Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230352e3234362e302f32342d3234203d3e2031323339.roa
File:                     3138352e3230352e3234362e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier:          94Gng6wi2NMPMZENQ400mJ4q71kbj9eyyQis7OLapGY=
Subject key identifier:   01:6D:F6:7C:63:74:F1:E5:9D:B5:18:C5:D5:EE:2F:6D:C3:3E:13:78
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       0A2A9FB3563F222BC8A6582596487DDBD241C553
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230352e3234362e302f32342d3234203d3e2031323339.roa
Signing time:             Sat 22 May 2021 08:12:32 +0000
ROA not before:           Sat 22 May 2021 08:07:32 +0000
ROA not after:            Sat 21 May 2022 08:12:32 +0000
asID:                     1239
IP address blocks:        185.205.246.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:2a:9f:b3:56:3f:22:2b:c8:a6:58:25:96:48:7d:db:d2:41:c5:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: May 22 08:07:32 2021 GMT
            Not After : May 21 08:12:32 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5d:87:08:6c:fb:72:65:27:7b:c5:11:f5:1c:
                    86:d7:d3:67:96:9f:6c:7a:4a:e0:56:2a:26:f7:a6:
                    12:3a:19:fa:69:bc:11:49:3b:e1:e3:b2:99:99:b7:
                    25:be:0e:aa:4f:01:3a:d0:b6:ff:cb:39:17:36:0a:
                    4d:06:27:fc:0e:ee:60:e2:0d:0a:66:2d:d6:8c:7a:
                    59:43:5b:1e:9e:4a:23:26:2f:bb:73:96:a8:bb:30:
                    9a:ae:dc:7d:85:58:6d:d9:db:64:f4:83:3e:08:17:
                    b2:03:9c:81:23:8f:6d:44:88:bf:e6:6c:e7:b1:4d:
                    20:ea:15:3e:f4:11:e7:26:ee:76:a6:42:7a:90:05:
                    d4:b6:fa:96:94:06:53:3f:ad:44:e5:73:43:0b:4c:
                    7f:4e:d0:82:71:e7:f4:d2:2a:66:43:22:24:af:27:
                    f3:61:e2:fc:c1:0e:2f:9c:52:95:82:fe:a5:97:ed:
                    ef:eb:8b:95:59:e1:ca:77:6d:67:01:a9:f4:26:d7:
                    67:6d:2f:8f:65:8e:9c:aa:8e:1a:49:3d:83:82:24:
                    27:19:8b:51:94:23:e9:1b:33:b9:35:2c:71:b9:0b:
                    b3:a3:da:a8:cc:e5:a2:51:bc:d1:65:75:8b:4a:19:
                    66:d6:5a:e4:2e:b2:d2:6d:78:a7:5c:c3:0f:45:24:
                    d6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:6D:F6:7C:63:74:F1:E5:9D:B5:18:C5:D5:EE:2F:6D:C3:3E:13:78
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230352e3234362e302f32342d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.205.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:6d:8f:34:b0:e9:28:17:63:73:cb:0d:27:68:f1:af:94:7d:
         a3:9c:4a:8c:42:d4:0a:b1:aa:11:ad:71:92:70:c0:4b:1c:81:
         af:74:69:8c:39:ef:59:45:8e:d9:6a:59:73:b0:51:52:b2:9a:
         93:52:99:f5:b3:d5:cf:8c:05:29:41:0f:86:a5:db:32:42:69:
         9c:43:65:72:a7:90:0a:17:b0:73:87:3e:f9:1c:ac:17:54:83:
         8f:bf:98:93:dc:f2:18:3a:b1:1f:4c:f9:a2:e5:ec:95:47:d0:
         8c:26:6f:6e:08:58:41:3f:27:3b:3b:45:4e:c5:de:7e:25:1d:
         f2:e6:0b:04:29:ad:7a:a3:59:98:d9:2a:6d:7e:c4:51:a2:d7:
         7f:e5:4c:65:ae:a5:99:13:72:1d:45:fb:74:4c:33:0c:95:65:
         c6:80:47:35:01:81:50:8c:bf:93:fb:ec:67:1d:a8:d2:8e:b0:
         db:32:85:45:3c:16:e5:e7:f3:3d:9e:20:1b:de:5f:c5:f1:86:
         c0:c3:c8:b1:5b:63:0d:4e:b5:59:50:a6:7b:5e:ae:e7:aa:a4:
         89:88:10:fe:03:a4:b3:61:e2:2e:ad:37:a7:5b:60:a6:0c:49:
         31:bb:56:74:07:d6:79:51:76:a0:9f:93:37:86:d3:dd:7a:c9:
         95:24:5d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----