Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139342e3134372e35382e302f32342d3234203d3e20323132323938.roa
File:                     3139342e3134372e35382e302f32342d3234203d3e20323132323938.roa (raw, json)
Hash identifier:          kXFty0z6vYB47xsDEns/P8BznlfncO0riakuhu8o+Rs=
Subject key identifier:   52:00:FF:9F:09:BB:1C:7C:B3:E9:CC:C2:03:1E:0D:A8:1A:DD:FA:CC
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       62E1BE37029DD95B2DFFF44C8B91A7FA58B42F8D
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e3134372e35382e302f32342d3234203d3e20323132323938.roa
Signing time:             Mon 07 Dec 2020 19:12:48 +0000
ROA not before:           Mon 07 Dec 2020 19:07:48 +0000
ROA not after:            Mon 06 Dec 2021 19:12:48 +0000
asID:                     212298
IP address blocks:        194.147.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e1:be:37:02:9d:d9:5b:2d:ff:f4:4c:8b:91:a7:fa:58:b4:2f:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Dec  7 19:07:48 2020 GMT
            Not After : Dec  6 19:12:48 2021 GMT
        Subject: CN=3082010A0282010100D8FB56FF3B8154D7AD8840DAE85BF82ECFB98D269B17D992A7809B89E7D305751BD29F31EF03B67F110AA588F2404B70F39F5467953C8BD7D956685C71372FAA1504FB0CBABA5128DB6B9F49A0237AB423B7BD1CD529071D5439525870699D1452E3293969A68CBC06AB115E175CC418EED8323E6DD581138481F4413DCC5C9057F1EF140916FB50A093CDB023868AA85D4F449A5E9EC166F67637DD6304D48421FD2351D94635858A1C2B1C8FAE7B4D89F0BD464DAB5291809FC982C33A45C8C49AEB600A93C21C383E97B592285AC3C02D05D60A41A2E12FC44B3948F3EA11AD666D9238A09E78224FDDDF9DF05E33CFA09EC230EC483197D400DC712449AD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fb:56:ff:3b:81:54:d7:ad:88:40:da:e8:5b:
                    f8:2e:cf:b9:8d:26:9b:17:d9:92:a7:80:9b:89:e7:
                    d3:05:75:1b:d2:9f:31:ef:03:b6:7f:11:0a:a5:88:
                    f2:40:4b:70:f3:9f:54:67:95:3c:8b:d7:d9:56:68:
                    5c:71:37:2f:aa:15:04:fb:0c:ba:ba:51:28:db:6b:
                    9f:49:a0:23:7a:b4:23:b7:bd:1c:d5:29:07:1d:54:
                    39:52:58:70:69:9d:14:52:e3:29:39:69:a6:8c:bc:
                    06:ab:11:5e:17:5c:c4:18:ee:d8:32:3e:6d:d5:81:
                    13:84:81:f4:41:3d:cc:5c:90:57:f1:ef:14:09:16:
                    fb:50:a0:93:cd:b0:23:86:8a:a8:5d:4f:44:9a:5e:
                    9e:c1:66:f6:76:37:dd:63:04:d4:84:21:fd:23:51:
                    d9:46:35:85:8a:1c:2b:1c:8f:ae:7b:4d:89:f0:bd:
                    46:4d:ab:52:91:80:9f:c9:82:c3:3a:45:c8:c4:9a:
                    eb:60:0a:93:c2:1c:38:3e:97:b5:92:28:5a:c3:c0:
                    2d:05:d6:0a:41:a2:e1:2f:c4:4b:39:48:f3:ea:11:
                    ad:66:6d:92:38:a0:9e:78:22:4f:dd:df:9d:f0:5e:
                    33:cf:a0:9e:c2:30:ec:48:31:97:d4:00:dc:71:24:
                    49:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:00:FF:9F:09:BB:1C:7C:B3:E9:CC:C2:03:1E:0D:A8:1A:DD:FA:CC
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e3134372e35382e302f32342d3234203d3e20323132323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.147.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:72:44:46:ff:27:1b:c8:1e:fd:04:28:7f:9a:16:0e:2d:9e:
         89:97:06:10:0b:97:d8:ce:5c:87:e5:22:99:77:38:8c:cc:63:
         63:53:35:98:19:0f:67:fb:18:0b:22:82:05:89:d2:f4:fc:06:
         80:d0:c3:0e:bd:51:68:39:79:8c:85:b5:12:4e:f4:4f:6f:b6:
         bd:14:87:55:71:51:3b:c5:f0:b6:64:fe:06:87:bc:da:d0:79:
         04:d4:f2:4f:1c:46:ee:95:04:03:fc:50:6e:d0:16:d1:6f:21:
         22:5c:f9:ce:c5:a5:b7:5c:2a:a5:51:0f:75:d4:d0:3b:f8:51:
         77:d7:ff:77:47:80:fd:86:ba:0c:81:33:65:fb:47:fc:4d:73:
         1e:56:70:dc:99:bb:f4:b7:0f:9b:a4:2d:68:29:95:21:32:03:
         8c:2e:8a:92:da:e9:8c:a4:f2:70:da:15:d2:40:89:89:99:c3:
         0a:3a:a7:1b:ea:e2:48:55:48:d5:86:6d:5d:1b:6c:b9:55:20:
         82:96:c4:96:6f:0c:43:f1:f4:b7:95:e5:06:cb:a4:d6:7b:33:
         27:3e:e9:33:46:2b:31:3b:1f:3a:bb:1d:16:15:e8:73:6f:23:
         93:e9:cf:54:04:50:ae:e6:9f:a2:09:c5:57:fb:74:19:45:e9:
         c5:ce:09:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----