Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3134392e36322e33382e302f32332d3233203d3e203631333137.roa
File:                     3134392e36322e33382e302f32332d3233203d3e203631333137.roa (raw, json)
Hash identifier:          HSnScIL5thh778f4pfta41ePwCd2Thcs2uLzQ34cX4E=
Subject key identifier:   1A:39:97:8D:47:3F:51:64:B9:DC:F5:F7:F4:BB:84:62:25:7D:74:02
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       389538F399EF45AB0A3F98AA8DC3D60F73BE2A41
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3134392e36322e33382e302f32332d3233203d3e203631333137.roa
Signing time:             Tue 05 Jan 2021 14:17:34 +0000
ROA not before:           Tue 05 Jan 2021 14:12:34 +0000
ROA not after:            Tue 04 Jan 2022 14:17:34 +0000
asID:                     61317
IP address blocks:        149.62.38.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:95:38:f3:99:ef:45:ab:0a:3f:98:aa:8d:c3:d6:0f:73:be:2a:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Jan  5 14:12:34 2021 GMT
            Not After : Jan  4 14:17:34 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:75:98:78:2f:6b:ed:1d:2a:cc:c2:9b:48:4e:
                    7a:a0:38:5a:96:4c:10:1b:88:8d:d4:a1:7e:91:f0:
                    40:2b:f3:10:6f:66:d8:60:c7:3b:9f:59:ec:22:bb:
                    39:84:c0:80:36:32:46:2c:11:c9:cc:40:31:2e:16:
                    07:00:98:7a:d9:cd:0d:ac:0d:20:61:67:7c:25:d1:
                    bb:8f:0d:84:9b:52:ba:7f:be:40:6b:16:2e:94:68:
                    5c:9f:71:4d:ad:44:29:c9:31:b7:75:4d:ff:2c:47:
                    bd:f0:0e:6d:f8:9f:4c:1b:72:60:46:c0:ea:59:a7:
                    e2:e0:56:13:4c:4b:8a:c9:2c:d5:1e:d6:c3:ce:92:
                    09:3f:4c:17:a6:2e:a0:09:41:10:36:3f:d3:9b:50:
                    71:c0:58:26:19:21:bf:48:ff:d1:c1:ad:88:06:d9:
                    5c:63:7f:cd:b4:56:21:77:f3:c9:29:ce:8c:27:35:
                    8e:98:d5:2f:bf:7a:65:ea:90:21:dc:bc:71:4e:6c:
                    ad:f1:ad:58:8d:2d:57:b4:66:ef:8a:30:2f:8e:53:
                    75:c6:e8:a4:f9:c8:a4:06:2e:64:f3:95:ed:f9:09:
                    29:6f:d0:9b:c2:73:8b:78:19:97:d3:2c:1d:29:4e:
                    0a:1a:55:74:92:50:98:bb:b3:04:e1:19:30:85:b9:
                    6f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:39:97:8D:47:3F:51:64:B9:DC:F5:F7:F4:BB:84:62:25:7D:74:02
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3134392e36322e33382e302f32332d3233203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.62.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:e2:fa:9f:ea:bb:ee:23:d7:d2:57:11:1f:86:4f:25:28:62:
         53:1c:60:27:92:43:08:c5:88:94:06:f3:0e:55:ae:30:0b:92:
         6c:ce:ae:ee:44:60:8f:5c:21:30:93:f1:ae:af:e8:51:c8:c0:
         09:52:5e:80:11:50:70:be:f2:42:60:91:6d:aa:ea:ea:3a:a7:
         25:5c:32:65:ae:e0:f7:38:7a:6b:27:c3:1a:59:1e:15:2b:e5:
         1f:84:aa:26:02:fd:9f:e4:47:c4:19:23:c9:de:78:19:f6:66:
         50:31:72:a0:b0:37:52:b0:dd:7f:8c:11:41:3e:c5:a7:03:e4:
         cf:4f:8c:31:18:c7:e6:13:d0:ac:69:f8:c7:8b:79:2b:03:3d:
         3d:ed:5e:d7:5b:99:6a:b5:0c:f6:db:13:47:09:64:cb:4b:e9:
         f0:b8:c6:cf:fb:d4:84:aa:ec:0c:a4:97:bd:bf:dc:1d:aa:1b:
         b7:5e:f9:06:bb:25:45:e1:6d:27:89:8c:1e:ff:fc:00:1c:4a:
         eb:20:9c:1b:5a:1d:68:3a:e0:9b:ce:15:7b:51:0a:a9:ee:34:
         d3:48:22:90:ce:8f:51:57:7e:1a:c7:86:db:b2:a4:b9:23:2b:
         28:da:be:1e:ef:f1:10:a7:a2:cf:63:6e:27:d2:45:31:83:d9:
         87:be:5c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----