Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3134392e36322e33362e302f32332d3233203d3e203631333137.roa
File:                     3134392e36322e33362e302f32332d3233203d3e203631333137.roa (raw, json)
Hash identifier:          IU8+a7JJ//pZzrOjxyImoRV3kiRbFowdZPo9x1/M9JA=
Subject key identifier:   46:E8:8D:91:C8:4C:00:CC:BB:99:00:58:8E:66:91:55:40:FB:AD:78
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       17508A65585CC43F942095F4189AD83B30755BEE
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3134392e36322e33362e302f32332d3233203d3e203631333137.roa
Signing time:             Tue 05 Jan 2021 14:17:30 +0000
ROA not before:           Tue 05 Jan 2021 14:12:30 +0000
ROA not after:            Tue 04 Jan 2022 14:17:30 +0000
asID:                     61317
IP address blocks:        149.62.36.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:50:8a:65:58:5c:c4:3f:94:20:95:f4:18:9a:d8:3b:30:75:5b:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Jan  5 14:12:30 2021 GMT
            Not After : Jan  4 14:17:30 2022 GMT
        Subject: CN=3082010A0282010100C646AABE8CEA1CA82B630D660C442FA4736A3619499324B7C8E003CA4538B3F01114A2F023E4A4CD167A379C85FF59A5E800548F47A6AB874368E3A5AB4BF69E3319224B66CCBB6752F8D34DED48EB2E96C3FC17B306471AC47DC699318F24A6A3FC2A3BD6B65D6700ABB9A309C2F223B817AA3EBBBA319A15A83889007DFF2B68C19781FF6E107A8AE0AAB13697262656A1033EFE31DC0CC8EA4FD62192B765ED1D6D2079B097ADC42B4AC7E6DA8E1C079FB02E1FF78BCCFADE6243CECE4827ECA64CA8CAAAF5E9E8F7ECB7D3FE542FF4FB1D1EAB16D6F713D7710794A90761C4134E0F9F4283D80DB30085A4346E7D15A29C85D55E28445AFF2FB05B389EBD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:46:aa:be:8c:ea:1c:a8:2b:63:0d:66:0c:44:
                    2f:a4:73:6a:36:19:49:93:24:b7:c8:e0:03:ca:45:
                    38:b3:f0:11:14:a2:f0:23:e4:a4:cd:16:7a:37:9c:
                    85:ff:59:a5:e8:00:54:8f:47:a6:ab:87:43:68:e3:
                    a5:ab:4b:f6:9e:33:19:22:4b:66:cc:bb:67:52:f8:
                    d3:4d:ed:48:eb:2e:96:c3:fc:17:b3:06:47:1a:c4:
                    7d:c6:99:31:8f:24:a6:a3:fc:2a:3b:d6:b6:5d:67:
                    00:ab:b9:a3:09:c2:f2:23:b8:17:aa:3e:bb:ba:31:
                    9a:15:a8:38:89:00:7d:ff:2b:68:c1:97:81:ff:6e:
                    10:7a:8a:e0:aa:b1:36:97:26:26:56:a1:03:3e:fe:
                    31:dc:0c:c8:ea:4f:d6:21:92:b7:65:ed:1d:6d:20:
                    79:b0:97:ad:c4:2b:4a:c7:e6:da:8e:1c:07:9f:b0:
                    2e:1f:f7:8b:cc:fa:de:62:43:ce:ce:48:27:ec:a6:
                    4c:a8:ca:aa:f5:e9:e8:f7:ec:b7:d3:fe:54:2f:f4:
                    fb:1d:1e:ab:16:d6:f7:13:d7:71:07:94:a9:07:61:
                    c4:13:4e:0f:9f:42:83:d8:0d:b3:00:85:a4:34:6e:
                    7d:15:a2:9c:85:d5:5e:28:44:5a:ff:2f:b0:5b:38:
                    9e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E8:8D:91:C8:4C:00:CC:BB:99:00:58:8E:66:91:55:40:FB:AD:78
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3134392e36322e33362e302f32332d3233203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.62.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:c7:50:c5:79:5f:60:ba:12:69:d3:e2:a3:f7:f1:42:d5:03:
         18:2b:27:01:c6:98:e3:05:8d:f1:4d:14:46:5d:12:3c:2d:91:
         02:33:f0:01:2f:84:b1:49:d5:57:21:c3:fb:a1:eb:fd:14:d1:
         fc:6a:66:09:7c:8a:e9:c4:5e:91:78:75:16:f6:7f:c2:27:7a:
         a7:0e:e1:42:ac:3d:99:f3:99:f6:3f:14:33:d2:2c:09:7d:59:
         58:4a:fe:5e:9d:d8:a4:9f:67:32:d1:70:ee:bd:a8:8c:3e:81:
         43:89:3f:43:7f:3f:24:2d:77:11:2c:bb:a9:57:70:a1:ff:66:
         f9:c0:2e:22:60:d9:f0:97:d8:34:fb:3e:3e:43:f8:86:6d:dc:
         28:e4:61:9a:98:0c:33:80:08:c1:41:21:93:10:32:6a:94:8a:
         fa:e8:30:bf:70:ce:ea:5a:8e:fc:4b:e5:36:5d:11:23:23:8a:
         b3:f9:97:4c:23:8b:a3:4c:b5:58:52:2a:df:64:a9:6f:e0:d1:
         eb:e7:c3:43:9b:28:41:a2:34:43:46:f6:74:0a:12:a1:43:b4:
         30:4d:28:ab:e5:cf:4f:41:9d:33:d5:c9:6c:58:ac:9a:3c:f8:
         b5:68:d9:89:26:c9:53:33:6b:6b:8e:54:cc:0e:45:6f:9e:a4:
         d3:75:2b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----