Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3131312e3135392e302f32342d3234203d3e203531353539.roa
File:                     3138352e3131312e3135392e302f32342d3234203d3e203531353539.roa (raw, json)
Hash identifier:          3yUM97LLynO5xahW5aRG7sS918Y7mdscfuk+L1O65Zw=
Subject key identifier:   39:35:FE:AC:9F:A2:8F:F5:55:5F:B6:2A:AC:EB:55:4C:1C:AD:27:DF
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       1DB7DC0F236EC65AE0B354C2C29488A3DE31A727
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3131312e3135392e302f32342d3234203d3e203531353539.roa
Signing time:             Fri 27 Nov 2020 15:10:33 +0000
ROA not before:           Fri 27 Nov 2020 15:05:33 +0000
ROA not after:            Fri 26 Nov 2021 15:10:33 +0000
asID:                     51559
IP address blocks:        185.111.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:b7:dc:0f:23:6e:c6:5a:e0:b3:54:c2:c2:94:88:a3:de:31:a7:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 27 15:05:33 2020 GMT
            Not After : Nov 26 15:10:33 2021 GMT
        Subject: CN=3082010A02820101009DBD6D790C4C24D03A67FF08DF9C307F9C859AA0EE601E9B76D705FC16F6ED2038A3F0D56C8D201166CE5640C659DAC95CACD0EAF54AC56D2D34979ECDB0955335F2095989BDAA953403C0173D05FD37B0135580408E29E11ADAFDA5BBA576FCEA42616FEDB5319C82C89C79F9C104BB7734E67D40223B8B922B63D7454AC47CD50F3202B0E081E2EDFB0BCFF9D75384E1011C78F838266C1ECFD246FB8137F5206999C8A05B6A2965C7946F1B9426171D818840794A376F8E124DE1BCE1FDF0470B8700CA05DA3836CB86D22F610B2B6B30FAE0B2CDEDF1C7D86E718ABC5DC2D5421ED3D70749B42037BA0311236C2D655820E94ACFD18B9ADF7FF27553265D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bd:6d:79:0c:4c:24:d0:3a:67:ff:08:df:9c:
                    30:7f:9c:85:9a:a0:ee:60:1e:9b:76:d7:05:fc:16:
                    f6:ed:20:38:a3:f0:d5:6c:8d:20:11:66:ce:56:40:
                    c6:59:da:c9:5c:ac:d0:ea:f5:4a:c5:6d:2d:34:97:
                    9e:cd:b0:95:53:35:f2:09:59:89:bd:aa:95:34:03:
                    c0:17:3d:05:fd:37:b0:13:55:80:40:8e:29:e1:1a:
                    da:fd:a5:bb:a5:76:fc:ea:42:61:6f:ed:b5:31:9c:
                    82:c8:9c:79:f9:c1:04:bb:77:34:e6:7d:40:22:3b:
                    8b:92:2b:63:d7:45:4a:c4:7c:d5:0f:32:02:b0:e0:
                    81:e2:ed:fb:0b:cf:f9:d7:53:84:e1:01:1c:78:f8:
                    38:26:6c:1e:cf:d2:46:fb:81:37:f5:20:69:99:c8:
                    a0:5b:6a:29:65:c7:94:6f:1b:94:26:17:1d:81:88:
                    40:79:4a:37:6f:8e:12:4d:e1:bc:e1:fd:f0:47:0b:
                    87:00:ca:05:da:38:36:cb:86:d2:2f:61:0b:2b:6b:
                    30:fa:e0:b2:cd:ed:f1:c7:d8:6e:71:8a:bc:5d:c2:
                    d5:42:1e:d3:d7:07:49:b4:20:37:ba:03:11:23:6c:
                    2d:65:58:20:e9:4a:cf:d1:8b:9a:df:7f:f2:75:53:
                    26:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:35:FE:AC:9F:A2:8F:F5:55:5F:B6:2A:AC:EB:55:4C:1C:AD:27:DF
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3131312e3135392e302f32342d3234203d3e203531353539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.111.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:07:e1:89:c5:d5:a7:4c:1a:ef:09:c7:f5:16:36:4f:56:32:
         e4:6b:86:dd:0e:01:fe:96:36:db:dd:9f:0d:09:34:5a:2d:14:
         ca:b9:1c:72:3b:24:db:e4:d0:a8:aa:8d:f7:05:c5:54:fa:90:
         e4:e7:95:8b:69:92:3b:1a:00:30:e5:83:a2:87:93:b2:e6:69:
         1c:14:e9:90:5c:8d:f6:aa:bb:d6:39:29:3c:0a:e0:9b:dd:09:
         34:11:51:f7:3b:11:18:af:7c:10:88:de:9f:72:93:58:94:98:
         9c:18:dc:6a:e7:7b:cf:3d:96:64:90:15:c9:76:ec:ad:98:b6:
         0a:b1:d8:a9:46:b7:50:51:a9:31:8c:4a:70:87:2f:ea:83:c6:
         df:d2:f4:24:0e:a3:14:d8:75:2e:b9:f7:f6:36:ed:71:c4:0b:
         3b:7e:60:2c:c1:c1:92:ef:8e:6b:d3:bc:7c:2e:75:f4:d7:48:
         d6:b0:bf:62:cb:dc:10:d3:e0:9f:61:09:74:84:86:fb:4a:8a:
         28:11:c0:66:dc:53:93:90:17:e1:a1:3b:db:61:db:19:fd:de:
         09:42:4e:89:aa:7f:bd:c8:3e:70:a0:5a:16:e9:e8:b6:3d:6c:
         03:bb:9b:d2:ad:11:7d:47:94:48:8d:4e:51:ae:3e:39:e2:42:
         e5:4b:0c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----