Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3139332e32322e3134342e302f32342d3234203d3e20323037373837.roa
File:                     3139332e32322e3134342e302f32342d3234203d3e20323037373837.roa (raw, json)
Hash identifier:          KlL7DCdrL2xoc+tew5Bqt78+opYfBO2fCCQcHQMVe9o=
Subject key identifier:   01:73:26:49:52:B3:04:5E:F9:D0:D3:A5:B1:A7:72:CF:D9:AC:42:43
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       3DF8FA33561DE943666FA0F7789FDE1EAAE1915B
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139332e32322e3134342e302f32342d3234203d3e20323037373837.roa
Signing time:             Tue 23 Feb 2021 09:40:59 +0000
ROA not before:           Tue 23 Feb 2021 09:35:59 +0000
ROA not after:            Tue 22 Feb 2022 09:40:59 +0000
asID:                     207787
IP address blocks:        193.22.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:f8:fa:33:56:1d:e9:43:66:6f:a0:f7:78:9f:de:1e:aa:e1:91:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Feb 23 09:35:59 2021 GMT
            Not After : Feb 22 09:40:59 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:57:de:40:df:10:c6:86:46:59:74:a8:36:7f:
                    75:04:7a:66:fb:d5:2f:9b:2f:63:fb:4b:ed:f6:64:
                    7f:98:e9:74:9a:9e:6c:84:a4:ba:ab:64:03:0c:4c:
                    86:83:cc:c0:07:ef:5c:c9:4b:20:31:71:7f:22:c0:
                    7d:5c:ef:a8:db:f8:15:76:2a:db:fd:67:90:ab:d3:
                    10:5b:5f:35:15:3d:fc:25:c4:6e:68:5c:df:78:95:
                    8d:ee:1d:dc:9e:1e:d3:ff:82:db:42:8e:e9:e9:91:
                    7f:66:7f:7d:95:aa:b4:05:3b:1b:2f:1b:db:c4:61:
                    6e:a0:61:bf:69:74:ef:d9:5d:9b:3f:65:f4:af:a0:
                    7a:25:3a:d7:5d:83:91:8d:09:79:68:9d:b5:8f:36:
                    ec:e3:71:30:bb:40:85:d4:66:58:fb:d1:f3:d6:3f:
                    15:c7:01:f1:49:12:34:29:4e:4e:b6:0b:33:f3:3e:
                    4a:b9:41:ed:82:ea:11:67:b4:26:92:f0:7a:3c:f4:
                    1d:9f:10:8d:fa:63:c6:39:5c:43:b8:3c:33:56:ac:
                    96:dc:74:19:71:2d:35:b0:90:2c:16:78:7f:88:63:
                    ab:99:5e:6d:05:c8:c3:a3:46:99:4c:b4:7b:e7:89:
                    f7:4e:e0:2b:d6:e2:b0:fc:b9:59:80:a4:68:b3:7d:
                    ec:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:73:26:49:52:B3:04:5E:F9:D0:D3:A5:B1:A7:72:CF:D9:AC:42:43
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139332e32322e3134342e302f32342d3234203d3e20323037373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.22.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:62:b9:3c:31:3f:65:bd:de:71:20:32:e7:d9:56:97:68:d8:
         82:53:a5:be:31:17:cc:5c:83:a4:99:73:20:55:fc:1c:3a:30:
         8f:74:dc:00:6c:c5:aa:59:d5:c5:6c:b9:60:14:fc:c1:f6:cf:
         02:9a:d2:3b:63:6c:aa:03:7b:37:1f:97:ae:14:41:b3:fe:a4:
         b0:3d:ac:f1:0a:01:d6:51:1d:3a:79:8a:a9:9b:90:f0:a9:26:
         38:fb:e5:bf:71:aa:fd:95:8c:65:f2:85:8c:40:64:f7:7c:b5:
         13:98:b5:e6:72:d2:c3:23:99:83:e1:a8:97:42:6a:ec:b2:ea:
         aa:b9:c8:f6:86:6e:b9:3f:95:98:9b:2a:f4:ae:0f:d3:15:89:
         79:e3:7d:d6:17:03:3d:25:cc:76:15:dd:28:50:6f:fb:3e:b1:
         11:e2:41:20:8e:8e:89:96:e7:ee:4c:dd:f7:0e:ea:5c:92:90:
         00:5a:9d:b6:84:db:71:13:d5:df:7c:a9:ed:cb:de:9d:90:6b:
         7b:25:7f:80:c1:42:2f:63:5b:f7:cd:e6:bd:6b:05:40:fe:99:
         da:63:3e:8c:3c:eb:ba:51:a8:e9:73:ae:3f:26:ca:3d:04:2f:
         25:7b:5e:f4:93:ca:4f:d5:a1:d0:07:03:4e:2e:d2:15:95:f0:
         ab:3f:a5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----