Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3131312e3135362e302f32342d3234203d3e203531353539.roa
File:                     3138352e3131312e3135362e302f32342d3234203d3e203531353539.roa (raw, json)
Hash identifier:          VEAWYWjZJyiiJV3BxuMGOnG20Fyp+a0fafI0bxcHPB8=
Subject key identifier:   4C:CA:F3:05:4E:87:26:2C:5B:31:10:06:B0:A9:23:B5:45:81:B0:20
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       1C61046100F1CA999C3E91E278BD3DE30372D85E
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3131312e3135362e302f32342d3234203d3e203531353539.roa
Signing time:             Fri 27 Nov 2020 15:10:40 +0000
ROA not before:           Fri 27 Nov 2020 15:05:40 +0000
ROA not after:            Fri 26 Nov 2021 15:10:40 +0000
asID:                     51559
IP address blocks:        185.111.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:61:04:61:00:f1:ca:99:9c:3e:91:e2:78:bd:3d:e3:03:72:d8:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 27 15:05:40 2020 GMT
            Not After : Nov 26 15:10:40 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5c:71:43:c8:70:c4:7b:5e:ea:ca:95:fe:55:
                    ae:0a:9d:af:ab:41:ee:e2:f6:75:9b:b3:47:12:8e:
                    a6:6f:b0:e2:3b:ea:6d:7d:1b:99:f3:a8:0b:7b:db:
                    ca:6b:27:76:4e:d9:3d:3d:48:c3:08:21:60:09:7e:
                    97:78:63:c3:c6:7d:22:6f:00:4a:00:86:3f:d2:c7:
                    36:81:67:c8:4c:97:4a:66:80:75:d3:36:f6:b4:d0:
                    42:33:83:82:f0:d5:0f:32:74:cd:1b:24:10:56:52:
                    c9:2b:64:e1:0d:01:a3:be:e6:91:a4:26:45:87:f5:
                    6b:79:c3:f8:26:8e:cc:ac:29:69:ce:6f:72:8a:40:
                    ba:d6:9f:e0:0a:f5:bf:62:66:e6:38:60:17:fd:40:
                    3a:c0:81:01:78:ae:d8:87:b9:bd:dd:eb:39:c6:15:
                    ba:ac:f7:f6:70:e0:f2:6f:37:04:e6:2f:09:24:8a:
                    a6:b8:62:06:8b:d3:7d:5b:8e:24:f6:b3:65:2a:62:
                    93:d8:98:33:e6:19:3a:80:c7:c6:26:43:21:f0:55:
                    1f:6b:b8:de:86:99:f5:d2:2c:17:3f:b7:31:23:70:
                    15:82:36:05:aa:c9:a4:6c:5a:a3:7c:3c:23:e0:da:
                    f0:60:73:24:0a:d7:45:38:00:81:03:17:7d:bb:05:
                    f9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:CA:F3:05:4E:87:26:2C:5B:31:10:06:B0:A9:23:B5:45:81:B0:20
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3131312e3135362e302f32342d3234203d3e203531353539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.111.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:26:95:e6:01:be:46:c2:b0:ef:c7:80:24:0c:51:a6:e5:50:
         c8:3e:39:fe:67:d0:1f:89:61:ae:8c:28:a4:7a:10:88:36:c7:
         26:c2:aa:4a:6e:78:c5:15:7d:77:af:f9:2b:c5:6a:9f:b0:fa:
         42:31:1e:55:4c:f4:47:d3:c4:0b:13:71:8e:64:43:9a:11:b5:
         f3:fb:b9:86:75:d5:9e:5b:f1:dc:6d:77:b4:d3:41:c7:32:e2:
         34:77:7a:b6:89:53:3d:d0:6e:1e:70:f1:aa:f1:1d:79:f8:ed:
         ba:30:97:54:db:b0:b1:33:a7:44:8f:12:b7:5f:07:87:fa:f7:
         ba:00:e9:d8:51:1a:85:e4:7f:de:be:e5:4e:07:45:5b:2f:ed:
         b4:ed:67:75:d8:66:89:67:0f:89:66:f9:7e:38:81:4a:a1:ae:
         dc:10:ca:1d:85:52:53:9d:a7:cf:12:10:ef:7c:07:d8:99:bd:
         f4:76:0f:d7:0d:bc:1c:1a:b7:4f:8d:78:38:2e:b7:59:1b:db:
         21:4c:b4:5e:9f:07:c9:f1:51:8d:c8:3a:31:c6:1e:6a:cb:a8:
         70:98:b6:15:5c:5b:69:6f:fb:b6:2f:ca:aa:69:91:29:b3:06:
         d9:60:51:c9:b8:b5:18:ae:1b:62:1f:84:f4:77:0b:52:7c:39:
         1d:23:9b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----