Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138352e38312e302f32342d3234203d3e203631333137.roa
File:                     3138352e3138352e38312e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          J3T2ipLuCMGYWJ2OzvhiduePMhbJhB2qmvUW4T6SRfA=
Subject key identifier:   4B:93:68:A6:A9:5F:71:E9:55:88:0D:F0:D2:18:10:62:AB:B2:AD:F6
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       4679AF1EE71180A9891200FC3D78AC18A3F88DC1
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138352e38312e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 27 Nov 2020 15:10:28 +0000
ROA not before:           Fri 27 Nov 2020 15:05:28 +0000
ROA not after:            Fri 26 Nov 2021 15:10:28 +0000
asID:                     61317
IP address blocks:        185.185.81.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:79:af:1e:e7:11:80:a9:89:12:00:fc:3d:78:ac:18:a3:f8:8d:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 27 15:05:28 2020 GMT
            Not After : Nov 26 15:10:28 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b4:b9:ba:2d:d4:37:1e:4e:b5:19:6d:42:91:
                    8d:1f:79:18:6e:03:e6:23:80:60:52:b0:eb:8f:3f:
                    cd:c6:96:1a:e4:22:34:55:df:2b:5e:fd:09:f8:e2:
                    5c:32:67:26:2c:a7:1c:85:27:d1:12:45:a0:0d:8d:
                    08:3f:36:c7:0b:a2:a0:67:52:3b:b1:6e:d6:2a:03:
                    49:b3:78:a6:df:35:3c:e6:29:ec:a2:8f:44:0d:4a:
                    13:33:8c:1b:15:b9:74:b2:00:29:4b:e9:38:f6:4f:
                    eb:98:e6:8b:71:73:74:63:e7:53:18:3d:ef:50:8e:
                    a3:e7:fb:2f:28:4e:f5:e1:db:23:3a:de:61:22:17:
                    7f:3e:12:f0:4a:e1:5a:b2:9d:b3:d6:6d:a5:32:ff:
                    8b:b7:29:59:57:71:c4:ed:f2:74:89:0b:f6:dd:91:
                    42:97:93:22:87:e4:bd:41:f2:f4:20:6d:8b:2b:8e:
                    f0:41:40:dd:16:1c:28:f8:07:1c:23:74:7e:13:26:
                    9b:02:33:70:c9:92:c2:d7:5b:85:ee:df:0c:d2:5f:
                    d2:9a:dc:41:08:e0:25:55:30:29:04:a6:ab:f0:6a:
                    a2:6b:ba:97:b1:ad:b7:40:b8:20:83:f1:7b:43:91:
                    93:f9:58:2d:4b:9a:4d:ef:95:49:1a:5e:a9:78:62:
                    ab:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:93:68:A6:A9:5F:71:E9:55:88:0D:F0:D2:18:10:62:AB:B2:AD:F6
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138352e38312e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.185.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:ba:3b:5a:a7:79:f9:04:52:44:fe:16:08:a1:9f:51:fe:93:
         14:19:87:f8:68:e2:9f:16:f6:fa:9c:45:71:6f:5d:62:a3:6b:
         7a:d0:d9:28:f4:32:29:42:20:e8:14:c5:ae:a5:47:b7:20:84:
         7e:d9:12:ab:ea:d9:aa:f0:31:11:07:df:fe:28:37:86:a6:06:
         35:1c:aa:3b:13:5b:a1:c0:82:99:ca:7d:1d:c2:c4:ae:d5:61:
         6e:e3:51:cc:61:3e:e7:0b:ff:19:9a:27:23:b0:2d:ba:a4:01:
         49:65:6e:64:95:d6:55:49:cb:c4:ed:ef:87:50:d3:e1:76:65:
         ef:b1:59:7e:b1:93:44:d1:fc:eb:e5:16:b5:e8:17:aa:85:91:
         21:9e:9c:52:91:35:45:69:f2:de:e3:f3:17:68:94:58:9c:6a:
         9e:43:5d:7c:18:e2:49:f3:88:9b:a7:66:48:3e:4c:29:6a:61:
         d9:6a:c3:e5:b6:55:07:e9:73:6f:59:f4:f6:9f:98:fd:3d:6b:
         24:9e:39:d4:76:38:a5:45:b2:b1:5e:f2:c1:db:49:74:79:64:
         9f:e6:29:15:82:f6:b9:90:45:3d:95:59:b1:fa:02:33:21:b6:
         e6:d0:2b:5a:46:48:8e:f3:20:8f:84:2c:85:6c:bf:b9:9e:c0:
         12:85:83:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----