Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37342e302f32342d3234203d3e20323133303335.roa
File:                     33312e3138372e37342e302f32342d3234203d3e20323133303335.roa (raw, json)
Hash identifier:          +eo2L2qTTIwS/Ez3h/TQYxb42e683kUpsMLrWtq9cQo=
Subject key identifier:   25:BB:AC:A6:B5:1E:C4:1F:AD:D5:BE:A9:BB:4A:C6:5F:9A:7F:37:70
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       170351BD28F33093E6996FDACD8100CE96A16436
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37342e302f32342d3234203d3e20323133303335.roa
Signing time:             Fri 27 Nov 2020 15:10:33 +0000
ROA not before:           Fri 27 Nov 2020 15:05:33 +0000
ROA not after:            Fri 26 Nov 2021 15:10:33 +0000
asID:                     213035
IP address blocks:        31.187.74.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:03:51:bd:28:f3:30:93:e6:99:6f:da:cd:81:00:ce:96:a1:64:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 27 15:05:33 2020 GMT
            Not After : Nov 26 15:10:33 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1e:c2:c1:af:18:0b:a6:78:e7:27:77:c9:de:
                    ab:0d:c6:1e:ad:d7:b8:db:b2:00:3a:99:6c:ec:ad:
                    63:97:aa:3c:1c:03:c7:96:67:3c:d8:e3:0a:99:96:
                    71:60:bb:7a:67:d5:85:e8:e7:6b:50:24:52:8a:e0:
                    11:b4:29:d0:5a:44:da:e3:d7:f7:49:66:1a:55:ac:
                    dc:dc:1d:0e:87:86:23:d5:e8:6b:15:2c:d7:a7:4d:
                    21:1c:89:c1:6f:6c:a2:6f:dd:3d:c8:22:21:d1:8f:
                    63:6b:a0:ae:b8:0b:4b:63:ba:f1:fd:6a:48:d1:31:
                    a4:70:42:76:62:19:17:74:da:ac:f4:c2:c1:3b:ea:
                    73:98:86:23:d1:7f:3a:0e:b9:e9:78:8a:72:d9:c0:
                    04:d9:b6:12:e0:20:2f:45:d3:fb:c2:bc:6e:93:13:
                    83:99:b4:d4:d8:5c:b3:13:b1:db:0e:14:27:66:4a:
                    76:d9:07:f1:63:51:6f:f9:a8:03:bd:66:98:72:4e:
                    38:9c:4c:d8:e5:af:19:0e:31:38:99:13:01:17:50:
                    07:76:94:dd:d6:2c:3a:7e:3a:b4:5f:d3:69:71:27:
                    d3:a5:e4:63:85:74:f6:69:30:f5:4c:dc:12:0e:0e:
                    83:19:27:b1:3e:81:e8:40:e2:bb:af:d6:e3:90:90:
                    fc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:BB:AC:A6:B5:1E:C4:1F:AD:D5:BE:A9:BB:4A:C6:5F:9A:7F:37:70
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37342e302f32342d3234203d3e20323133303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.187.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:ba:73:50:83:58:1b:e8:3a:68:2f:c5:0d:e9:a2:24:16:3f:
         64:79:69:bb:bc:d1:df:05:80:4d:2c:31:e2:f0:73:fc:e1:67:
         2c:b2:2d:84:40:2b:a4:41:fe:2c:a7:51:3d:46:84:9a:e3:88:
         44:de:2f:f7:70:d7:79:f7:1a:73:ce:98:41:64:14:17:5e:95:
         82:3b:56:ce:be:d1:f6:bd:e2:ef:a7:b6:95:65:99:dd:98:c5:
         0e:d3:67:44:a7:07:25:05:ec:4c:44:7d:e9:70:8b:1c:b2:bf:
         00:53:c3:d0:4f:9d:f4:2c:18:23:7f:b8:82:95:43:aa:56:77:
         0c:62:f5:95:9a:3e:8c:eb:85:14:dd:b9:1f:e7:a6:68:19:72:
         88:e0:6c:f3:ca:d0:7d:a9:d0:55:21:90:26:0f:51:c0:b4:6b:
         c2:47:34:a1:6a:02:8a:15:b1:b8:7e:b8:7a:88:91:50:61:c8:
         08:ee:16:c9:6d:19:7d:8c:0a:f8:04:16:07:49:42:07:62:6f:
         05:fc:8a:40:76:70:71:a3:3d:b9:b0:43:cf:0d:71:6a:ec:f3:
         db:8b:75:bc:5d:db:8f:72:8c:7c:92:22:34:63:69:3b:6b:cc:
         9e:26:83:b4:ac:f3:b0:38:e7:29:61:86:7d:53:1a:36:df:83:
         36:55:58:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----