Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/163/3139332e3136302e3131392e302f32342d3234203d3e20323132303536.roa
File:                     3139332e3136302e3131392e302f32342d3234203d3e20323132303536.roa (raw, json)
Hash identifier:          h0xBK9kqkIv0tA5+4UAPQQMKkSCxoUctomVLY89dwXY=
Subject key identifier:   AC:8C:33:F8:1D:ED:7E:2F:1E:7D:78:60:2E:02:FC:11:9A:07:F5:DC
Certificate issuer:       /CN=58929d850c68341e7c7cf8411dcbab66a8ea09d8
Certificate serial:       14A77AC1CD94717928FD085AA610E126B8383437
Authority key identifier: 58:92:9D:85:0C:68:34:1E:7C:7C:F8:41:1D:CB:AB:66:A8:EA:09:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WJKdhQxoNB58fPhBHcurZqjqCdg.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/163/3139332e3136302e3131392e302f32342d3234203d3e20323132303536.roa
Signing time:             Wed 13 Jan 2021 19:31:50 +0000
ROA not before:           Wed 13 Jan 2021 19:26:50 +0000
ROA not after:            Wed 12 Jan 2022 19:31:50 +0000
asID:                     212056
IP address blocks:        193.160.119.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a7:7a:c1:cd:94:71:79:28:fd:08:5a:a6:10:e1:26:b8:38:34:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58929d850c68341e7c7cf8411dcbab66a8ea09d8
        Validity
            Not Before: Jan 13 19:26:50 2021 GMT
            Not After : Jan 12 19:31:50 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:47:71:96:aa:7c:4b:a3:43:e0:33:40:82:6d:
                    10:7c:57:ac:cd:11:d9:06:70:1d:21:79:55:36:65:
                    74:a8:ae:7e:08:98:f8:62:ea:b9:ff:23:35:62:28:
                    41:c5:d5:c0:b8:fa:cb:5e:bd:e4:a8:7e:7a:0f:9e:
                    f4:cf:b5:9d:1f:7a:9f:4b:f6:6d:27:cb:33:c8:44:
                    e1:e8:9b:42:ce:6a:3c:17:1f:d5:18:3f:49:39:28:
                    74:7c:d9:a9:d8:25:5c:aa:16:37:e3:98:df:77:4d:
                    98:dd:df:02:f6:b6:3a:15:dc:36:b8:f6:2d:33:72:
                    71:2f:68:e5:ca:f3:79:ae:09:c1:98:d4:6f:77:eb:
                    30:9a:d8:9e:ec:cf:d8:62:ba:ac:9f:21:d2:ca:2f:
                    a9:5a:4d:a6:76:74:ff:5c:9b:33:a6:3f:f2:2d:6e:
                    3e:58:fc:92:ca:b5:98:63:d3:16:1a:97:7c:8a:5b:
                    74:ef:10:20:e2:61:d9:84:91:c1:e5:1c:32:f4:00:
                    43:2f:9d:f0:f9:68:11:b5:e5:05:30:ce:3f:ec:10:
                    45:b2:72:be:02:72:4f:ae:02:84:be:bf:33:2d:09:
                    02:d8:87:29:d6:e7:cf:85:98:4e:fa:29:11:f0:30:
                    9b:22:98:9c:e6:1b:10:6e:1f:b5:43:fa:93:5a:e3:
                    9a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:8C:33:F8:1D:ED:7E:2F:1E:7D:78:60:2E:02:FC:11:9A:07:F5:DC
            X509v3 Authority Key Identifier:
                keyid:58:92:9D:85:0C:68:34:1E:7C:7C:F8:41:1D:CB:AB:66:A8:EA:09:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/163/58929D850C68341E7C7CF8411DCBAB66A8EA09D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WJKdhQxoNB58fPhBHcurZqjqCdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/163/3139332e3136302e3131392e302f32342d3234203d3e20323132303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.160.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:3e:da:b9:be:2c:3f:0d:c1:4c:ae:ca:6d:3c:51:4c:24:03:
         53:ea:23:83:b0:45:ab:44:05:e8:1a:0b:7b:16:8f:3d:df:7a:
         ea:88:9f:fe:ea:23:1f:14:72:25:b8:a9:e1:79:9a:78:6a:87:
         91:e8:ce:98:27:48:a9:1b:a0:1b:da:69:1c:0b:6d:c4:76:bc:
         bf:07:81:bf:e4:67:d0:c2:30:ed:03:7e:c3:94:bd:d5:12:f1:
         6a:4a:cf:3e:d4:56:2c:26:07:25:77:b1:ff:da:2d:dd:d2:f2:
         0d:74:ff:96:3c:d9:e2:64:15:74:df:52:94:90:03:33:15:04:
         6d:df:0e:0d:f0:07:2b:c1:b7:ec:7d:08:73:39:a1:d1:a1:2f:
         02:35:18:6d:e3:3c:f1:1a:64:7c:a7:56:be:86:97:6d:b0:af:
         f7:51:42:2c:e3:c7:35:5a:51:08:43:28:5e:67:3b:5d:d8:94:
         27:9a:f9:f9:bd:c6:4a:d2:2e:dc:1c:74:62:84:d0:59:49:4a:
         10:33:4c:06:46:7d:28:6e:b5:c4:9f:e3:5b:32:9a:67:08:f9:
         c2:ab:0f:6f:88:e2:09:47:e2:0b:7c:49:f3:25:1d:ba:7d:24:
         bd:4b:56:e5:7a:f3:49:e5:0d:93:7d:0a:be:b0:07:47:77:dd:
         f7:82:72:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----