Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38352e302f32342d3234203d3e20323037343239.roa
File:                     3139342e3139352e38352e302f32342d3234203d3e20323037343239.roa (raw, json)
Hash identifier:          D/vqB1Y0WIhlrvqVHMRn/TKN3yZpm9gS6WgDSW5a4w8=
Subject key identifier:   BE:17:E7:A9:52:61:BB:18:0E:E5:C9:E7:0A:DD:B2:0E:07:8F:53:DE
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       3A96ACE352176DDB3FB02EFF3EBF14B825DA62D6
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38352e302f32342d3234203d3e20323037343239.roa
Signing time:             Fri 19 Nov 2021 17:54:17 +0000
ROA not before:           Fri 19 Nov 2021 17:49:17 +0000
ROA not after:            Fri 18 Nov 2022 17:54:17 +0000
asID:                     207429
IP address blocks:        194.195.85.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:96:ac:e3:52:17:6d:db:3f:b0:2e:ff:3e:bf:14:b8:25:da:62:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 19 17:49:17 2021 GMT
            Not After : Nov 18 17:54:17 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:fa:68:09:0f:83:29:65:2c:cb:d8:08:b9:77:
                    56:77:83:ef:21:90:fb:b8:af:27:fe:11:22:a0:3f:
                    9f:86:e1:d1:95:7e:ec:bb:e6:1d:10:76:28:ae:d0:
                    74:a8:52:55:9b:a6:ac:89:b3:51:80:15:6d:0f:0b:
                    36:8b:4f:d0:7f:bf:99:2f:3f:c5:cf:fb:47:05:49:
                    ed:7b:0b:88:3b:99:5b:73:89:af:84:22:03:ad:48:
                    a0:e6:bc:95:64:d3:e1:52:c5:9f:40:e7:51:c0:32:
                    92:62:8f:a5:16:4a:22:9f:45:96:66:61:90:58:00:
                    62:bd:c0:c4:90:a8:f0:a1:70:7f:b7:dd:4a:82:e9:
                    a5:9b:2b:d5:9f:58:5e:ca:45:14:f3:d6:a3:03:a6:
                    18:05:a0:28:1f:91:ef:0c:72:fd:4a:e4:20:71:cb:
                    8c:c7:18:8d:df:8f:03:37:a5:76:90:c1:70:9e:7f:
                    2e:49:ee:16:40:c4:dc:60:40:ed:cd:0f:10:e3:8a:
                    f9:ca:b2:55:41:ba:84:63:5d:98:ea:61:0a:bd:7d:
                    db:9b:7c:44:49:d1:49:af:d8:a4:c8:c5:62:dc:0a:
                    0f:a2:e5:2c:5f:92:7c:20:07:40:2c:e6:e0:b1:6c:
                    34:ca:b8:8c:5d:5c:23:e9:5e:e1:01:b7:e0:12:d2:
                    2e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:17:E7:A9:52:61:BB:18:0E:E5:C9:E7:0A:DD:B2:0E:07:8F:53:DE
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38352e302f32342d3234203d3e20323037343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.195.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:77:80:98:d3:03:f3:bd:b8:79:05:f4:34:f2:89:ab:ce:40:
         8d:39:f2:a0:71:28:50:3e:85:98:b7:93:6e:75:76:46:32:3a:
         f6:e3:fa:8d:30:81:23:1f:aa:d8:6b:50:aa:79:f0:8c:f5:99:
         1f:c5:e1:20:39:8c:fb:e6:78:27:b4:91:1c:89:5d:24:f7:40:
         a4:fd:e7:d8:1b:5c:06:b2:a1:9f:0e:03:4c:3b:29:a4:ae:83:
         be:58:7a:0d:33:8a:70:46:ac:b6:6f:49:58:07:42:15:05:e7:
         f4:1d:17:05:70:21:92:cc:5f:c2:92:80:a0:5d:a8:a2:47:d8:
         87:ac:ae:b6:69:84:68:e5:db:4f:16:b0:9c:46:83:79:9d:a2:
         62:34:e1:4c:e2:ed:b0:d0:bc:04:9d:0d:a6:70:6d:01:1f:58:
         41:81:f5:5d:ab:c7:e7:3b:aa:ac:8c:1d:08:c4:b2:8e:95:73:
         52:09:f5:6c:e4:db:e9:9d:6a:70:ca:2c:05:19:fb:3a:83:11:
         9f:70:29:d2:3f:c2:f3:96:f8:69:3d:4f:89:29:cf:b6:2a:8b:
         62:fa:b6:3b:df:25:f9:cd:26:63:55:69:5a:36:9b:ff:e8:26:
         4d:8b:99:3d:c2:ec:17:2a:40:48:78:d8:26:b8:a5:4b:28:87:
         bb:e0:ef:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----