Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138352e38332e302f32342d3234203d3e20323131383331.roa
File:                     3138352e3138352e38332e302f32342d3234203d3e20323131383331.roa (raw, json)
Hash identifier:          xVAFqX/v5mwZZBWf4CSckrJLM/AtmpEHSHBhZU3JO2M=
Subject key identifier:   1A:CD:DE:3D:2A:38:C7:F4:DF:7E:D3:F7:4E:CC:DC:5D:57:54:A3:FE
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       477780720E5E56C2F4B459C3EEB61389DC678662
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138352e38332e302f32342d3234203d3e20323131383331.roa
Signing time:             Sat 13 Feb 2021 18:21:36 +0000
ROA not before:           Sat 13 Feb 2021 18:16:36 +0000
ROA not after:            Sat 12 Feb 2022 18:21:36 +0000
asID:                     211831
IP address blocks:        185.185.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:77:80:72:0e:5e:56:c2:f4:b4:59:c3:ee:b6:13:89:dc:67:86:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Feb 13 18:16:36 2021 GMT
            Not After : Feb 12 18:21:36 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:16:12:95:8e:f5:cf:4b:f3:4d:2e:87:d1:7b:
                    c7:b8:19:3a:32:9b:7b:50:d1:c0:6b:fe:8e:28:d8:
                    c0:05:fc:38:79:86:8f:a5:55:05:38:75:bb:fa:75:
                    b9:c5:86:5b:63:08:2f:26:68:e8:fb:a0:5b:03:fb:
                    7e:93:49:8e:1b:3a:a9:b8:49:61:44:13:0b:f7:5c:
                    fb:ba:ca:bf:26:92:27:da:5a:1a:c4:4f:13:ca:32:
                    02:77:c0:1c:b7:14:c3:a2:19:34:91:dc:5e:a5:08:
                    b2:34:3e:9c:37:43:32:ed:3d:f5:61:cf:ac:15:6a:
                    4a:4e:55:a7:13:40:75:15:ac:ea:bb:7c:0a:f0:f6:
                    71:cc:82:5d:24:e2:a3:cf:e0:48:10:00:5c:b3:ab:
                    f1:ae:b5:fd:c4:34:91:32:f6:a1:66:69:64:85:c3:
                    29:f8:e2:12:f3:d7:40:91:6f:c9:e9:f7:4c:85:56:
                    00:ec:52:bb:99:82:e8:e9:08:88:10:57:fd:31:09:
                    3c:14:a5:fb:cd:5e:5c:ec:25:69:d5:64:6f:54:07:
                    61:1e:2a:83:e3:af:65:80:37:79:37:8d:da:a1:f5:
                    0e:a3:08:c9:a7:00:3e:37:2d:ea:ac:83:95:63:f9:
                    52:da:87:14:5e:f0:b6:3a:e8:bf:46:2e:9b:0f:ec:
                    96:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:CD:DE:3D:2A:38:C7:F4:DF:7E:D3:F7:4E:CC:DC:5D:57:54:A3:FE
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138352e38332e302f32342d3234203d3e20323131383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.185.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:c6:7a:3e:e0:89:67:59:6c:7a:a4:81:08:be:ac:79:70:c6:
         a8:58:df:bb:65:0c:c1:e2:22:26:ff:59:72:1f:1d:c4:ef:09:
         a8:69:f1:63:9d:ac:08:cf:48:0d:30:2d:2f:40:21:7f:16:4b:
         5d:5b:6b:db:24:5d:e4:5d:45:d3:61:4f:a0:15:44:03:9a:46:
         82:62:dd:71:dc:97:5c:e8:4e:62:b6:2a:11:60:99:da:96:e4:
         68:a3:0b:56:83:d5:ee:03:6e:1c:12:84:e3:e3:5b:ab:b8:f7:
         6b:0b:bb:48:93:b8:cc:db:bd:1a:1f:ee:43:39:28:fa:0e:a9:
         31:ba:fa:f9:71:cb:b0:ed:d9:e4:e6:4e:bc:01:b9:f4:da:34:
         13:8d:73:51:7e:50:e2:d8:17:ee:4a:1c:c8:bb:24:e4:21:67:
         5f:98:45:6d:14:fc:db:f5:f4:a2:6b:2b:cb:d4:26:93:0f:91:
         6b:dd:15:8f:5b:88:33:20:d6:08:2f:69:11:c3:54:e7:d6:0e:
         ee:76:0b:4a:9c:34:80:96:e5:16:66:4c:2d:72:9f:ef:8d:aa:
         e7:da:35:e2:08:77:04:aa:a9:60:d0:67:8c:d6:3f:23:06:ce:
         99:81:fb:6b:fc:d7:b2:1b:de:6d:ee:2c:ec:64:fb:f3:90:63:
         5d:39:75:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----