Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e35312e302f32342d3234203d3e20323133313039.roa
File:                     38352e3230382e35312e302f32342d3234203d3e20323133313039.roa (raw, json)
Hash identifier:          fMMUdcY20yWT1vp8BKJm7GBA5gDe01RrAGRTqDT3WNw=
Subject key identifier:   7F:07:E0:97:8B:65:EA:15:F6:FF:BB:94:FD:FB:9D:F5:0E:C9:A9:5D
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       28268CC250112046A99DEDF06BAA9B3D355BB0EA
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e35312e302f32342d3234203d3e20323133313039.roa
Signing time:             Fri 27 Nov 2020 15:10:13 +0000
ROA not before:           Fri 27 Nov 2020 15:05:13 +0000
ROA not after:            Fri 26 Nov 2021 15:10:13 +0000
asID:                     213109
IP address blocks:        85.208.51.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:26:8c:c2:50:11:20:46:a9:9d:ed:f0:6b:aa:9b:3d:35:5b:b0:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Nov 27 15:05:13 2020 GMT
            Not After : Nov 26 15:10:13 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:85:77:6e:da:6d:a8:59:03:18:36:29:93:b8:
                    21:6d:c9:29:2d:bf:4f:54:4a:69:f7:29:9b:5b:8a:
                    ad:32:98:ba:ce:7e:27:c8:fa:c7:2c:42:d5:3c:c5:
                    5d:73:12:69:24:a8:56:58:57:09:c7:6b:ac:0a:e9:
                    63:d1:5c:82:7b:86:49:8c:7d:8e:84:05:17:7e:0f:
                    5f:39:39:5b:7d:87:1b:8c:61:ea:2c:26:36:6f:06:
                    16:be:7e:cc:fb:fe:52:b9:95:4d:01:ea:ea:db:8a:
                    d5:63:20:a6:73:a0:86:fb:f0:98:41:8c:68:bd:5c:
                    4e:4d:ed:9c:a6:5f:d2:57:71:8d:7b:9e:a3:2f:1f:
                    80:b8:23:8f:d1:f0:d3:64:35:bc:0c:a6:f6:05:7f:
                    5f:2c:7e:9b:aa:7c:3c:de:bf:de:6c:9c:58:af:1d:
                    e1:3c:38:d7:ed:f7:53:b9:04:d3:49:1e:b8:a1:ab:
                    0a:7b:87:41:bd:c2:f6:8e:e0:a7:c7:81:8a:7c:c9:
                    11:f9:cf:e1:aa:61:9c:b1:d0:af:eb:0d:8b:bc:c0:
                    76:ae:9f:61:fe:86:9e:3b:bc:e0:3a:5e:d5:b4:09:
                    4c:ad:fd:52:d4:27:b0:89:ed:de:5e:79:99:e8:35:
                    49:51:28:10:1f:57:bf:b4:4c:8d:9c:f3:aa:a8:08:
                    14:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:07:E0:97:8B:65:EA:15:F6:FF:BB:94:FD:FB:9D:F5:0E:C9:A9:5D
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e35312e302f32342d3234203d3e20323133313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.208.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:58:d1:bb:99:22:ac:fe:51:7d:42:71:74:38:75:49:2c:6a:
         d6:e9:5c:5d:29:be:dc:d6:9a:ed:c2:a2:65:71:24:17:1b:af:
         7a:d1:45:27:80:cb:72:0a:e6:4a:60:a9:e4:61:22:0f:18:f7:
         6a:85:0e:33:2c:84:e8:8a:a4:c8:9e:3d:d9:0d:d3:68:be:1e:
         f4:16:50:70:ec:52:03:76:5b:11:b5:04:e5:6b:f6:e4:65:31:
         55:66:98:2a:7d:35:c2:d4:21:25:72:4c:00:89:ef:05:bf:81:
         76:a7:f3:84:b6:41:13:78:97:be:e8:12:41:6f:c5:ec:b8:9c:
         59:94:da:51:a5:4d:9c:fb:dc:ec:96:7a:da:23:ee:56:83:d4:
         78:90:a2:7e:75:5a:86:29:16:81:fb:5c:2b:f9:f8:bc:86:79:
         08:a5:80:8d:67:ac:60:d5:d9:03:ff:cd:08:e5:94:75:bd:ae:
         13:c1:40:87:84:cb:5d:5d:7c:b2:59:92:96:89:df:e9:cc:7e:
         75:e3:01:41:b9:9e:5d:14:05:ed:8c:df:9e:d5:3c:0d:00:24:
         ba:34:ef:b0:d8:36:57:19:de:32:ab:2c:84:1c:d5:5a:d1:cc:
         a5:b8:87:9d:c6:bc:97:91:13:40:28:e0:58:6a:6b:0d:b8:34:
         0a:fe:f6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----