Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/111/3139322e3134352e38322e302f32332d3233203d3e203631333137.roa
File:                     3139322e3134352e38322e302f32332d3233203d3e203631333137.roa (raw, json)
Hash identifier:          YrwSo1FlgQ6hON31Rec96fdAKOFg5En7Qw1WG0pcoPM=
Subject key identifier:   F2:CE:77:CA:58:E0:F6:C8:C7:B6:C8:0A:AF:01:5D:13:F7:92:59:21
Certificate issuer:       /CN=b223a408e7b6c9f8f32b518206da15a0a33f6681
Certificate serial:       52F1BE9D0A5FCB979183559A97B714EAA424674C
Authority key identifier: B2:23:A4:08:E7:B6:C9:F8:F3:2B:51:82:06:DA:15:A0:A3:3F:66:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/siOkCOe2yfjzK1GCBtoVoKM_ZoE.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/111/3139322e3134352e38322e302f32332d3233203d3e203631333137.roa
Signing time:             Fri 18 Dec 2020 08:57:58 +0000
ROA not before:           Fri 18 Dec 2020 08:52:58 +0000
ROA not after:            Fri 17 Dec 2021 08:57:58 +0000
asID:                     61317
IP address blocks:        192.145.82.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:f1:be:9d:0a:5f:cb:97:91:83:55:9a:97:b7:14:ea:a4:24:67:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b223a408e7b6c9f8f32b518206da15a0a33f6681
        Validity
            Not Before: Dec 18 08:52:58 2020 GMT
            Not After : Dec 17 08:57:58 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:45:64:ca:28:f4:58:f9:98:e3:cd:74:3d:22:
                    25:01:33:83:c6:db:d0:eb:8d:8e:ee:bc:1e:9c:a2:
                    d9:67:9b:26:17:3c:f7:a1:7c:f1:8b:2e:f8:54:27:
                    88:bc:95:93:21:04:97:8c:a7:be:b2:f3:98:dc:3b:
                    41:6a:ac:37:c5:cd:17:f6:12:65:0d:1e:13:a4:0a:
                    a1:71:ef:cf:5c:1c:df:9b:d8:a8:66:68:7b:26:5e:
                    df:49:25:c1:93:55:c3:81:44:6c:ff:b3:6f:54:fb:
                    73:fe:17:df:7c:e7:1b:8f:d0:2f:90:19:cf:47:22:
                    ac:ff:bb:92:28:35:8b:a8:35:bb:a5:f0:f8:d5:dc:
                    26:e1:21:03:cd:43:ff:f0:89:8d:d8:ac:37:b6:ee:
                    da:60:ed:20:e1:04:45:bc:04:98:2d:db:88:18:d1:
                    27:cd:c1:c5:4d:1c:8b:c5:33:42:0c:17:33:3e:e9:
                    ab:50:54:5e:58:05:30:68:4b:35:10:ed:a2:85:94:
                    89:24:39:d7:a9:a4:10:c1:d5:b5:b5:53:fb:ea:93:
                    14:5b:47:1b:2e:9e:03:b7:88:78:42:48:1c:fd:40:
                    78:90:a4:b7:d5:68:0f:dd:13:9a:ec:b0:b5:ee:58:
                    21:16:06:cf:fa:83:44:2d:5c:01:71:0f:0a:74:2f:
                    6e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CE:77:CA:58:E0:F6:C8:C7:B6:C8:0A:AF:01:5D:13:F7:92:59:21
            X509v3 Authority Key Identifier:
                keyid:B2:23:A4:08:E7:B6:C9:F8:F3:2B:51:82:06:DA:15:A0:A3:3F:66:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/111/B223A408E7B6C9F8F32B518206DA15A0A33F6681.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/siOkCOe2yfjzK1GCBtoVoKM_ZoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/111/3139322e3134352e38322e302f32332d3233203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.145.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:18:c0:c5:89:28:16:cf:03:f3:26:53:83:9d:00:d3:da:53:
         d1:c9:35:59:9f:3f:f0:2c:40:43:28:81:2f:e5:5a:de:15:40:
         a4:d6:da:3e:37:33:f9:bc:c2:5e:ee:42:78:bd:ed:02:98:05:
         d3:97:78:53:6c:5f:35:73:ef:9e:b7:a3:32:0b:de:bf:ff:3c:
         df:f6:ec:0c:d2:59:32:79:9e:77:7e:b7:a7:af:ba:18:f3:4a:
         06:05:ec:dd:2b:36:c2:48:3f:08:1a:7e:bf:17:fc:bc:1d:42:
         00:f1:61:10:26:c2:3e:3d:42:2e:16:72:b2:c0:c0:da:5a:7f:
         de:85:f3:4c:75:6b:88:c8:d6:c2:df:70:83:74:5a:06:ac:a7:
         5f:c2:6a:16:e5:66:fa:c9:98:da:63:be:59:a1:f0:ce:fa:68:
         48:cf:42:d8:31:38:22:b5:50:3f:93:66:7e:6e:13:ee:02:7b:
         b4:71:49:02:9e:5c:52:35:48:26:0c:c6:ce:80:d7:9c:c5:47:
         13:68:1c:fc:16:41:f1:e4:f3:34:f8:eb:6c:35:3e:56:13:d2:
         95:fe:12:a7:27:d5:98:4d:ef:ac:5d:3f:fa:44:a9:89:32:0f:
         f4:42:7d:57:50:d1:35:6a:2c:de:c9:33:a0:f5:90:c4:09:7d:
         e7:5a:b7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----