Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138372e3136382e302f32332d3234203d3e203631333137.roa
File:                     3138352e3138372e3136382e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          3tD0VQbZlpuJk3m7CfY/emU7+x+AxXqYldvMGWQxjhM=
Subject key identifier:   B0:17:D4:68:7F:B7:38:EB:58:C3:E6:25:EC:71:6A:5B:0D:E2:94:BF
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       024B88304F5870572458A080BD91645E3AA34C33
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138372e3136382e302f32332d3234203d3e203631333137.roa
Signing time:             Fri 27 Nov 2020 15:10:29 +0000
ROA not before:           Fri 27 Nov 2020 15:05:29 +0000
ROA not after:            Fri 26 Nov 2021 15:10:29 +0000
asID:                     61317
IP address blocks:        185.187.168.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:4b:88:30:4f:58:70:57:24:58:a0:80:bd:91:64:5e:3a:a3:4c:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 27 15:05:29 2020 GMT
            Not After : Nov 26 15:10:29 2021 GMT
        Subject: CN=3082010A0282010100C5E0F79845C209803B4304F237E7082BA24EC13AED57204E1FD769AD13BCD234CF5C9318325860FE9DF6E75AD229731396BD66033113E3341E8E5BAC45C319D2C7A84441A180F2368CDBA7CE8734D128EEBEED8A479D41199F30D13C6CB8EBBA9B3A8D844C949B4270BFCFB59AB9BA3F16D7CFFF0C02562A34EA6031F7587A7142A73C8FC111336B4123F540C8D57345B421E6AC8100BF509358CCBCF086E356A7D0722F3EF1AA7C0017E8678F22535CE51B5BEFC3A484C5997DA46B91272FF93EFA37B6D343E784675BA6D50D258EC0907DCD704C825115666641958CCCBB363649059E852A4733DB4216AF5D1D2152D53D063E46E504548CDC19FD24DA55EF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e0:f7:98:45:c2:09:80:3b:43:04:f2:37:e7:
                    08:2b:a2:4e:c1:3a:ed:57:20:4e:1f:d7:69:ad:13:
                    bc:d2:34:cf:5c:93:18:32:58:60:fe:9d:f6:e7:5a:
                    d2:29:73:13:96:bd:66:03:31:13:e3:34:1e:8e:5b:
                    ac:45:c3:19:d2:c7:a8:44:41:a1:80:f2:36:8c:db:
                    a7:ce:87:34:d1:28:ee:be:ed:8a:47:9d:41:19:9f:
                    30:d1:3c:6c:b8:eb:ba:9b:3a:8d:84:4c:94:9b:42:
                    70:bf:cf:b5:9a:b9:ba:3f:16:d7:cf:ff:0c:02:56:
                    2a:34:ea:60:31:f7:58:7a:71:42:a7:3c:8f:c1:11:
                    33:6b:41:23:f5:40:c8:d5:73:45:b4:21:e6:ac:81:
                    00:bf:50:93:58:cc:bc:f0:86:e3:56:a7:d0:72:2f:
                    3e:f1:aa:7c:00:17:e8:67:8f:22:53:5c:e5:1b:5b:
                    ef:c3:a4:84:c5:99:7d:a4:6b:91:27:2f:f9:3e:fa:
                    37:b6:d3:43:e7:84:67:5b:a6:d5:0d:25:8e:c0:90:
                    7d:cd:70:4c:82:51:15:66:66:41:95:8c:cc:bb:36:
                    36:49:05:9e:85:2a:47:33:db:42:16:af:5d:1d:21:
                    52:d5:3d:06:3e:46:e5:04:54:8c:dc:19:fd:24:da:
                    55:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:17:D4:68:7F:B7:38:EB:58:C3:E6:25:EC:71:6A:5B:0D:E2:94:BF
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138372e3136382e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:ce:c8:f6:dd:02:78:13:d8:47:d7:4f:db:89:b6:32:7e:c8:
         0d:1a:83:f3:de:33:96:a5:17:d0:f5:e6:4c:ea:7d:2b:34:02:
         fa:2c:01:2a:58:9f:8d:45:e8:69:ac:22:f5:b6:01:79:9e:dc:
         32:e7:a1:bc:ab:14:2e:ce:2a:df:1c:6a:7f:37:64:22:8d:8d:
         b3:92:33:44:68:a2:2e:4f:33:f0:a8:55:e1:93:13:b8:8c:b0:
         2b:a5:76:1a:0b:8b:18:02:d3:f2:c8:3c:81:af:14:8d:28:38:
         da:e2:eb:09:d3:a4:24:a0:ed:28:6c:bb:5f:85:80:2b:c1:0a:
         42:a5:93:65:3a:e5:e6:b0:13:cb:df:b8:97:21:92:f9:d6:91:
         63:97:68:56:0b:11:04:7e:45:4f:88:02:c9:24:40:eb:54:b8:
         9f:72:e7:8c:7c:3c:01:c6:32:88:f1:69:7f:0e:0d:d5:3b:e5:
         77:ff:bd:c6:11:b5:84:b4:21:40:ec:32:bd:08:3b:56:00:7a:
         72:4e:23:d8:5f:1b:0a:3b:a1:14:0a:7d:ab:03:b4:85:ec:75:
         41:69:0f:7d:56:2f:9d:40:b7:90:5d:25:ce:83:c4:4b:5d:96:
         6d:16:f8:ce:89:31:2a:57:99:b7:8c:87:52:89:2f:b7:84:55:
         f8:0c:89:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----