Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230352e3234362e302f32342d3234203d3e20323133303335.roa
File:                     3138352e3230352e3234362e302f32342d3234203d3e20323133303335.roa (raw, json)
Hash identifier:          xugqD7gwApxhJKSdF2PchhvFuT/xL1FlhvdY9QJyXqI=
Subject key identifier:   AF:4D:04:66:D7:A8:C1:B8:B1:8F:DC:74:71:FA:2D:46:E3:D2:D9:4A
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       C587AF4297760F6D050483A107FFD49EE5804F
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230352e3234362e302f32342d3234203d3e20323133303335.roa
Signing time:             Fri 27 Nov 2020 15:10:39 +0000
ROA not before:           Fri 27 Nov 2020 15:05:39 +0000
ROA not after:            Fri 26 Nov 2021 15:10:39 +0000
asID:                     213035
IP address blocks:        185.205.246.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c5:87:af:42:97:76:0f:6d:05:04:83:a1:07:ff:d4:9e:e5:80:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 27 15:05:39 2020 GMT
            Not After : Nov 26 15:10:39 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f0:70:54:8c:99:ea:a8:5b:7b:27:6e:ae:7b:
                    81:34:4d:c3:60:ee:72:b3:a0:00:1a:04:8a:cd:b8:
                    5c:ff:97:3a:56:b1:01:df:a3:4e:fb:12:48:85:39:
                    db:74:55:7a:27:05:c8:da:90:2b:3a:69:57:9f:c3:
                    14:e3:15:40:4a:2b:83:b7:82:38:3a:d8:e7:e5:27:
                    46:ee:e3:be:bb:75:21:7a:ee:f6:51:44:0c:16:e4:
                    a1:c4:75:a1:4c:b0:e4:36:24:12:0a:7c:ea:b1:5a:
                    5c:e2:6a:f2:1c:0d:dd:5d:59:31:09:4f:db:04:8e:
                    5a:76:69:6f:ca:96:89:87:18:3c:2b:b5:3a:b0:40:
                    b9:fa:82:10:d1:21:c7:b7:ac:6e:2f:79:05:8a:11:
                    29:41:d7:62:3c:84:d0:8d:df:91:17:e6:47:d8:46:
                    db:90:98:90:23:94:57:ec:1d:c7:45:19:86:f9:53:
                    da:52:2d:2b:9d:00:fa:93:72:72:47:c7:1c:ba:7a:
                    a9:dd:af:ce:c6:5c:10:04:3a:21:bb:93:6c:81:59:
                    af:84:46:9e:03:ad:17:c5:3f:ae:53:c5:b8:61:8e:
                    04:15:3f:4f:60:e4:91:7a:4a:71:95:cc:d4:c4:d2:
                    13:3e:90:56:01:09:96:dd:c8:19:af:fe:89:31:20:
                    fd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:4D:04:66:D7:A8:C1:B8:B1:8F:DC:74:71:FA:2D:46:E3:D2:D9:4A
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230352e3234362e302f32342d3234203d3e20323133303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.205.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:4d:89:af:dc:d2:a1:5a:01:cf:c7:25:7b:b7:26:61:25:25:
         5a:ff:e4:2b:bc:88:81:85:63:dd:9c:7d:fb:ba:b2:67:ae:ab:
         ae:78:b2:95:77:af:b8:9d:3f:64:14:a5:f4:32:f4:81:7f:d5:
         45:56:a1:ad:69:95:cd:78:19:9c:da:c7:2d:2d:71:20:50:86:
         79:33:a8:69:d1:70:dd:15:fb:a6:51:7a:bc:03:26:25:bc:53:
         12:6d:0d:bb:1b:72:a9:85:48:72:ec:e3:61:8a:29:a9:54:e3:
         4d:8d:4d:36:4a:61:e4:ee:dd:2d:eb:2c:7f:87:bc:79:80:42:
         6e:e2:bd:26:d6:b8:ba:a5:c0:6e:64:ce:35:87:77:5d:45:97:
         35:70:83:07:f8:6b:51:e7:19:54:b0:10:ea:b1:27:3b:eb:55:
         fb:63:fa:a1:7a:0e:77:0f:03:80:69:36:57:fa:c6:c7:66:8e:
         b7:d0:2f:fb:09:e1:17:f9:a9:0d:d7:ac:2b:d8:2c:b2:91:15:
         bd:2e:da:8c:a6:d8:74:50:98:31:33:a8:ae:be:49:72:0c:21:
         61:77:70:92:74:1e:40:29:3b:60:2e:c4:bc:05:2c:e2:6d:c9:
         1a:5d:f2:a2:5e:7c:93:72:7e:f1:56:fd:04:18:bc:a0:f0:1b:
         ac:87:01:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----