Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e31342e302f32342d3234203d3e2038313030.roa
File:                     33312e3232302e31342e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier:          X4mBIgrD3sdmGiKPBCHuLu/sZslJ0ZQEv49VT3ELxqc=
Subject key identifier:   9F:1F:B2:06:28:8F:3C:3E:B3:03:78:C6:E4:D8:78:85:A9:1D:BC:2D
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       35B60CFAB4EDB6A3938D9CDF99A8DD5EBC199741
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e31342e302f32342d3234203d3e2038313030.roa
Signing time:             Fri 27 Nov 2020 15:10:36 +0000
ROA not before:           Fri 27 Nov 2020 15:05:36 +0000
ROA not after:            Fri 26 Nov 2021 15:10:36 +0000
asID:                     8100
IP address blocks:        31.220.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:b6:0c:fa:b4:ed:b6:a3:93:8d:9c:df:99:a8:dd:5e:bc:19:97:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 27 15:05:36 2020 GMT
            Not After : Nov 26 15:10:36 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4f:ae:de:64:66:91:5f:f8:c4:d4:d4:32:67:
                    e0:23:4a:b8:19:4a:a1:18:e3:6b:75:c5:db:55:e8:
                    9a:ff:92:53:66:f7:65:a1:70:73:5e:b7:90:63:1b:
                    4b:be:fa:3b:1b:42:d6:61:67:e8:ca:63:81:e4:16:
                    c8:fd:a4:97:4f:a3:49:49:8e:bc:94:dc:1b:f3:6c:
                    b3:c1:bb:02:b8:39:86:f7:f6:5e:76:38:ab:02:d6:
                    05:59:8c:74:20:dd:fe:c4:e3:91:7b:0c:91:a4:a8:
                    c3:ba:35:0b:39:fa:b0:d6:ba:3d:67:8d:ba:2d:76:
                    06:4d:a8:9c:7e:b2:ca:7f:1b:10:f8:6e:c7:4d:41:
                    fc:04:23:4f:4f:c3:44:87:6a:d3:d3:41:9f:82:55:
                    a2:34:0a:b9:98:99:cb:ee:74:7d:28:6c:91:90:06:
                    1c:9e:ba:3e:df:33:e5:5e:cc:cf:18:62:32:fc:27:
                    d2:ef:16:dc:e1:7d:3a:e6:f1:f0:ee:39:e2:8e:34:
                    2d:3e:c0:d1:a3:5b:73:ba:9c:29:6c:21:f1:6a:32:
                    50:ea:f7:38:53:06:eb:a0:ae:2d:44:ca:1a:b5:e7:
                    09:93:c6:62:03:e8:c6:8e:e1:5b:f6:88:39:1d:4b:
                    9a:b1:cf:dd:41:ba:b1:e5:7e:4f:c9:55:d5:a4:f1:
                    83:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1F:B2:06:28:8F:3C:3E:B3:03:78:C6:E4:D8:78:85:A9:1D:BC:2D
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e31342e302f32342d3234203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.220.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:08:4a:e8:1f:ed:c7:1d:5e:1b:a9:64:79:90:d5:ba:aa:4f:
         15:be:78:f1:84:4d:5c:d2:bb:0a:c9:f6:00:da:34:ac:56:5c:
         03:10:2f:3b:12:14:38:5a:54:85:7f:27:18:4b:4d:31:5e:5c:
         4e:a6:5d:a9:e1:ca:4a:cb:f8:33:ed:b0:a0:8e:fb:c3:05:71:
         85:7d:19:8f:c9:38:46:d9:c7:d6:28:fd:b8:0c:e9:b2:b8:3d:
         82:9e:be:6f:11:f7:e5:31:47:e7:fb:3d:72:74:cc:15:5b:ed:
         6a:31:6d:c0:53:ba:b2:3a:3c:f1:e6:9f:b4:35:8c:93:e9:d9:
         70:21:83:a8:0d:5e:99:f8:03:ce:d4:bf:46:50:e0:79:e5:e6:
         d8:49:fe:73:2f:09:64:71:1a:6b:12:03:0b:1a:4e:99:cc:44:
         6a:d8:36:a2:f4:18:ad:2c:7d:0b:6e:28:b7:73:df:09:90:46:
         88:bb:7e:06:dd:44:8c:28:13:f6:64:6c:9a:aa:be:10:f7:b8:
         4a:88:d2:e8:23:b6:dd:51:9e:be:00:97:84:08:d5:62:59:47:
         33:25:f0:22:47:39:83:ba:d0:7d:0e:4d:ee:8d:3c:16:a2:91:
         dc:0b:67:aa:00:65:be:1e:37:fa:85:74:6f:f1:5d:09:a6:98:
         01:c3:76:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----