e7:ff:15:e5:48:8c:9c:86:32:1b:f5:e4:
         7e:9a:e7:31:78:39:d3:4e:1b:ee:a8:f7:cc:06:39:b0:85:77:
         86:26:60:b5:9f:3a:df:51:66:da:4f:0d:45:a0:80:61:72:3e:
         6e:59:b2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----