Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/178/3139332e34322e302e302f32342d3234203d3e20323131383331.roa
File:                     3139332e34322e302e302f32342d3234203d3e20323131383331.roa (raw, json)
Hash identifier:          bf1Rrsc6EcY77+nx2WGZjBIfPBe6YDK918EhkQvqpAw=
Subject key identifier:   30:84:47:F4:B6:53:74:A6:71:45:A6:41:61:74:CD:D8:F0:F7:F4:A3
Certificate issuer:       /CN=67a6e5206be3501ddd38d6f31c3368200c43a473
Certificate serial:       724D08B51544F136539684A4F8A473FF1592ED29
Authority key identifier: 67:A6:E5:20:6B:E3:50:1D:DD:38:D6:F3:1C:33:68:20:0C:43:A4:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z6blIGvjUB3dONbzHDNoIAxDpHM.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/178/3139332e34322e302e302f32342d3234203d3e20323131383331.roa
Signing time:             Sat 13 Feb 2021 18:21:09 +0000
ROA not before:           Sat 13 Feb 2021 18:16:09 +0000
ROA not after:            Sat 12 Feb 2022 18:21:09 +0000
asID:                     211831
IP address blocks:        193.42.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:4d:08:b5:15:44:f1:36:53:96:84:a4:f8:a4:73:ff:15:92:ed:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67a6e5206be3501ddd38d6f31c3368200c43a473
        Validity
            Not Before: Feb 13 18:16:09 2021 GMT
            Not After : Feb 12 18:21:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:27:5d:f9:55:56:9d:10:2d:26:ba:4d:be:bf:
                    3c:74:d0:d6:ee:2f:25:4c:99:cc:f0:44:b6:45:be:
                    19:fb:a4:c3:b6:35:17:4b:21:17:a0:3e:97:67:f6:
                    20:81:3d:69:eb:7e:94:96:ec:e3:cc:8f:ff:87:2f:
                    b3:14:e5:71:8d:c8:49:6d:ea:7c:95:28:e7:a3:f7:
                    34:51:b2:27:cd:11:e4:74:3f:79:a0:56:60:6b:cd:
                    b6:9a:fc:0c:90:45:40:27:f3:cf:96:30:89:26:03:
                    a0:41:48:82:1f:31:e8:82:69:8e:c4:38:ef:57:78:
                    f2:9c:0a:60:13:37:ff:72:45:80:02:63:88:f6:79:
                    1e:28:f5:e1:77:94:71:fb:71:72:d6:2e:a9:ab:80:
                    7f:1a:85:c3:bd:dd:3c:2b:cf:2c:99:7c:06:0c:10:
                    01:a6:25:75:e2:ea:31:2f:5a:0c:f2:f9:2e:84:f8:
                    d4:0d:76:80:65:5f:5c:aa:78:4f:6e:29:5f:d4:e2:
                    ab:1a:71:f7:60:24:67:8a:06:50:53:7b:b1:1d:4f:
                    a9:af:6f:7b:d5:fc:a9:fc:97:98:f1:a1:0f:1d:3f:
                    7e:95:2b:61:3d:66:84:0a:1f:05:ae:3f:f7:99:67:
                    e0:89:23:00:28:d5:0d:9d:14:65:6c:c4:cf:67:d8:
                    71:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:84:47:F4:B6:53:74:A6:71:45:A6:41:61:74:CD:D8:F0:F7:F4:A3
            X509v3 Authority Key Identifier:
                keyid:67:A6:E5:20:6B:E3:50:1D:DD:38:D6:F3:1C:33:68:20:0C:43:A4:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/178/67A6E5206BE3501DDD38D6F31C3368200C43A473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6blIGvjUB3dONbzHDNoIAxDpHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/178/3139332e34322e302e302f32342d3234203d3e20323131383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.42.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:12:bb:d9:1b:ba:b7:3f:6c:4a:db:da:76:aa:9b:08:cc:70:
         7f:57:f0:04:1e:7e:15:51:11:85:83:64:66:09:ef:29:51:d9:
         b5:93:3d:23:7a:2c:39:67:ff:71:c1:d0:c0:88:23:b2:5f:b0:
         a8:6c:0d:c2:b8:fc:31:28:e3:e2:20:f5:f1:41:ab:79:70:14:
         6e:fa:30:d9:e4:2b:3d:3e:d5:01:28:db:23:ed:d1:0d:02:66:
         88:bc:3c:a2:07:05:15:f1:ad:ef:20:10:41:39:4f:14:bd:fa:
         3d:39:bd:a8:0e:d8:2d:58:39:20:2b:a7:3e:0a:e9:de:68:2a:
         ee:95:a6:06:e1:de:bd:b6:fa:ec:b0:8d:aa:00:96:dc:cb:4d:
         1e:2f:24:ee:35:98:6e:4e:ec:43:7d:68:15:dc:3b:d9:b4:41:
         aa:63:e0:e3:ba:14:01:2e:e1:6d:3d:f4:45:e2:0a:75:c4:7d:
         77:54:ec:20:9b:62:e9:69:f9:8d:dc:80:c1:de:8b:5c:6d:1a:
         35:0f:3d:6b:78:f0:5a:17:ac:36:7c:88:e6:44:28:c3:f3:d2:
         74:2b:e9:3d:85:29:d1:37:35:b8:da:06:0a:98:82:1c:12:92:
         de:d3:7a:71:f9:45:4e:68:d0:f8:b1:70:3a:b2:77:7e:52:51:
         13:9b:64:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----