Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e34392e302f32342d3234203d3e20323132383532.roa
File:                     38352e3230382e34392e302f32342d3234203d3e20323132383532.roa (raw, json)
Hash identifier:          pRDYlfPyKrQI+UzRivDz2i2VuY8DLL6cd/upecCj9N4=
Subject key identifier:   01:B7:37:DC:F1:94:98:5E:C3:0F:81:AE:58:6B:9D:BC:64:5C:87:85
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       4ADB279866CC3DDA8B62E954D99EBCC2A4C57CFF
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e34392e302f32342d3234203d3e20323132383532.roa
Signing time:             Fri 27 Nov 2020 15:10:14 +0000
ROA not before:           Fri 27 Nov 2020 15:05:14 +0000
ROA not after:            Fri 26 Nov 2021 15:10:14 +0000
asID:                     212852
IP address blocks:        85.208.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:db:27:98:66:cc:3d:da:8b:62:e9:54:d9:9e:bc:c2:a4:c5:7c:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Nov 27 15:05:14 2020 GMT
            Not After : Nov 26 15:10:14 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:04:9a:2e:3c:37:82:b2:1d:ee:1e:ad:79:26:
                    73:59:64:13:58:f7:36:2e:19:03:82:7c:f8:fa:1a:
                    a9:a9:b6:68:95:95:dc:0b:19:ab:d4:80:fa:1a:a2:
                    d0:f8:09:c1:bf:16:45:f6:3b:2f:43:77:ed:0c:f2:
                    90:2d:bb:5f:7a:7f:34:80:19:23:b1:73:db:32:23:
                    b5:de:92:2a:80:1d:2b:f9:bf:bd:64:88:1c:94:0a:
                    54:a0:fe:69:64:6a:a6:26:34:13:67:2c:36:e2:5a:
                    0a:5a:31:3c:25:8d:17:e4:29:b2:ed:f4:b9:f4:bc:
                    23:d8:0e:aa:04:4e:f9:fa:4b:42:71:84:d6:55:28:
                    8c:9d:94:48:b8:df:89:3a:11:f0:06:9a:fd:f6:00:
                    b8:0a:85:d1:9f:5c:0f:af:1b:53:33:e0:3b:4f:82:
                    f0:3a:ef:e8:20:2f:c9:7a:8f:86:ec:28:78:1c:a2:
                    4e:e5:8a:7a:d9:6d:27:d4:e5:f6:3e:20:62:1a:ed:
                    ef:63:b2:d3:1e:d9:4b:43:89:09:12:17:47:2b:b5:
                    91:68:7f:92:e6:c8:13:56:83:90:d0:0f:77:53:69:
                    c4:a2:83:5d:db:dc:0c:be:86:68:6e:54:d6:a6:d4:
                    76:d4:f5:f0:d2:6f:0a:b2:87:2b:78:ff:84:40:35:
                    1d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B7:37:DC:F1:94:98:5E:C3:0F:81:AE:58:6B:9D:BC:64:5C:87:85
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e34392e302f32342d3234203d3e20323132383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.208.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:f5:c5:dc:0d:b7:c1:35:3b:64:37:13:2c:72:e7:0d:5e:0a:
         4f:ef:71:e5:37:ab:76:25:44:cc:11:a3:64:a3:f4:cf:d0:cf:
         46:92:d4:b2:20:42:f4:d7:d7:66:b9:f1:85:27:6c:58:60:f6:
         e3:4a:8f:04:5d:98:d6:07:3f:f0:51:05:14:59:91:c3:5b:b2:
         c7:dc:c5:d1:72:fa:8a:08:9b:f4:37:4d:f8:44:b4:1c:be:e2:
         a3:c7:86:ac:97:c4:5e:4a:f3:cd:6c:4c:44:e0:1d:ab:ee:43:
         b8:d9:3f:8f:fd:5b:25:97:6f:3c:a4:01:d7:c7:58:6d:e6:0b:
         03:20:65:8e:4a:6c:82:23:da:f5:d5:0f:19:97:90:a8:bc:7f:
         85:f1:5c:bd:79:81:09:51:b7:06:3d:7d:bd:a7:e0:de:04:e1:
         05:59:24:c8:3e:b4:80:96:9b:42:ee:34:3b:38:90:81:3f:3f:
         87:36:77:bc:c5:49:67:e5:43:36:f9:9e:21:64:3a:7e:df:3b:
         49:65:34:27:b4:89:66:9d:cd:f1:11:c9:f2:89:67:e6:d2:bc:
         d4:8e:6e:2b:96:94:f5:3d:5d:6f:32:aa:da:df:0d:66:c6:ed:
         0f:7b:cd:48:68:fb:e4:3c:c1:f1:4b:be:ee:61:b0:de:e4:04:
         1a:64:37:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----