Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139322e3136362e3234362e302f32342d3234203d3e20313431313939.roa
File:                     3139322e3136362e3234362e302f32342d3234203d3e20313431313939.roa (raw, json)
Hash identifier:          lQDiQuw/F+iRPU5L7aBv+ZUMc2H0i9a1NZVUfYn7YQ4=
Subject key identifier:   41:7A:40:5B:78:A0:3A:E6:84:C3:73:B2:9E:70:5B:64:A8:A7:F5:F1
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       52C5640633EC298663C6F506B4A81398818D52F7
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139322e3136362e3234362e302f32342d3234203d3e20313431313939.roa
Signing time:             Fri 27 Nov 2020 15:10:18 +0000
ROA not before:           Fri 27 Nov 2020 15:05:18 +0000
ROA not after:            Fri 26 Nov 2021 15:10:18 +0000
asID:                     141199
IP address blocks:        192.166.246.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:c5:64:06:33:ec:29:86:63:c6:f5:06:b4:a8:13:98:81:8d:52:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Nov 27 15:05:18 2020 GMT
            Not After : Nov 26 15:10:18 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:3e:96:52:31:27:fa:c0:93:03:e2:46:97:76:
                    3d:a4:77:ca:e1:71:25:0c:a5:3d:a4:5a:ed:9a:3e:
                    ee:4a:9e:cf:de:de:db:1b:52:a7:99:d9:fa:53:36:
                    c9:6b:fa:67:87:d1:e8:b9:20:0a:35:35:42:17:c4:
                    7c:3c:de:fa:cb:40:eb:62:72:41:71:f9:cf:a3:a5:
                    7d:24:16:6a:d8:40:ad:ab:c5:8c:9a:c2:66:9f:c1:
                    1f:35:0f:d6:37:63:36:ab:22:bb:27:9f:bf:8a:86:
                    c3:de:6e:36:8e:1c:da:de:af:c6:3f:f2:dc:00:d4:
                    93:1e:42:e9:30:83:b1:ec:d4:f5:44:b0:7f:2a:41:
                    fe:d9:bf:4a:88:ec:c3:21:1f:d4:c2:0a:05:44:32:
                    be:dd:34:2c:17:c5:f6:60:e8:60:fc:9d:21:02:88:
                    62:8a:4d:f9:75:1d:c0:5a:5e:3e:c8:55:51:50:28:
                    62:99:c2:ac:e3:4a:bc:84:de:82:a5:7f:6f:dd:db:
                    b4:c7:c7:d5:c8:0d:ab:66:32:2b:15:2d:a9:70:cc:
                    29:7c:6c:60:46:e3:f2:31:c3:e8:29:56:fd:ac:b9:
                    52:5f:b6:76:af:28:a8:28:19:5f:85:ae:82:34:bb:
                    1b:aa:52:41:23:00:de:89:f6:b3:5e:4b:8f:98:ea:
                    7a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:7A:40:5B:78:A0:3A:E6:84:C3:73:B2:9E:70:5B:64:A8:A7:F5:F1
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139322e3136362e3234362e302f32342d3234203d3e20313431313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.166.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:54:9b:ca:d9:c7:f2:64:8c:96:b2:7a:bc:b8:ad:98:1f:f9:
         12:c1:b4:96:be:28:f0:19:2c:12:0f:cc:7c:a9:72:65:ae:c9:
         7a:79:84:07:52:65:bd:f1:98:93:e8:a7:a7:cf:1f:0b:02:be:
         a3:b4:0f:f3:68:5b:08:f6:bd:eb:6f:59:00:1c:ab:21:22:6d:
         0c:e0:7b:ec:f4:43:7b:2e:03:1c:c7:c2:59:49:2a:12:bc:a0:
         a3:7c:f1:1c:99:1a:d9:cf:b6:7a:97:84:41:40:5c:79:b0:f5:
         6f:e4:a2:19:fe:2b:8a:f7:4b:f5:26:2f:10:61:32:f9:34:09:
         74:54:6f:f9:6b:fb:c3:65:0f:e6:b9:b4:2b:5d:0c:62:7c:87:
         c8:f8:47:45:b7:c4:93:e4:ef:67:a3:32:53:6d:a9:3c:cb:bf:
         5b:dc:ad:5b:1a:35:66:93:8b:27:65:dc:15:9e:a5:27:39:4e:
         25:04:84:6d:d5:dd:d7:8c:cf:a3:ea:d5:54:ba:63:24:a5:c4:
         0b:97:9b:5b:a2:f3:06:d0:e4:43:3e:9b:37:88:84:98:54:aa:
         8a:45:bf:9b:ca:08:f0:d3:1a:38:b5:40:f5:7d:6e:aa:d5:e5:
         db:e4:c9:03:2f:5e:2a:ff:68:88:00:38:7a:37:92:42:07:83:
         f7:44:e3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----