Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38392e302f32342d3234203d3e203630373231.roa
File:                     3139342e3139352e38392e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          rPNTcctK8QRdkH98xJ017MgPPGtwibGNcv+cLOcQaEY=
Subject key identifier:   59:4C:7C:4A:0A:23:A7:82:2C:46:13:D7:1E:1A:3F:49:D3:F8:DB:B4
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       1D6DC9708C9A98F1A68CB73345562C1148A7EEBC
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38392e302f32342d3234203d3e203630373231.roa
Signing time:             Wed 29 Sep 2021 14:42:31 +0000
ROA not before:           Wed 29 Sep 2021 14:37:31 +0000
ROA not after:            Wed 28 Sep 2022 14:42:31 +0000
asID:                     60721
IP address blocks:        194.195.89.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:6d:c9:70:8c:9a:98:f1:a6:8c:b7:33:45:56:2c:11:48:a7:ee:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Sep 29 14:37:31 2021 GMT
            Not After : Sep 28 14:42:31 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2d:e5:bb:f5:7e:1f:a8:e1:bf:b7:9d:9d:48:
                    3e:7b:5a:03:a9:8e:1f:eb:c3:6e:07:3b:e2:67:76:
                    3d:a1:8d:0b:52:c6:03:e5:40:b2:7a:a4:98:20:24:
                    19:04:da:c6:16:f6:d1:70:25:37:a1:83:47:5a:e3:
                    d6:b4:fe:50:d0:36:3a:7f:06:15:58:98:14:40:53:
                    d4:62:fa:83:22:3e:fa:c2:92:a8:79:63:4d:53:c6:
                    99:66:54:1e:0b:d4:5e:2b:1c:3c:42:16:82:8b:b0:
                    a0:9c:79:1c:39:32:6a:32:24:7d:1f:3b:fe:08:91:
                    63:00:90:5f:df:07:64:43:93:ac:0e:1c:5d:cf:76:
                    c8:7c:6a:7a:71:b3:2c:02:6a:02:9a:72:47:87:98:
                    d3:96:36:ed:1e:11:c8:9a:85:a1:6c:51:19:20:3c:
                    22:3f:81:35:cb:00:0a:77:df:6e:08:24:69:9d:ff:
                    40:5e:0e:5a:c2:61:20:3c:77:cd:10:ca:7a:e4:bf:
                    ce:f0:fd:83:4f:8b:27:48:f2:9a:b1:4a:80:32:a0:
                    8c:c5:5e:9d:09:f5:74:86:6d:b3:69:df:9e:b9:6b:
                    42:df:f0:10:fb:31:0e:4b:c0:b7:1f:0d:6c:a6:59:
                    24:6b:0d:bb:7b:df:3e:3f:2b:2e:da:89:c0:5a:e3:
                    5f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4C:7C:4A:0A:23:A7:82:2C:46:13:D7:1E:1A:3F:49:D3:F8:DB:B4
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38392e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.195.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:bb:3f:c5:70:5e:1a:9f:4a:c1:9f:bd:69:6e:74:b7:39:c0:
         e4:e1:ed:ad:4c:42:41:de:df:65:74:d8:3b:d1:4f:54:4a:b4:
         34:cc:27:af:c4:4d:a9:da:c4:41:fe:9d:86:3f:30:9b:ab:3f:
         36:ab:e1:15:1e:58:90:10:7b:73:a7:b3:d4:0f:0b:88:c4:35:
         b4:28:4a:cf:8d:0f:02:15:2c:7e:40:10:71:ab:f8:7e:27:1c:
         ff:81:4b:ca:76:82:29:63:86:af:7a:4e:63:51:d5:46:a7:c3:
         39:e0:70:cc:f7:fa:c9:62:ed:0d:bc:c4:b2:9b:94:e9:89:80:
         40:f3:92:4c:d0:af:51:18:be:ae:7b:76:06:c6:a9:af:5f:d2:
         00:38:af:38:fa:06:92:f9:c9:1c:2e:35:49:38:bc:f7:6a:0a:
         f7:cd:09:13:5f:76:57:25:4d:f0:d9:09:fa:e6:6a:c2:ed:b7:
         6f:91:6f:bf:69:d8:c5:56:07:16:d2:b7:f3:9d:68:38:d0:5b:
         79:a0:3e:6e:5a:3e:6f:46:78:16:5d:60:76:fc:c3:24:06:79:
         ee:a9:bc:3c:26:5f:00:2a:06:06:b0:e5:8d:29:43:67:a8:61:
         e0:bc:38:66:f7:3d:44:43:8e:ee:14:23:d4:58:8a:ce:a7:84:
         f7:b8:cf:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----