Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3138352e3234392e3232352e302f32342d3234203d3e203631333137.roa
File:                     3138352e3234392e3232352e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          Mwc+fo61y691t21caVgk2gtJmEKcclyUzloH8nWAiV4=
Subject key identifier:   2F:F6:F9:F1:43:85:76:31:2C:EB:0D:AE:C3:76:07:50:45:EE:82:4C
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       39E8B8855AC710EE0F9B120FFED02C539167949A
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3138352e3234392e3232352e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 27 Nov 2020 15:10:21 +0000
ROA not before:           Fri 27 Nov 2020 15:05:21 +0000
ROA not after:            Fri 26 Nov 2021 15:10:21 +0000
asID:                     61317
IP address blocks:        185.249.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e8:b8:85:5a:c7:10:ee:0f:9b:12:0f:fe:d0:2c:53:91:67:94:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Nov 27 15:05:21 2020 GMT
            Not After : Nov 26 15:10:21 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:57:76:7f:0a:9c:e0:1b:19:d4:b3:71:f4:fe:
                    e8:cb:10:7b:2d:4f:f8:6e:70:2f:a3:1b:92:80:f0:
                    bb:3c:64:db:62:dc:6b:32:94:3e:ea:af:6b:91:f1:
                    f6:30:81:81:4a:a4:b6:36:2b:69:cd:a4:85:ee:b8:
                    96:eb:40:76:42:e2:ee:50:11:5c:27:c5:07:2d:1e:
                    e6:f1:82:fd:7b:15:06:75:43:b7:cd:54:8f:4c:44:
                    1d:dc:61:df:15:d8:06:00:32:35:9b:a2:57:08:fe:
                    09:f3:8b:b3:d0:df:67:65:0a:94:11:fe:38:76:1c:
                    38:cb:3c:d3:ff:31:1b:54:a6:28:f9:6d:cb:82:04:
                    3a:67:1e:9b:2d:a8:87:b9:b5:73:97:3b:7f:ca:07:
                    3a:cf:28:22:a6:8c:8c:13:6e:e2:5f:fa:17:63:6f:
                    82:7d:40:6b:0b:92:66:19:21:4a:2b:de:3c:db:96:
                    4d:b0:d4:45:3e:9f:91:eb:56:84:01:78:2a:3a:c5:
                    cc:2e:2a:30:57:75:5b:9f:6c:40:1e:21:c1:67:cf:
                    a7:85:63:5a:36:1e:9c:63:4e:96:45:34:da:3f:6e:
                    1a:ec:e6:7a:b9:32:a5:4f:fd:d6:23:7c:30:a1:dc:
                    2a:8b:80:9d:47:f4:ca:7e:11:c9:5a:d2:f7:02:25:
                    67:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F6:F9:F1:43:85:76:31:2C:EB:0D:AE:C3:76:07:50:45:EE:82:4C
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3138352e3234392e3232352e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.249.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:2b:60:1a:e1:1e:3f:38:e1:ea:91:f1:91:3c:f0:4b:03:28:
         7c:2a:ba:b4:d1:15:73:1f:86:53:a3:ec:22:7b:bb:0b:b0:66:
         cd:69:d0:ef:e8:56:b7:f0:e8:38:f0:66:cf:d2:64:70:64:fb:
         00:8e:ad:58:70:4d:e7:30:f1:ae:55:87:d7:96:d9:cf:00:84:
         11:72:88:4c:14:8e:b5:8d:bf:93:2c:dd:36:ce:ec:1f:b8:8d:
         ca:41:eb:1d:10:60:6f:44:d1:ce:7b:03:9f:51:94:79:21:dc:
         b4:dc:a3:cc:63:c4:0a:2e:11:ba:57:da:53:63:27:42:44:81:
         87:e4:f2:2c:10:6d:c8:6b:e7:c1:a7:3d:e4:96:a9:e7:63:0a:
         fd:1d:16:1c:a4:2a:a6:99:af:9d:ff:9f:2d:7f:c9:d8:ae:5c:
         94:37:28:ef:b7:94:2d:6b:d4:c2:16:55:f3:f4:67:9e:2e:11:
         29:bf:aa:84:1a:d5:98:b0:77:23:1f:20:2c:79:a0:f9:e5:55:
         fa:f9:54:23:05:86:6a:10:8f:59:26:85:9d:db:da:81:8c:c6:
         2c:63:4a:6e:a9:ba:ff:ff:61:67:c6:98:b7:aa:66:7d:78:f2:
         e7:ab:55:c4:35:d2:6f:b4:21:ef:6a:4c:c8:0c:26:e1:1a:ed:
         5e:fb:3d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----