Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3139332e32392e36302e302f32342d3234203d3e20323131383331.roa
File:                     3139332e32392e36302e302f32342d3234203d3e20323131383331.roa (raw, json)
Hash identifier:          u/9bE8pYEMyL0GkNzvJ+mE46xLZwH/nNzYhUez3Are0=
Subject key identifier:   4E:EC:77:C6:9D:F1:64:07:A5:77:16:98:98:20:75:32:A9:64:E9:9D
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       40AA79098414362C79432F71363612A558952BF5
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139332e32392e36302e302f32342d3234203d3e20323131383331.roa
Signing time:             Mon 15 Feb 2021 11:19:36 +0000
ROA not before:           Mon 15 Feb 2021 11:14:36 +0000
ROA not after:            Mon 14 Feb 2022 11:19:36 +0000
asID:                     211831
IP address blocks:        193.29.60.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:aa:79:09:84:14:36:2c:79:43:2f:71:36:36:12:a5:58:95:2b:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Feb 15 11:14:36 2021 GMT
            Not After : Feb 14 11:19:36 2022 GMT
        Subject: CN=3082010A0282010100C484FDE0806F5CDDA25F5AF16D25A350E51ED0AE19DC3A124845342F82C3F2114CFF81A1B8042EA21373913382739B14B96E1D85C132D2E1F8501963DF80FD235485EDF29BA26BDFD90679CDD8FD0CB5907D12DB0015D5489594A7FED8E2F19533A80E2148D56D35AC6D487DD86C8A8863DB04C7D9C8CB8C61E4F71B383F0650FC65134B2DCD149188CC6894B78CB5CA2498C96F3C202F1924CD6C49DF1D6587E42D7BF21BE45DE2DD98BF928907A5156332AA71C781AC5B857FA4F0ACEF619B8A6F5A4457FEAA3988FC380BAD84491A21F02144C4025E1833E69154EBDDBB3CE94BCE6E2CDF975A0404C22BD562DBA6AD41DBE77109F1978DE879C366F2535B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:84:fd:e0:80:6f:5c:dd:a2:5f:5a:f1:6d:25:
                    a3:50:e5:1e:d0:ae:19:dc:3a:12:48:45:34:2f:82:
                    c3:f2:11:4c:ff:81:a1:b8:04:2e:a2:13:73:91:33:
                    82:73:9b:14:b9:6e:1d:85:c1:32:d2:e1:f8:50:19:
                    63:df:80:fd:23:54:85:ed:f2:9b:a2:6b:df:d9:06:
                    79:cd:d8:fd:0c:b5:90:7d:12:db:00:15:d5:48:95:
                    94:a7:fe:d8:e2:f1:95:33:a8:0e:21:48:d5:6d:35:
                    ac:6d:48:7d:d8:6c:8a:88:63:db:04:c7:d9:c8:cb:
                    8c:61:e4:f7:1b:38:3f:06:50:fc:65:13:4b:2d:cd:
                    14:91:88:cc:68:94:b7:8c:b5:ca:24:98:c9:6f:3c:
                    20:2f:19:24:cd:6c:49:df:1d:65:87:e4:2d:7b:f2:
                    1b:e4:5d:e2:dd:98:bf:92:89:07:a5:15:63:32:aa:
                    71:c7:81:ac:5b:85:7f:a4:f0:ac:ef:61:9b:8a:6f:
                    5a:44:57:fe:aa:39:88:fc:38:0b:ad:84:49:1a:21:
                    f0:21:44:c4:02:5e:18:33:e6:91:54:eb:dd:bb:3c:
                    e9:4b:ce:6e:2c:df:97:5a:04:04:c2:2b:d5:62:db:
                    a6:ad:41:db:e7:71:09:f1:97:8d:e8:79:c3:66:f2:
                    53:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:EC:77:C6:9D:F1:64:07:A5:77:16:98:98:20:75:32:A9:64:E9:9D
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139332e32392e36302e302f32342d3234203d3e20323131383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.29.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:3a:28:80:cb:7a:4e:b7:5a:de:aa:14:23:81:df:8b:9a:92:
         2e:39:ac:18:e1:26:3d:18:6d:e7:20:2d:03:73:9a:4c:ee:a9:
         fd:91:b1:7d:7d:6c:7c:b0:d5:bf:43:06:cc:d5:21:c2:fd:32:
         9b:6c:76:b7:1b:42:1e:19:eb:93:f4:18:a4:1a:02:14:8a:93:
         b6:3c:c9:85:21:5b:35:65:82:74:f5:06:81:54:44:ae:1d:54:
         91:3d:d1:47:d5:27:36:a9:43:5d:4c:61:4a:82:6c:78:44:6a:
         2c:ff:8f:36:3c:0e:4f:94:a8:4d:a0:1e:df:af:1c:63:a5:2b:
         5b:84:29:36:7e:55:86:9b:c8:d6:92:e8:1b:15:98:78:8c:bf:
         56:5e:b7:72:8d:cb:81:98:94:6a:6d:df:6a:1a:5f:8f:4b:2d:
         41:be:64:83:27:12:ef:c9:25:0e:30:be:b3:25:74:de:0c:fe:
         61:a4:79:5d:18:54:f4:a3:c6:87:23:93:30:40:e4:42:9b:d8:
         de:12:15:ac:7c:d8:c2:86:46:2e:7f:e8:6d:20:bb:42:9b:9f:
         38:00:24:d1:0c:c8:4d:38:4e:e3:a2:0b:97:63:c9:f6:ac:4f:
         8d:59:40:07:2b:c0:54:91:2c:d1:9d:4c:f2:58:c2:e1:2c:ed:
         0f:ba:85:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----