Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231342e39382e302f32342d3234203d3e20323132303530.roa
File:                     3138352e3231342e39382e302f32342d3234203d3e20323132303530.roa (raw, json)
Hash identifier:          yrpNotD870EN8z+wKVsy7+uu5PPJtmF5REAT347f6rQ=
Subject key identifier:   D3:26:63:E7:62:DD:48:46:09:59:DC:0F:FE:B5:58:E2:8C:E0:7F:A0
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       64AB6F00F2414FBD938CA1EE8F82D63048BD8992
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231342e39382e302f32342d3234203d3e20323132303530.roa
Signing time:             Wed 13 Jan 2021 08:17:49 +0000
ROA not before:           Wed 13 Jan 2021 08:12:49 +0000
ROA not after:            Wed 12 Jan 2022 08:17:49 +0000
asID:                     212050
IP address blocks:        185.214.98.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:ab:6f:00:f2:41:4f:bd:93:8c:a1:ee:8f:82:d6:30:48:bd:89:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jan 13 08:12:49 2021 GMT
            Not After : Jan 12 08:17:49 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:01:71:31:ff:b9:3a:62:b3:75:5a:90:d5:61:
                    48:f3:02:7c:b4:59:39:a0:8f:ef:72:76:2f:59:f4:
                    02:4e:31:c1:e5:28:c5:af:e4:16:ad:e6:ea:8a:a7:
                    1a:cf:6e:0f:54:72:5f:92:b3:6d:99:12:2c:85:ad:
                    8c:76:c1:2c:a7:65:50:70:6d:2a:c8:8d:ff:aa:74:
                    b3:00:b3:88:e6:45:d9:8a:72:aa:36:dc:6e:f4:e9:
                    bd:cf:17:45:8e:a0:9d:dd:69:32:15:6c:e7:31:32:
                    d2:d9:f4:a2:31:b9:6c:8f:fb:c3:17:cb:ba:3e:e2:
                    58:7c:ef:26:27:ac:e9:04:09:bc:da:f1:ab:17:b9:
                    7c:05:5d:ce:e4:90:d1:38:5f:8d:ac:fa:c6:db:66:
                    2e:e8:d5:28:1a:7c:4b:c8:9d:49:53:4b:ba:76:90:
                    84:d2:34:e8:e1:a6:b5:ec:da:e1:5b:b0:ba:bb:d9:
                    30:73:45:59:d0:07:c6:5c:a0:5d:c5:fc:b5:9d:de:
                    4a:ec:e1:75:f2:d4:45:1a:14:c8:82:2c:c6:25:b0:
                    20:3b:1d:84:5f:ea:27:3f:9a:a7:1a:6c:50:ab:89:
                    35:ff:a8:c4:2d:93:ed:14:2d:57:02:ef:ed:2c:2f:
                    e5:8c:be:79:10:ff:9c:f3:46:f5:18:9b:4f:ea:ab:
                    b8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:26:63:E7:62:DD:48:46:09:59:DC:0F:FE:B5:58:E2:8C:E0:7F:A0
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3231342e39382e302f32342d3234203d3e20323132303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.214.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:1d:14:47:a5:ac:0e:6c:b5:7a:c2:e0:a1:69:be:b8:58:5a:
         28:90:81:36:e7:60:4f:b6:4b:8e:8c:7b:18:a0:c7:bb:98:d8:
         a1:16:55:f1:35:2a:8a:0a:86:5c:ad:70:a4:42:5d:59:bd:36:
         5c:b7:dc:93:73:a5:f4:a1:ba:fc:a2:11:ee:54:3a:81:d7:a3:
         aa:4e:3b:71:20:11:3f:2d:e9:b6:9c:4b:7c:85:b7:9a:4c:04:
         67:8c:b5:4c:28:f5:da:2e:2c:71:60:b4:bc:68:2b:f5:1d:f7:
         5f:be:f8:e9:df:7b:1a:eb:59:c2:31:5c:41:50:7e:d7:3f:d6:
         f1:78:82:0d:93:8f:e0:ff:79:b6:78:9a:1c:8f:c9:8f:89:c6:
         9e:e1:81:64:b6:00:95:ad:3c:cb:4e:5b:0b:40:9f:6c:fb:9e:
         a0:c8:a6:00:fe:2c:20:4d:f9:27:f6:b6:df:0d:f9:d5:77:79:
         75:0f:55:b3:8f:de:9c:31:ba:ac:f1:6d:73:71:74:8c:86:57:
         11:82:a2:93:f8:f9:d8:e4:21:b9:88:30:ab:65:17:c8:41:d6:
         f2:ec:bd:64:03:59:6c:03:58:a4:7e:18:61:76:7d:98:8c:e4:
         c9:6e:90:e0:c6:91:39:34:69:5c:ef:16:5a:ee:f4:9b:60:d3:
         34:bf:b3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----