Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/38/3139342e3234322e35362e302f32332d3233203d3e2037373234.roa
File:                     3139342e3234322e35362e302f32332d3233203d3e2037373234.roa (raw, json)
Hash identifier:          wrrstJQVtD29agerUWUeaROJA1xkQOuatg2+z8E6rB8=
Subject key identifier:   A7:5E:F6:6F:3C:B2:38:68:FD:AB:0F:2E:9C:49:9C:11:26:57:6D:37
Certificate issuer:       /CN=e9fc48331f2e461a51bcf68c86c0f1c52df5b50f
Certificate serial:       4090C68FC6729834BAAE13ED55DBC60DC9A7CAFD
Authority key identifier: E9:FC:48:33:1F:2E:46:1A:51:BC:F6:8C:86:C0:F1:C5:2D:F5:B5:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6fxIMx8uRhpRvPaMhsDxxS31tQ8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/38/3139342e3234322e35362e302f32332d3233203d3e2037373234.roa
Signing time:             Tue 23 Feb 2021 09:41:44 +0000
ROA not before:           Tue 23 Feb 2021 09:36:44 +0000
ROA not after:            Tue 22 Feb 2022 09:41:44 +0000
asID:                     7724
IP address blocks:        194.242.56.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:90:c6:8f:c6:72:98:34:ba:ae:13:ed:55:db:c6:0d:c9:a7:ca:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9fc48331f2e461a51bcf68c86c0f1c52df5b50f
        Validity
            Not Before: Feb 23 09:36:44 2021 GMT
            Not After : Feb 22 09:41:44 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:da:59:c9:ea:30:f1:f3:a2:5b:1b:93:b5:5b:
                    e7:f9:1c:e0:72:7c:ef:bc:08:7d:09:2f:cf:e9:bc:
                    82:46:f3:0f:ea:87:eb:ad:7b:d0:69:26:21:b2:40:
                    a3:d1:ad:d2:af:62:7f:e9:af:22:d9:64:e1:29:86:
                    28:c9:cd:5a:0c:ee:fa:c3:05:ca:78:23:b6:c4:e6:
                    38:7d:5e:62:11:9c:01:8a:ce:95:91:73:3a:46:70:
                    6d:ed:05:f3:cf:af:a8:fe:e6:ec:58:c3:62:d1:cd:
                    18:9f:4a:77:48:e7:31:73:d1:2b:c8:6b:56:d0:74:
                    4d:1e:e3:39:a9:76:52:30:46:eb:e8:4b:b2:65:82:
                    76:68:64:d4:37:ff:d9:e5:11:fb:4d:0d:95:e7:52:
                    c9:7d:f7:b3:6b:8e:6c:96:94:b0:6a:a5:49:89:5a:
                    7b:9c:d6:ca:b8:a7:22:de:97:5c:75:8e:d5:96:11:
                    8c:43:73:0a:5e:8b:68:d2:28:48:3a:67:50:e5:c4:
                    e9:f6:8b:c9:17:1a:d8:2c:60:0b:d9:af:9a:dc:43:
                    40:78:03:9d:9b:b6:84:87:e7:0f:c6:09:de:8c:79:
                    f8:45:35:57:88:9c:b3:75:03:6b:eb:1a:b5:67:ed:
                    51:ca:01:e7:6d:9c:67:d5:77:7b:23:16:fd:1d:0e:
                    46:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:5E:F6:6F:3C:B2:38:68:FD:AB:0F:2E:9C:49:9C:11:26:57:6D:37
            X509v3 Authority Key Identifier:
                keyid:E9:FC:48:33:1F:2E:46:1A:51:BC:F6:8C:86:C0:F1:C5:2D:F5:B5:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/38/E9FC48331F2E461A51BCF68C86C0F1C52DF5B50F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6fxIMx8uRhpRvPaMhsDxxS31tQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/38/3139342e3234322e35362e302f32332d3233203d3e2037373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.242.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:92:2f:d8:e6:d5:2d:04:79:42:68:10:36:95:0c:ed:44:4f:
         8a:67:81:39:ed:00:52:77:ea:53:0b:a6:ab:21:4d:88:b9:ac:
         2b:e0:14:c5:8f:a4:29:03:bc:2f:1d:f5:79:2f:22:6b:79:cf:
         57:43:69:f5:d0:d3:76:c6:ef:3c:10:c0:d1:e6:ae:65:cd:4d:
         4c:b5:bf:18:01:34:41:de:68:8b:3a:69:92:7f:a6:96:9a:c0:
         b9:53:20:67:3e:36:4d:ac:eb:b8:53:c4:a2:3d:a1:19:84:fa:
         37:73:c1:a2:56:2c:c7:e2:98:46:d8:29:33:65:9a:11:26:67:
         1d:77:a6:69:31:4d:51:1d:bd:6c:54:76:cc:9e:fc:f9:55:8f:
         36:50:b8:dd:cc:af:64:8e:49:33:a3:67:dc:d3:70:08:22:60:
         87:ed:86:a9:31:bc:93:b5:34:b1:17:db:4f:bf:0e:0f:1d:a0:
         a5:0c:69:0e:76:73:fa:2c:3a:79:53:82:d4:4c:80:de:02:56:
         44:d3:b8:55:0c:16:30:f7:1c:09:8f:1a:96:78:73:59:70:3e:
         69:fb:91:ef:78:d4:ae:36:b4:85:3f:96:e2:3e:72:7e:39:c8:
         95:93:ae:ce:d2:8e:57:62:ad:fe:e0:57:7c:43:87:9d:a8:6b:
         5c:7d:96:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----