Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138372e3137302e302f32342d3234203d3e2031323339.roa
File:                     3138352e3138372e3137302e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier:          g3z7FliibRR32bkFCSh8o788AI9pgzuqZ7n3ssw0ggs=
Subject key identifier:   48:71:54:81:EE:AC:41:1B:04:80:75:3C:F0:61:D3:58:D5:74:F4:FA
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       45602296170EB26FD85C01F3A9C8AB25B18605E0
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138372e3137302e302f32342d3234203d3e2031323339.roa
Signing time:             Sat 22 May 2021 08:12:08 +0000
ROA not before:           Sat 22 May 2021 08:07:08 +0000
ROA not after:            Sat 21 May 2022 08:12:08 +0000
asID:                     1239
IP address blocks:        185.187.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:60:22:96:17:0e:b2:6f:d8:5c:01:f3:a9:c8:ab:25:b1:86:05:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: May 22 08:07:08 2021 GMT
            Not After : May 21 08:12:08 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:66:f2:c8:25:00:9c:73:91:22:05:b2:b3:58:
                    a4:0d:e1:ef:31:16:ad:4f:fb:03:1f:8f:ce:5a:0d:
                    ef:50:75:62:e1:62:65:75:bd:0f:85:e7:65:ec:b8:
                    af:a2:28:62:2a:76:2a:12:12:89:05:ee:25:ca:e9:
                    30:e7:c3:80:54:60:6f:12:f1:b3:17:80:9a:dd:50:
                    2d:20:dd:fa:72:1e:32:84:93:3c:3b:76:7d:b4:ad:
                    a7:cc:65:6d:ba:45:58:28:1f:ed:07:b8:23:22:99:
                    4a:c8:3e:2e:93:3a:09:cd:27:ca:01:85:f5:f7:8b:
                    03:ae:ef:6f:f7:30:60:79:dc:90:57:60:6f:c0:a8:
                    36:e4:3d:52:94:a1:8e:21:8b:bb:34:31:6a:82:08:
                    c2:77:5e:ef:56:88:d7:93:5d:00:fa:7c:07:1b:60:
                    12:96:4f:f0:b8:17:49:3d:b5:53:b0:f7:60:c3:1c:
                    d1:ed:ef:bb:9a:d9:03:a3:ff:cd:a4:3c:11:47:7a:
                    f6:ed:34:6f:d4:4a:80:b7:f8:5a:cf:75:3d:ce:01:
                    5b:36:5a:de:3d:82:35:74:29:f6:3e:62:f7:f8:e6:
                    66:6b:39:52:d9:dd:37:b3:48:9b:c3:7f:3b:b3:fc:
                    7a:53:29:26:c8:99:66:2f:10:10:b8:cd:91:1d:80:
                    b9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:71:54:81:EE:AC:41:1B:04:80:75:3C:F0:61:D3:58:D5:74:F4:FA
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3138372e3137302e302f32342d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:02:e2:52:dc:64:4f:d9:02:1f:8b:7e:5a:fa:11:c6:75:b3:
         74:01:48:5f:f5:92:8a:a9:18:a6:44:25:0a:7c:0f:f3:2a:4e:
         7e:e0:57:d2:64:55:81:25:87:eb:77:e2:4d:45:23:1e:bc:81:
         4d:00:9c:34:48:f8:44:12:e2:df:7b:3e:d6:59:48:71:f8:07:
         9a:35:12:10:3c:69:57:7c:1d:b4:79:75:57:b1:54:d7:ab:90:
         e1:fd:4a:49:67:e2:d4:ba:62:34:ab:c8:0b:ad:f7:fd:3a:61:
         ed:e0:30:ac:4d:2f:68:a4:05:8d:54:2d:67:ab:3d:c3:d1:40:
         d3:9c:b1:7b:98:6d:de:bb:9f:b4:63:ff:dc:7c:f1:a7:a7:68:
         a6:57:16:9f:1b:71:0a:51:3c:d3:3a:51:d2:94:7b:ef:09:46:
         39:3f:f6:c9:3e:47:6c:d2:15:a0:fb:01:99:45:36:30:36:5e:
         9b:f6:5d:54:1a:1c:d4:ce:e0:80:bd:17:65:2a:7f:82:74:09:
         3c:15:47:7e:be:47:78:34:0b:9a:06:4a:d6:f0:93:9c:01:6f:
         db:f4:e3:c3:70:76:26:fe:20:5e:3c:3e:b9:52:75:3f:74:2e:
         13:db:9d:36:a3:92:7a:fe:0c:8b:6b:9f:ad:c6:67:d9:c4:76:
         e5:9c:d3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----