Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139342e3131332e36362e302f32342d3234203d3e203432383331.roa
File:                     3139342e3131332e36362e302f32342d3234203d3e203432383331.roa (raw, json)
Hash identifier:          NfBxSUBPnpcjp7CV0aAsOZN6iaUjhhWBNqA14yJGdJk=
Subject key identifier:   35:77:59:36:60:18:23:3B:07:43:F8:B0:14:C7:B0:DF:F2:EF:16:2F
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       27F7DE58C5D79BAC057C06C6367B3793E3867552
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e3131332e36362e302f32342d3234203d3e203432383331.roa
Signing time:             Fri 27 Nov 2020 15:10:21 +0000
ROA not before:           Fri 27 Nov 2020 15:05:21 +0000
ROA not after:            Fri 26 Nov 2021 15:10:21 +0000
asID:                     42831
IP address blocks:        194.113.66.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:f7:de:58:c5:d7:9b:ac:05:7c:06:c6:36:7b:37:93:e3:86:75:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Nov 27 15:05:21 2020 GMT
            Not After : Nov 26 15:10:21 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:e0:41:3d:67:5e:2b:88:95:72:34:76:a9:c7:
                    5d:78:12:64:49:2c:22:7e:76:07:aa:0b:d5:36:20:
                    85:24:d4:92:08:41:07:c6:d8:93:85:e1:99:5c:20:
                    d2:eb:d0:1f:e4:48:21:ae:20:54:99:9b:59:73:3b:
                    7c:9f:35:ff:37:07:bb:d5:17:4f:8b:78:d5:25:da:
                    57:9e:45:59:70:5e:55:bf:1c:01:25:d3:d7:37:ad:
                    b0:40:e1:74:e7:eb:d2:ad:ef:1e:2d:ad:a5:e5:d7:
                    eb:13:af:c2:4c:e7:8f:a9:2d:60:a9:b6:a4:1e:c6:
                    a1:16:90:a8:37:b0:de:a8:a7:f4:91:c0:b0:2f:d0:
                    74:82:11:49:95:2a:9b:ec:86:93:ec:04:bd:2b:46:
                    e4:ff:fa:19:63:a6:83:d3:12:d1:6d:c5:17:23:0b:
                    6a:27:81:ac:a6:f7:23:2b:ba:9d:1a:fa:8f:39:6f:
                    a0:b2:bf:57:ee:8f:7c:6c:d6:f1:88:47:d6:c8:65:
                    a9:e4:e2:f1:66:3e:5e:b6:d7:eb:81:58:f7:50:00:
                    e1:f0:5d:bc:00:f3:ea:eb:d8:84:84:99:19:06:f4:
                    53:e6:71:6c:78:6b:85:00:06:df:0f:a4:47:b8:dc:
                    ad:df:bd:ae:20:41:ff:98:9a:3f:bb:60:c7:3b:0d:
                    c6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:77:59:36:60:18:23:3B:07:43:F8:B0:14:C7:B0:DF:F2:EF:16:2F
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e3131332e36362e302f32342d3234203d3e203432383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.113.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:e6:b7:2c:b9:09:ec:de:9d:14:b9:e5:10:07:4c:91:08:85:
         d3:74:eb:05:60:29:7d:79:f5:20:f7:cb:ab:1e:9e:23:3a:d6:
         d3:b2:84:63:4a:73:4a:e2:7c:b5:fa:29:c5:87:3c:13:07:9a:
         de:4d:90:fb:3a:d1:8e:c1:59:a6:34:f9:60:38:5c:37:e0:7f:
         cc:74:98:99:f4:79:33:06:71:2a:2e:06:07:32:fb:c5:59:64:
         a3:d1:87:37:85:d5:f2:a8:7b:63:58:1b:4c:3b:df:7b:f6:9a:
         2f:b9:5b:b9:5f:d5:77:51:58:c4:3a:a5:dc:0d:e3:96:f3:d9:
         96:0e:ed:1f:04:99:70:68:b2:88:b3:b2:f4:09:56:5c:e8:49:
         c8:fe:95:6c:01:7c:86:61:a1:dd:31:df:b7:15:0c:95:b3:96:
         12:33:4b:ef:d0:cf:2a:9c:fc:82:60:22:42:47:e7:d9:66:34:
         70:8c:8a:ad:01:0f:c4:ad:c9:79:0d:bc:e9:c9:3a:c7:fb:22:
         73:3b:7f:80:35:0d:29:72:2c:de:8d:41:3e:56:a7:25:1d:fc:
         7e:6a:0b:7f:b8:9a:49:a0:17:c5:44:2d:80:cd:b3:d2:65:7d:
         f8:4e:86:41:f9:06:d1:36:04:cf:6f:e4:a0:ea:3c:b9:f3:81:
         86:20:e6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----