Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139372e3234382e302f32342d3234203d3e20323131383331.roa
File:                     3138352e3139372e3234382e302f32342d3234203d3e20323131383331.roa (raw, json)
Hash identifier:          gfTg5pFOFN9eiOI6tAS3TVZxFZbpv54uDxcjdOlB1rk=
Subject key identifier:   67:F2:D2:5C:36:B6:D5:3B:29:15:AA:07:63:FD:B0:92:39:9B:5E:92
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       8688DA7CF2C5586DE390BB6C6220B2DF438111
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139372e3234382e302f32342d3234203d3e20323131383331.roa
Signing time:             Sat 13 Feb 2021 18:21:17 +0000
ROA not before:           Sat 13 Feb 2021 18:16:17 +0000
ROA not after:            Sat 12 Feb 2022 18:21:17 +0000
asID:                     211831
IP address blocks:        185.197.248.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            86:88:da:7c:f2:c5:58:6d:e3:90:bb:6c:62:20:b2:df:43:81:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Feb 13 18:16:17 2021 GMT
            Not After : Feb 12 18:21:17 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1c:fc:df:b0:45:59:3b:60:9b:02:86:d5:31:
                    ec:ca:de:66:50:a1:52:65:25:88:da:92:b9:cd:98:
                    f1:dc:f6:c3:c6:ee:95:bf:f2:e7:7f:98:0d:27:4e:
                    d9:8b:67:87:fd:38:d6:a8:6b:f8:4b:7c:7f:8a:bd:
                    0f:75:d1:dc:1f:0a:4e:38:8f:b6:54:d1:ad:1c:8c:
                    42:b8:86:23:27:97:78:16:93:dd:09:ce:52:d1:a2:
                    23:41:b9:be:d6:74:cb:35:b4:30:e3:5b:95:54:2e:
                    18:ea:ba:73:25:d5:6e:32:ab:7e:d7:14:4f:43:95:
                    8d:7b:57:cb:94:e4:33:a3:0e:a6:96:53:04:1b:33:
                    bb:a7:57:65:aa:2e:c2:9c:4a:77:e8:eb:6c:f1:9a:
                    ff:68:18:39:1c:88:32:ed:2e:3d:2a:8b:25:55:f1:
                    01:87:00:3e:de:6c:46:69:79:0d:7e:f1:dc:48:60:
                    2a:29:a7:a3:06:a1:44:5e:3e:38:44:db:58:aa:2b:
                    4a:27:3c:f3:88:8c:c3:91:bf:f9:71:43:9c:dd:7d:
                    08:0c:d8:43:48:5c:74:ab:e8:f1:a4:2c:fc:c7:84:
                    60:18:23:b2:f5:7c:a7:c2:66:73:53:84:12:41:47:
                    28:48:45:72:44:64:34:18:31:ea:b4:a7:67:5a:5e:
                    90:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F2:D2:5C:36:B6:D5:3B:29:15:AA:07:63:FD:B0:92:39:9B:5E:92
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3139372e3234382e302f32342d3234203d3e20323131383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.197.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:38:b0:49:1c:06:83:23:57:29:69:bf:25:dd:fd:5b:d0:cd:
         bf:32:57:f3:81:98:c3:14:64:37:56:e2:c5:b3:c9:9d:74:1b:
         5b:5f:00:a3:8a:53:c2:f6:b8:ea:2f:2c:b1:48:af:58:08:27:
         ee:17:b4:c7:d0:f6:30:f9:e3:fc:eb:c3:ed:ab:30:4b:10:56:
         ce:3f:26:c3:df:bb:49:31:8a:44:4e:00:b4:47:82:9a:6a:e9:
         5f:9d:c1:0d:01:ad:e7:fb:65:c7:ff:17:1b:3f:9c:87:3c:b7:
         ba:ad:2e:ac:9f:a7:32:eb:4d:02:ca:81:30:d2:4a:9c:bd:c6:
         aa:0c:67:51:8f:a7:67:e1:eb:2b:12:21:1d:e8:be:d0:41:c3:
         be:5d:18:a8:8a:92:e4:2e:4c:46:fd:22:ab:9b:3e:bd:6e:8a:
         b5:ea:74:7e:1c:29:78:04:77:93:ec:9a:2b:bd:3b:2d:6d:78:
         db:02:16:71:32:14:a8:05:54:38:ec:cb:76:78:e2:47:d6:bf:
         dd:70:8a:1e:64:25:54:04:4f:c0:e8:6c:2e:dc:8c:2a:41:e0:
         d8:33:1a:70:f7:79:f9:6c:a2:72:4a:e5:7c:16:09:09:48:a6:
         a3:0e:7a:3f:13:e6:3c:fc:0e:41:74:7e:6f:8d:d2:b1:60:e8:
         78:d6:d5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----