Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3139332e32322e3134342e302f32342d3234203d3e203632303638.roa
File:                     3139332e32322e3134342e302f32342d3234203d3e203632303638.roa (raw, json)
Hash identifier:          D1jmZUWBnKEWRexTDc5r+RrItCURIF7VnBdA4dFct2w=
Subject key identifier:   5C:D4:AF:C7:21:7F:45:91:13:2B:3E:9C:E2:ED:A5:EF:AA:21:12:6F
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       21CDB357510B7590112EE258B6F61FBADED4458C
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139332e32322e3134342e302f32342d3234203d3e203632303638.roa
Signing time:             Fri 27 Nov 2020 15:10:24 +0000
ROA not before:           Fri 27 Nov 2020 15:05:24 +0000
ROA not after:            Fri 26 Nov 2021 15:10:24 +0000
asID:                     62068
IP address blocks:        193.22.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:cd:b3:57:51:0b:75:90:11:2e:e2:58:b6:f6:1f:ba:de:d4:45:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Nov 27 15:05:24 2020 GMT
            Not After : Nov 26 15:10:24 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:96:bc:94:ed:8a:6d:5a:ea:96:ca:4f:28:a9:
                    ac:01:dc:71:73:cf:33:63:3c:c7:5b:53:4c:45:6c:
                    1f:7f:97:b2:5d:8e:f4:1e:15:ed:29:26:27:ce:72:
                    f0:ab:b4:c4:bd:bd:70:19:d1:24:45:fa:42:fa:df:
                    40:22:cf:15:d6:83:92:f4:4d:28:60:65:8f:7b:df:
                    5c:73:4a:b7:0f:8e:58:92:4f:7b:10:6a:18:41:9a:
                    7e:90:2c:b8:4f:10:24:87:4c:11:3f:0a:4d:da:70:
                    f7:6e:bf:e7:9e:4b:ad:3d:07:c7:95:fa:05:10:b0:
                    09:81:80:f9:80:7e:05:30:72:d6:cd:5d:0c:9a:4e:
                    cc:b8:c6:8c:b4:c0:4f:1e:02:63:3b:7c:64:9c:c8:
                    6c:4d:d9:5f:a8:9f:ed:c6:19:1d:5d:34:35:91:44:
                    ef:33:25:3d:e3:a0:0a:a1:79:a9:2b:5a:4e:f9:c4:
                    66:eb:14:d0:80:74:72:b9:fa:97:96:24:9c:4c:fb:
                    76:2d:46:47:c4:13:fb:7e:1f:87:7c:f1:ff:fb:ae:
                    09:f4:64:e7:82:37:4e:81:9a:39:6c:41:33:b8:97:
                    43:7f:8c:1b:d7:4d:19:f1:c7:f9:fe:60:f7:1d:de:
                    c4:7e:1f:03:c3:36:48:df:12:9b:76:ad:a9:c6:99:
                    e7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D4:AF:C7:21:7F:45:91:13:2B:3E:9C:E2:ED:A5:EF:AA:21:12:6F
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139332e32322e3134342e302f32342d3234203d3e203632303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.22.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:d3:c7:78:f3:e5:40:1c:3c:bb:b1:36:03:85:e7:76:8b:81:
         01:32:39:be:ac:d7:e4:5f:ea:91:38:b7:6b:a0:b8:ef:a2:aa:
         4c:07:e3:c1:32:d7:8a:6e:c5:cd:95:25:f3:c2:d8:b4:5e:e5:
         a2:dc:42:8a:29:5f:3e:64:f7:7d:59:a3:5d:ec:d3:dc:bd:92:
         e4:d0:d9:42:c7:fa:a0:89:65:79:7a:8b:7e:bc:4b:95:b9:1a:
         ba:0c:e7:a6:c4:e8:da:15:3a:80:53:81:86:39:43:58:a6:4e:
         b4:9d:aa:8b:7b:20:0c:06:00:f8:b1:b1:f2:e3:81:0c:77:1e:
         2a:40:29:cc:4f:d0:0b:f6:c6:b6:39:d0:87:e3:6f:fa:c8:6d:
         f7:69:33:83:1d:9c:7a:06:b4:68:10:fe:4f:e2:03:12:a5:bb:
         8d:a7:62:b4:c6:66:f4:aa:8d:23:89:bc:39:9e:bc:c2:07:cf:
         94:7c:78:28:e2:66:c8:77:96:32:21:92:e2:e6:b5:87:cc:6d:
         c6:75:7b:ed:a0:25:a4:3f:e9:29:3e:37:0f:83:24:0d:f9:15:
         e5:f1:2b:3b:59:b5:4f:e9:32:74:6a:dc:a1:c3:11:a3:26:50:
         fb:55:d5:4e:9e:36:80:77:7d:b8:6d:d0:3d:4f:f7:06:4f:a1:
         51:ce:ae:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----