Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/AS42366.roa
File:                     AS42366.roa (raw, json)
Hash identifier:          xnKCe2Ph1Js4Oqcg3gyW5FhLy6QUbRm4AroIzk4DpRA=
Subject key identifier:   83:1C:59:A4:21:83:49:4A:C2:26:F2:12:79:D2:C5:EA:4E:00:B4:34
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       36BA05D3885D94FEC82A75A7C17BA1E7708A3905
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/AS42366.roa
Signing time:             Thu 26 Nov 2020 21:57:23 +0000
ROA not before:           Thu 26 Nov 2020 21:52:23 +0000
ROA not after:            Thu 25 Nov 2021 21:57:23 +0000
asID:                     42366
IP address blocks:        77.237.224.0/24 maxlen: 24
                          2a01:6f0::/32 maxlen: 32
                          2a01:6f0:100::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ba:05:d3:88:5d:94:fe:c8:2a:75:a7:c1:7b:a1:e7:70:8a:39:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 26 21:52:23 2020 GMT
            Not After : Nov 25 21:57:23 2021 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f7:9f:98:42:2d:74:51:bd:2e:9f:2f:f3:ff:
                    26:7a:f6:e5:d4:54:03:d5:89:bd:54:81:22:27:4f:
                    0f:ac:0d:6a:ec:9b:31:89:de:a0:6b:08:04:ab:23:
                    36:28:a7:f0:57:35:90:da:16:1f:1a:ca:e2:04:2b:
                    2c:cf:7d:b3:0b:c9:09:56:d0:75:47:00:2e:69:96:
                    22:33:1b:4e:d9:76:b6:a2:30:6e:ab:4f:c1:48:d3:
                    d0:59:dc:5e:11:44:9a:3f:b4:9e:7a:30:40:dc:d9:
                    81:87:79:37:ea:88:20:f2:0f:97:5b:dd:55:f1:39:
                    c1:24:9b:9f:fd:52:8f:4c:f8:9e:04:4b:d0:28:d2:
                    4a:aa:0d:15:3c:c7:06:c0:e6:81:46:50:a8:8f:16:
                    08:ae:fd:6d:16:df:ad:9a:88:36:6f:95:fc:96:00:
                    ad:63:bf:c1:02:2c:54:d3:67:e4:f6:ce:75:de:06:
                    85:41:e2:53:cb:0f:1a:da:5c:73:ee:e8:fd:a2:d7:
                    1a:5b:be:ac:81:a4:f9:6f:c4:81:69:5f:8c:48:b9:
                    2d:d9:cd:75:aa:1a:c4:fe:4b:eb:cd:4b:1f:0b:75:
                    91:1d:84:59:19:b4:67:ef:ad:8d:d1:0f:60:07:c9:
                    c0:8c:cc:c9:bb:3e:e9:29:94:34:bf:c4:bc:fc:7c:
                    78:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:1C:59:A4:21:83:49:4A:C2:26:F2:12:79:D2:C5:EA:4E:00:B4:34
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/AS42366.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.237.224.0/24
                IPv6:
                  2a01:6f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:22:af:ea:77:ae:da:67:5a:0f:43:eb:84:17:53:81:a8:48:
         2e:d4:6d:12:61:06:50:6d:b5:86:64:29:69:a5:c6:1d:7d:e9:
         23:f3:94:f6:5d:88:59:82:bd:63:ac:28:2f:75:dc:dc:5e:91:
         2b:f0:c2:d4:58:df:0c:5a:6e:fe:47:46:72:95:49:38:a3:d3:
         ec:32:24:fd:78:c7:70:e8:6d:4c:17:ef:ce:dc:60:08:21:94:
         d5:cd:2a:a2:9d:f9:e0:76:2a:b3:eb:03:d1:04:e6:13:f9:a2:
         6a:8e:0a:51:32:c5:c7:7c:9b:f0:31:69:13:f2:10:8a:8e:f9:
         83:ec:9f:74:e5:48:bd:00:95:19:5a:21:ff:e6:b1:81:3f:85:
         73:03:1d:10:91:be:fa:52:ff:c1:f3:00:dd:4e:0d:f6:25:3a:
         e5:0f:a9:d5:37:13:62:42:1c:30:b0:32:01:ff:74:0b:08:06:
         a2:2a:93:e1:94:50:14:03:a4:a3:6b:30:4f:95:c6:63:0a:63:
         5d:73:d8:60:1b:25:e7:60:86:90:3f:15:b1:5a:73:96:43:18:
         b2:bb:8c:33:e3:82:74:2f:f6:32:14:24:43:c8:68:fb:1a:33:
         b3:8e:4e:25:ae:b1:ce:9a:ae:58:b8:da:80:df:06:67:e0:b8:
         a3:18:96:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----