Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139342e3134372e35382e302f32332d3234203d3e20323132383738.roa
File:                     3139342e3134372e35382e302f32332d3234203d3e20323132383738.roa (raw, json)
Hash identifier:          a1v1tW9ZaJv/mhLZQTR4Ek1YZIrKPRhmCEXsQz03TQQ=
Subject key identifier:   E3:70:3F:37:31:6B:16:E9:5F:FD:87:C7:B5:B1:0C:5F:E4:F0:EE:5F
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       6EBE959E1D048AE97129758745CBD2E853A2BD79
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e3134372e35382e302f32332d3234203d3e20323132383738.roa
Signing time:             Fri 27 Nov 2020 15:10:19 +0000
ROA not before:           Fri 27 Nov 2020 15:05:19 +0000
ROA not after:            Fri 26 Nov 2021 15:10:19 +0000
asID:                     212878
IP address blocks:        194.147.58.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:be:95:9e:1d:04:8a:e9:71:29:75:87:45:cb:d2:e8:53:a2:bd:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Nov 27 15:05:19 2020 GMT
            Not After : Nov 26 15:10:19 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6c:7a:7f:f5:42:3f:8c:aa:ac:97:13:98:a1:
                    37:01:32:29:5a:e6:24:cf:84:38:15:3f:fa:45:31:
                    88:55:cd:cd:11:8a:a9:5f:6e:39:5c:fa:fa:06:22:
                    5c:ea:be:f3:d8:b1:ac:a6:b1:bf:83:d0:6d:94:3b:
                    a8:db:d3:b1:87:97:d6:16:20:53:e6:27:fc:eb:e3:
                    a9:bd:5b:a7:43:1e:a2:fa:40:3d:e1:8b:92:4e:ef:
                    af:11:51:4d:93:4f:25:f7:eb:a6:4e:e1:a2:99:39:
                    b5:10:0f:fd:30:5b:c9:80:96:00:7a:f1:28:b6:74:
                    3a:45:be:a6:40:58:31:ea:89:44:74:9b:83:53:78:
                    79:6a:5f:8d:50:37:50:a9:f2:9f:62:39:b3:86:c9:
                    cb:5a:79:99:a5:47:4e:1b:c7:bc:d1:81:b3:60:90:
                    8f:97:7a:0b:a3:e8:59:41:36:01:c4:5d:43:ca:06:
                    00:a1:b3:22:d6:b2:7a:51:97:34:f4:5a:cd:93:e6:
                    23:46:16:b2:07:a5:3f:00:7b:bb:c1:f3:7b:90:62:
                    47:0c:79:ef:b7:cb:04:20:e7:00:04:81:1d:84:8b:
                    60:19:75:e5:05:41:35:59:df:73:7b:e0:ff:fa:17:
                    b8:40:14:cf:c2:d9:e6:8c:59:36:e5:47:12:8b:5e:
                    f2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:70:3F:37:31:6B:16:E9:5F:FD:87:C7:B5:B1:0C:5F:E4:F0:EE:5F
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e3134372e35382e302f32332d3234203d3e20323132383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.147.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:c3:b6:1d:b8:62:26:8f:c7:68:a1:a3:c4:36:a5:19:fa:0c:
         e5:b4:b6:0d:a3:61:17:11:98:c0:b5:02:4b:bd:cd:d9:c8:07:
         1c:72:06:b6:db:cf:45:ae:6d:7e:23:77:8e:35:8b:c9:a9:a8:
         95:46:ef:6c:35:6c:79:f0:3f:ba:3e:2e:6c:f6:be:6e:11:de:
         08:25:d6:5b:a3:56:a8:a6:3c:42:bd:4b:4c:38:36:5f:98:be:
         a8:85:73:21:41:aa:7d:c0:75:8c:d9:60:72:eb:4f:a9:1a:d8:
         31:b5:f0:c9:c6:f5:cd:44:8f:8c:fa:8b:c2:b9:80:29:22:37:
         fa:e3:00:c0:b2:80:98:7d:fa:20:50:94:d9:03:24:92:89:56:
         7b:0b:6c:eb:e2:e8:45:ae:95:6a:02:92:42:9b:82:b1:c8:aa:
         41:48:d1:34:59:a1:4b:ec:a5:27:56:33:2c:c5:10:f3:de:62:
         3f:9f:da:a0:50:c1:97:ca:b0:21:02:ca:1c:bb:53:61:2c:9e:
         ef:42:0b:b6:b0:d4:53:9f:39:98:7d:fb:65:41:c8:b0:95:d8:
         8b:90:db:bb:81:57:eb:f4:38:7b:e4:49:04:0b:81:80:ad:dd:
         e4:44:8a:29:3c:e7:99:33:19:aa:07:87:02:d8:4f:5f:50:fc:
         26:cd:84:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----