Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38382e302f32342d3234203d3e203630373231.roa
File:                     3139342e3139352e38382e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          yRjWrTZkV+Nta/OLSxYJiNM5+eT9gtM+giobximQ9CA=
Subject key identifier:   92:B5:C5:0B:93:FE:5F:1B:85:07:0A:1E:EB:A3:BB:72:11:1D:EE:18
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       21D5056E28464B5E4009D415478822DB6E3D3B62
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38382e302f32342d3234203d3e203630373231.roa
Signing time:             Wed 29 Sep 2021 14:42:19 +0000
ROA not before:           Wed 29 Sep 2021 14:37:19 +0000
ROA not after:            Wed 28 Sep 2022 14:42:19 +0000
asID:                     60721
IP address blocks:        194.195.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d5:05:6e:28:46:4b:5e:40:09:d4:15:47:88:22:db:6e:3d:3b:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Sep 29 14:37:19 2021 GMT
            Not After : Sep 28 14:42:19 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:7c:0a:5a:ab:5c:79:43:33:87:9b:b2:13:7f:
                    d4:e2:7c:02:eb:37:5a:5c:04:31:b1:1d:16:bd:80:
                    ea:a4:cc:5a:7a:57:f0:5f:59:8f:52:18:60:dd:99:
                    d5:42:98:8f:9d:4f:53:30:de:56:e3:e5:80:33:a6:
                    a8:23:1c:28:c9:ab:bf:eb:57:01:12:67:37:2d:1c:
                    f3:f3:3c:e3:04:fe:32:90:49:8a:fd:45:e5:11:fd:
                    56:04:4e:17:0f:9a:cd:bb:58:b0:c9:4c:12:72:41:
                    53:c8:fb:a4:9b:32:f9:b3:f4:7d:c8:10:63:1f:f9:
                    1f:d4:12:7e:97:25:06:b1:ea:6c:af:ff:d8:7d:34:
                    bb:2d:26:f2:5e:2a:68:f3:a0:b4:0c:73:de:fa:ff:
                    03:8d:46:c5:0a:5a:21:19:fc:44:0f:1d:0a:8e:0e:
                    d4:83:05:71:3c:1a:2f:e9:6d:a0:04:56:9c:94:62:
                    06:cc:e9:2c:b7:70:67:b3:ad:21:bd:f7:3a:ba:60:
                    f5:86:21:b4:89:06:a1:80:b3:7e:0d:76:78:e0:16:
                    56:4f:36:76:2e:0c:e1:21:6b:57:45:9d:cb:a6:dd:
                    36:d8:c2:8e:e9:89:fd:f7:e6:b6:2b:5d:c9:47:bb:
                    f3:7f:e3:4f:b0:68:51:5c:cd:2c:54:8e:d3:23:be:
                    cd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B5:C5:0B:93:FE:5F:1B:85:07:0A:1E:EB:A3:BB:72:11:1D:EE:18
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38382e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.195.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:7e:40:da:3e:3a:ce:44:63:6b:37:88:26:e6:4d:8a:2a:2b:
         06:ea:18:49:4b:c3:92:11:29:b0:fe:73:43:a1:87:a2:32:e2:
         71:f7:30:df:4f:05:0a:11:f9:31:fd:9f:a3:97:08:d1:45:55:
         cb:9e:ad:ec:fe:df:dd:a8:1b:2d:72:26:02:0f:75:dc:45:51:
         ee:c1:d6:5e:da:6e:68:b7:6b:07:b2:eb:b4:2e:36:2d:da:97:
         62:1f:4f:8c:a4:d5:1c:13:11:25:b8:df:0a:17:a0:67:80:62:
         94:4a:5e:7e:0a:68:78:68:c5:5c:e6:a2:6d:99:3c:66:73:42:
         1b:7e:0e:30:ea:15:15:59:d8:5e:b5:72:95:c3:02:21:1b:d3:
         1c:b3:d7:72:5d:6f:94:c8:af:d2:46:3a:24:de:22:92:f3:25:
         e7:2f:d1:24:9b:4b:4f:1f:af:4e:3e:95:51:fb:96:8a:e7:4a:
         7d:6a:e1:22:2a:ea:f1:68:c2:78:f1:eb:b2:2d:76:91:c4:3c:
         47:63:22:f5:8e:2b:77:e4:a3:55:9b:b2:21:24:57:86:5a:c1:
         cf:5a:84:d7:fc:37:76:e3:5a:0b:db:43:8c:a1:0f:23:2e:7a:
         42:a8:d3:18:7a:26:a3:b7:8b:99:59:21:52:99:68:0f:dc:84:
         69:40:05:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----