Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139342e3231362e302f32332d3234203d3e203631333137.roa
File:                     3138352e3139342e3231362e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          S8LvYCA3uR3s2pFYCFDV4pPEuoLXqA6NIln7iI+Wyro=
Subject key identifier:   FB:EA:BC:52:6E:17:BC:DD:22:D5:E8:E1:0D:A8:D8:9B:91:66:37:15
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       30E0CDDC65EFED744CB70E96032CD7E5DD7F4367
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139342e3231362e302f32332d3234203d3e203631333137.roa
Signing time:             Fri 27 Nov 2020 15:10:12 +0000
ROA not before:           Fri 27 Nov 2020 15:05:12 +0000
ROA not after:            Fri 26 Nov 2021 15:10:12 +0000
asID:                     61317
IP address blocks:        185.194.216.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e0:cd:dc:65:ef:ed:74:4c:b7:0e:96:03:2c:d7:e5:dd:7f:43:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Nov 27 15:05:12 2020 GMT
            Not After : Nov 26 15:10:12 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:66:af:7b:b1:80:f1:9d:17:93:a0:bc:08:d7:
                    3a:bc:3b:75:c4:08:64:cd:10:fa:51:39:b3:a4:ea:
                    d4:00:45:30:5d:03:a6:ba:13:90:4b:d7:6e:7e:35:
                    d4:46:0e:09:19:6f:32:4b:d9:58:67:b1:0f:cf:e0:
                    b2:c7:21:9c:ed:1b:32:f2:0d:f1:5e:a2:ad:07:22:
                    15:13:7c:1a:a2:af:50:11:30:ee:fe:1d:14:40:bf:
                    d7:90:a3:1f:29:08:c4:af:42:84:fd:ab:2f:a2:3c:
                    43:22:7a:cf:46:a0:94:7a:f8:52:0c:3b:9c:f4:cd:
                    38:aa:f0:f9:f5:5f:2f:d5:f9:81:87:4f:90:d3:66:
                    b5:d7:33:16:02:70:a0:6f:a2:c8:1c:cf:81:5e:9d:
                    4e:58:15:2f:ae:e5:5c:8c:0a:61:9f:f2:5c:b6:32:
                    5c:08:83:00:56:af:b4:f3:99:3b:96:06:7f:ea:3a:
                    74:43:c8:3d:ae:f5:ca:ff:15:58:9d:3f:81:49:65:
                    14:4e:3d:58:21:ca:00:fa:88:83:de:7e:b1:98:04:
                    95:0a:9a:45:7d:94:0c:5f:65:1b:ed:a6:2b:de:ac:
                    d9:b9:f4:d7:b0:2e:d4:8c:29:d1:97:e3:f4:65:1d:
                    25:84:e7:eb:35:2a:f7:b5:d5:78:22:49:14:06:d3:
                    bd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:EA:BC:52:6E:17:BC:DD:22:D5:E8:E1:0D:A8:D8:9B:91:66:37:15
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139342e3231362e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.194.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         f0:1d:e4:c2:53:c9:66:9b:40:0d:9b:c0:e0:ec:39:e6:a6:3c:
         67:09:70:cd:8f:9d:8b:a2:6b:d7:5c:f4:b3:b0:2b:20:b9:82:
         99:59:19:a7:ec:cf:8b:04:8c:18:89:ad:7a:7b:f0:69:44:05:
         0f:a5:b0:3e:a7:8c:41:64:05:ef:89:1d:43:c0:37:ac:12:23:
         79:2b:c5:12:ac:53:ca:c9:ff:34:3e:96:78:82:3f:83:f5:04:
         14:55:3b:fc:64:b5:5b:4f:e4:0a:b2:e6:1b:3e:5f:ef:4d:65:
         04:72:b4:38:d2:1c:92:18:06:39:b5:c0:dd:52:71:cf:f2:bb:
         c8:d1:3a:09:a9:af:a4:5b:93:6b:5d:6d:a7:b7:6f:c2:54:4d:
         52:91:2f:00:4a:dd:33:1a:bb:71:13:a1:c6:c9:8a:37:44:98:
         2b:4f:a8:16:37:08:82:b4:da:9c:6c:42:74:8e:3e:e1:49:fb:
         18:65:df:59:58:f8:e0:bd:72:d3:53:32:ae:97:c0:5c:d9:6a:
         65:d2:3d:16:08:26:4d:ae:f6:65:19:dd:36:72:d4:87:c0:0f:
         dc:69:bd:b0:01:5f:d2:1e:f3:39:bd:08:44:e1:c3:72:6b:8c:
         96:09:b4:da:17:c5:1d:68:91:09:f2:24:45:13:0a:08:2e:ce:
         4d:21:50:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----