Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3233302e3133362e302f32342d3234203d3e20323132383532.roa
File:                     3138352e3233302e3133362e302f32342d3234203d3e20323132383532.roa (raw, json)
Hash identifier:          SaOjQhf/3g3BGSTPk3SsfqlZc8UAzjau87Yip97rfS8=
Subject key identifier:   75:E3:83:9E:11:85:FC:F7:48:BA:37:5E:31:B1:44:3E:08:C0:A9:7C
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       6606E5586A53BB45CFF2E4F41E198A81FC5359BE
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3233302e3133362e302f32342d3234203d3e20323132383532.roa
Signing time:             Fri 27 Nov 2020 15:10:36 +0000
ROA not before:           Fri 27 Nov 2020 15:05:36 +0000
ROA not after:            Fri 26 Nov 2021 15:10:36 +0000
asID:                     212852
IP address blocks:        185.230.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:06:e5:58:6a:53:bb:45:cf:f2:e4:f4:1e:19:8a:81:fc:53:59:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 27 15:05:36 2020 GMT
            Not After : Nov 26 15:10:36 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c9:c5:1c:23:0d:92:e0:22:c0:b2:98:a3:3c:
                    b1:90:79:f8:ce:b7:c7:42:6a:a1:d5:fe:2a:f3:93:
                    2e:a9:51:37:84:60:d0:c1:a9:8d:b4:e5:c4:64:3f:
                    56:ea:d8:cc:04:93:19:93:25:95:02:31:ac:19:d5:
                    43:3d:07:e4:9e:0d:bd:0a:0d:cc:91:12:6d:93:6b:
                    5f:79:9d:65:19:72:60:83:bb:31:79:38:09:63:cd:
                    31:b5:d2:4a:f0:4a:67:d3:a0:50:a6:48:48:be:5d:
                    7a:48:74:49:82:5f:f1:ab:be:a0:42:0d:dc:87:8f:
                    fb:35:45:d6:79:03:00:cc:bd:b8:af:0b:a8:b8:7e:
                    7a:89:dd:e1:3e:d4:b0:93:7d:d2:fb:c8:5a:7d:fe:
                    c9:a0:0c:b8:20:e1:da:a7:30:21:a2:e5:db:a6:93:
                    85:9a:3d:a2:1a:c5:b9:b2:af:98:fa:d6:ad:a7:d0:
                    f9:0c:90:e1:19:6b:7c:a8:25:d7:6f:74:12:71:b5:
                    df:65:d0:5a:c0:41:9b:a8:16:47:bb:ce:a7:2f:60:
                    14:90:4c:8f:97:24:71:47:a1:8e:9a:74:de:42:2c:
                    f5:82:18:9f:7d:5a:9c:46:c8:42:c2:a2:0d:dd:f7:
                    97:03:1e:78:61:d0:3b:f3:6a:5a:37:91:37:12:cc:
                    f9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E3:83:9E:11:85:FC:F7:48:BA:37:5E:31:B1:44:3E:08:C0:A9:7C
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3233302e3133362e302f32342d3234203d3e20323132383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.230.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:c1:39:a9:88:3e:e5:43:48:3f:ed:5b:c6:8a:37:31:ce:82:
         23:ed:7c:4e:d5:2b:22:ed:75:15:b9:f4:b6:8e:ea:ee:75:d7:
         c5:bc:53:2a:63:53:34:63:2b:c5:99:d4:71:3e:6d:fd:c6:e6:
         84:f8:57:c2:35:27:e1:c5:2d:57:a5:12:86:2a:0e:ff:07:22:
         7f:32:52:93:42:c5:ae:ca:75:82:f6:90:f8:b3:1f:a4:cf:bf:
         88:74:3e:c3:8c:af:a6:ef:a4:29:0a:d4:b4:55:f5:17:2d:bd:
         64:c4:99:cd:79:c7:ce:0d:4b:82:b6:50:4a:29:17:d4:45:ec:
         89:cf:8a:6d:f8:ca:d5:d8:96:b2:06:56:4c:dd:d6:12:3b:43:
         60:88:22:db:11:b6:74:55:a9:d4:44:53:eb:ac:43:59:4a:2b:
         70:52:dc:03:85:04:0e:ed:c5:7b:c2:ad:76:7a:92:13:f3:40:
         fd:80:b3:54:98:ad:31:ed:db:b5:f4:28:99:4f:b6:c0:e4:5e:
         41:df:04:74:fb:e5:7b:0d:f1:97:99:3a:91:94:42:d4:d8:fc:
         e8:a1:84:a4:41:2b:97:1b:6e:2a:aa:d2:f2:ea:46:32:e1:62:
         b7:56:1c:7d:34:9d:48:63:4f:fc:04:f8:de:f1:2e:cd:28:94:
         39:4f:28:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----