Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3131312e3135362e302f32342d3234203d3e20323132323139.roa
File:                     3138352e3131312e3135362e302f32342d3234203d3e20323132323139.roa (raw, json)
Hash identifier:          GzsraBGZfW35fcGzDH7zEub1uh3JhzBc0IXxpq5W9kI=
Subject key identifier:   CB:C7:BC:2F:29:34:FB:6C:0D:7F:97:B7:A8:A8:FF:29:E0:AB:E7:47
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       392433E642CF39D2DE30006BFBD6D5ED9B18FA14
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3131312e3135362e302f32342d3234203d3e20323132323139.roa
Signing time:             Thu 18 Feb 2021 14:25:13 +0000
ROA not before:           Thu 18 Feb 2021 14:20:13 +0000
ROA not after:            Thu 17 Feb 2022 14:25:13 +0000
asID:                     212219
IP address blocks:        185.111.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:24:33:e6:42:cf:39:d2:de:30:00:6b:fb:d6:d5:ed:9b:18:fa:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Feb 18 14:20:13 2021 GMT
            Not After : Feb 17 14:25:13 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a1:ad:93:2e:a5:97:9f:a4:3a:96:f0:6a:17:
                    b9:b2:c1:56:59:c2:f2:48:87:c1:57:e0:e1:3e:e3:
                    52:fc:b9:e9:dc:2b:4e:e9:f3:3f:5d:d3:9f:b1:b3:
                    41:29:50:77:44:64:38:bc:5e:d3:27:77:9f:48:a4:
                    58:c2:30:68:3f:c6:1b:df:64:95:95:61:80:69:15:
                    49:6e:e7:80:0c:e2:5d:41:8e:a5:5f:08:dd:87:5c:
                    dd:26:f4:5e:a9:2e:77:86:00:ec:ed:05:3d:aa:bd:
                    53:24:9d:c8:c9:f8:de:cf:dc:53:1e:80:63:c7:7a:
                    9c:f5:15:cf:58:55:c8:70:2d:4d:6b:1c:59:b4:bd:
                    c2:b6:6b:5b:7e:d0:73:0f:49:5d:94:48:02:21:03:
                    25:62:2d:d8:34:d0:74:ce:11:2a:3f:2e:62:59:02:
                    c2:08:d3:f2:66:99:a0:f9:39:fe:9e:a6:21:7f:6a:
                    fa:d0:74:2d:5d:d9:70:aa:63:95:49:19:56:b4:70:
                    91:26:96:1c:e7:36:ae:e0:d4:39:be:71:57:9a:c1:
                    3d:c6:c3:de:cb:65:de:0a:0d:62:55:7d:d7:ba:a7:
                    22:b7:ae:da:7d:94:05:0f:00:5a:43:9c:ea:af:58:
                    74:99:0e:07:b0:a5:bb:84:89:96:4f:30:e2:ca:2b:
                    d9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C7:BC:2F:29:34:FB:6C:0D:7F:97:B7:A8:A8:FF:29:E0:AB:E7:47
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3131312e3135362e302f32342d3234203d3e20323132323139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.111.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:c7:54:92:e3:96:ec:46:88:af:d5:06:31:61:c6:bc:c6:fc:
         a4:c8:37:07:39:be:3c:11:d4:f7:be:e3:fe:d1:ff:e1:da:a5:
         04:1c:0e:7a:87:55:22:b2:4d:f7:27:79:4c:55:fd:a2:d1:fa:
         4f:7c:38:67:ee:39:19:0e:f0:f4:91:7d:68:89:34:f0:4c:cb:
         39:c5:d8:e9:0d:94:d4:31:cd:09:33:61:a3:d7:40:a5:1f:10:
         6e:8e:ab:aa:c2:a5:ac:a1:82:2d:26:d0:8f:7c:5f:a4:0b:91:
         f4:61:ee:a5:d4:a4:c7:6e:1e:73:2b:33:98:6b:b8:6d:2d:9d:
         f4:41:0c:27:a5:e3:c3:ac:bd:39:8c:50:f3:7f:65:0d:d5:d5:
         29:18:51:c3:78:e4:b3:67:2f:62:a0:ce:48:d3:b4:3c:66:c2:
         4a:08:61:67:f6:56:1e:c3:d7:fe:8e:d1:a6:2b:42:53:ee:68:
         8a:29:53:d8:5e:4d:f3:ea:7e:95:d0:3c:09:df:58:ce:8f:b2:
         97:ed:1d:d5:ec:3b:c8:fd:9f:44:5e:db:c8:99:a0:c6:7a:06:
         0d:8a:a0:e2:ee:0a:49:d4:be:86:d9:63:4e:2f:40:47:41:77:
         b2:54:08:52:44:e7:42:c9:8e:9b:8e:1c:d1:9a:99:6a:1c:1a:
         cf:10:aa:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----