Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138352e38332e302f32342d3234203d3e20323132303737.roa
File:                     3138352e3138352e38332e302f32342d3234203d3e20323132303737.roa (raw, json)
Hash identifier:          R0uOgaWCwHnuCWARA3qzVpnxjlMRKGBhdpJfiBKUIFk=
Subject key identifier:   F2:38:27:34:F2:8E:9E:D7:53:93:60:B7:71:F7:F1:80:B1:B6:4F:0F
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       1F8ED8429FB5B57AF60C007DAD750483E87E64A6
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138352e38332e302f32342d3234203d3e20323132303737.roa
Signing time:             Thu 31 Dec 2020 18:51:36 +0000
ROA not before:           Thu 31 Dec 2020 18:46:36 +0000
ROA not after:            Thu 30 Dec 2021 18:51:36 +0000
asID:                     212077
IP address blocks:        185.185.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:8e:d8:42:9f:b5:b5:7a:f6:0c:00:7d:ad:75:04:83:e8:7e:64:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Dec 31 18:46:36 2020 GMT
            Not After : Dec 30 18:51:36 2021 GMT
        Subject: CN=3082010A0282010100D007C8047B7988EBD47AB819AE29A887ED0A954B94B2FF993C59CA8826FE3A6FA2980FA6FF93CD68542DA79FF2EFE8543077174B761F2C2C40F4343B2B285DEC0574C82410B0765617E1CB41FA2F0C22165AA8C5D6BC4CE72D6ADA6A29027052F3883561EEDEFE0470497D583277E3D0F4C177CEBF36DB6ECABA9AACB3C1CC9398074932B45701BB034EE5E8E6397FCDA138FC49DF23D7FA76D5108D63D62B556E8964A4A2092398D0F1974DDB50ABCD2F39E354226595633E7EC390A0F4EA9474271AA914326916656C2BF276F18244D0B6545444BEC99E7C45F566DA21D0463EDC5484AC2570E8C8E7526F90A542791102F19736C39AF64B045835170079630203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:07:c8:04:7b:79:88:eb:d4:7a:b8:19:ae:29:
                    a8:87:ed:0a:95:4b:94:b2:ff:99:3c:59:ca:88:26:
                    fe:3a:6f:a2:98:0f:a6:ff:93:cd:68:54:2d:a7:9f:
                    f2:ef:e8:54:30:77:17:4b:76:1f:2c:2c:40:f4:34:
                    3b:2b:28:5d:ec:05:74:c8:24:10:b0:76:56:17:e1:
                    cb:41:fa:2f:0c:22:16:5a:a8:c5:d6:bc:4c:e7:2d:
                    6a:da:6a:29:02:70:52:f3:88:35:61:ee:de:fe:04:
                    70:49:7d:58:32:77:e3:d0:f4:c1:77:ce:bf:36:db:
                    6e:ca:ba:9a:ac:b3:c1:cc:93:98:07:49:32:b4:57:
                    01:bb:03:4e:e5:e8:e6:39:7f:cd:a1:38:fc:49:df:
                    23:d7:fa:76:d5:10:8d:63:d6:2b:55:6e:89:64:a4:
                    a2:09:23:98:d0:f1:97:4d:db:50:ab:cd:2f:39:e3:
                    54:22:65:95:63:3e:7e:c3:90:a0:f4:ea:94:74:27:
                    1a:a9:14:32:69:16:65:6c:2b:f2:76:f1:82:44:d0:
                    b6:54:54:44:be:c9:9e:7c:45:f5:66:da:21:d0:46:
                    3e:dc:54:84:ac:25:70:e8:c8:e7:52:6f:90:a5:42:
                    79:11:02:f1:97:36:c3:9a:f6:4b:04:58:35:17:00:
                    79:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:38:27:34:F2:8E:9E:D7:53:93:60:B7:71:F7:F1:80:B1:B6:4F:0F
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138352e38332e302f32342d3234203d3e20323132303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.185.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:9d:18:7b:36:c2:3a:d1:a6:d1:aa:3d:40:c9:2f:c8:a2:e4:
         99:f3:ee:6b:f5:a7:a7:7f:a8:81:84:f9:c1:78:bc:36:22:28:
         e4:ab:60:e8:48:0c:da:a0:d6:37:4c:1f:09:18:21:03:60:0d:
         a8:b4:61:49:c6:df:46:b5:bc:83:17:28:73:e2:04:7c:97:f3:
         e9:ed:6f:9f:4b:a8:79:c4:b8:82:ef:f4:d6:53:68:9e:07:38:
         b8:77:2d:49:67:db:ca:62:3a:1c:ad:98:d2:6a:cb:2e:04:d3:
         2c:41:02:a6:70:48:58:54:9d:5b:66:a5:54:bb:89:c9:e6:c2:
         d3:ae:cd:df:73:f8:b5:90:85:29:47:a9:2f:f9:d6:aa:23:d4:
         02:8d:bb:b9:8b:9f:f7:b1:2a:7b:dd:af:51:d4:74:e7:15:ca:
         8c:69:9c:3c:7b:c0:46:6c:22:bd:a1:ca:fd:0c:40:ac:c1:c7:
         a8:3c:ac:27:23:3c:32:ea:ed:4f:ae:a7:07:40:0a:7c:21:06:
         3a:d6:f0:e5:35:e5:98:f1:be:98:78:ba:5d:e2:ca:f8:ea:ca:
         11:c0:76:a3:64:45:2e:43:6a:4c:64:34:42:ac:bc:99:27:8c:
         b5:1e:ea:1d:f9:1e:c3:62:0c:c0:2e:c5:75:fe:88:c7:5d:47:
         57:23:b1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----