Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231332e38322e302f32332d3234203d3e203631333137.roa
File:                     3138352e3231332e38322e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          qt6it98I+zKb6i6dyLM+yPMj8BoljkVbkw08G0q4pTg=
Subject key identifier:   53:BC:85:2D:2C:1F:AC:EC:CA:61:F6:8D:F0:04:57:40:95:E4:2D:C0
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       7B01D94798F0D1E05A1D231C4BAC74365150F4FC
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231332e38322e302f32332d3234203d3e203631333137.roa
Signing time:             Fri 27 Nov 2020 15:10:10 +0000
ROA not before:           Fri 27 Nov 2020 15:05:10 +0000
ROA not after:            Fri 26 Nov 2021 15:10:10 +0000
asID:                     61317
IP address blocks:        185.213.82.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:01:d9:47:98:f0:d1:e0:5a:1d:23:1c:4b:ac:74:36:51:50:f4:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Nov 27 15:05:10 2020 GMT
            Not After : Nov 26 15:10:10 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a1:69:61:75:18:44:0f:46:ef:c5:1c:ff:10:
                    2c:c3:9c:d8:06:1b:6b:4f:27:1e:81:fa:ca:96:6a:
                    fc:e2:fa:cf:34:ed:59:1d:b3:23:e1:55:9f:84:0a:
                    1f:b5:47:d9:c0:de:96:29:a2:6c:34:a8:f0:dc:f7:
                    08:67:e8:d4:43:06:75:e5:cb:73:69:14:da:df:d2:
                    c1:5c:c5:e3:39:ba:02:f0:4d:76:90:6b:4b:9c:f1:
                    25:ce:37:b6:0e:d5:fc:dc:7d:20:8b:18:e6:ce:34:
                    85:7c:62:42:84:55:02:24:ee:18:ee:de:55:5a:b2:
                    65:1c:6d:ee:90:aa:11:4e:d6:dd:be:fa:3c:c2:73:
                    8c:6c:b1:84:10:e3:20:5c:73:7d:a7:1d:f7:44:76:
                    46:a2:b4:6e:ba:3b:2f:60:7d:bc:f0:ae:1d:d0:f2:
                    b0:19:aa:d5:85:32:ac:1d:d8:59:2f:08:04:eb:03:
                    c9:ec:2e:d8:a0:71:e5:d3:d1:6e:1c:4a:c8:22:ee:
                    5f:f6:f1:f6:12:49:a7:6a:51:c4:8a:ce:3a:d1:51:
                    b5:80:18:c2:6c:70:9b:92:e7:ac:a1:16:8c:6d:ba:
                    a3:d8:80:98:ad:11:25:23:13:52:21:3a:58:33:8f:
                    d9:c1:d0:dc:8d:59:ff:96:6a:41:71:e2:ac:82:53:
                    36:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BC:85:2D:2C:1F:AC:EC:CA:61:F6:8D:F0:04:57:40:95:E4:2D:C0
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231332e38322e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.213.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:ca:f2:7b:43:73:27:1b:8c:3f:97:b6:0a:ee:08:1f:f3:1d:
         ad:ef:13:a2:38:f4:a8:ad:61:11:31:7c:40:60:84:b2:0e:0f:
         46:42:fa:f4:72:97:f4:45:c0:5b:88:7d:a0:63:f7:32:f1:a0:
         ed:60:17:33:84:a4:b8:ca:52:67:73:26:64:57:27:f2:57:51:
         9a:ad:c6:6c:3c:48:de:49:9c:0a:29:95:f0:0e:d4:56:b9:8f:
         e2:16:93:67:73:e9:dd:fd:bb:b7:d3:40:e9:8a:7b:11:88:c9:
         17:d2:b6:9a:1c:8c:6b:15:a9:7d:2c:5d:e4:de:e4:42:e4:56:
         09:d7:e0:1c:9b:5a:9c:ca:73:ce:57:88:8a:fa:eb:79:30:f0:
         3a:5d:02:4e:6d:e8:9e:18:24:75:81:28:da:c5:1d:b0:bd:28:
         ad:61:9d:29:0c:71:f5:da:76:c7:97:31:e4:ac:4e:d9:de:d9:
         1f:ac:1c:ca:de:fc:0f:88:2d:6e:b7:21:e3:1a:c9:35:8f:c6:
         2a:44:98:dd:54:61:1c:14:53:be:1d:4b:30:e2:40:fe:38:5e:
         1f:d7:bc:87:b5:ba:90:1d:69:06:3e:36:1f:66:a7:9f:e6:e3:
         6d:b6:8f:ca:eb:6f:66:8b:a2:73:0c:5c:7e:28:6d:81:1c:08:
         1e:70:e5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----