Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e3230312e302f32342d3234203d3e203235393236.roa
File:                     3139342e36302e3230312e302f32342d3234203d3e203235393236.roa (raw, json)
Hash identifier:          opYx0oe5YTCGX7cGvbMNOYsh/UpB2ZW8ONPhRXDxQYU=
Subject key identifier:   F3:3A:4B:CA:7C:95:AD:90:D6:C7:44:96:8C:D4:BA:1F:DF:C2:0E:E8
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       739AD3369253F2BA17676E45F757D343EBB72DC5
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e3230312e302f32342d3234203d3e203235393236.roa
Signing time:             Fri 27 Nov 2020 15:10:21 +0000
ROA not before:           Fri 27 Nov 2020 15:05:21 +0000
ROA not after:            Fri 26 Nov 2021 15:10:21 +0000
asID:                     25926
IP address blocks:        194.60.201.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:9a:d3:36:92:53:f2:ba:17:67:6e:45:f7:57:d3:43:eb:b7:2d:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Nov 27 15:05:21 2020 GMT
            Not After : Nov 26 15:10:21 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:25:dc:c0:65:0d:47:6b:f7:de:f5:dc:17:5a:
                    55:5c:96:ad:48:72:4b:1b:52:e8:53:92:aa:b3:2e:
                    88:9a:ea:91:fb:2b:f9:5b:5c:d4:e6:d1:6d:8f:65:
                    54:5b:b9:e5:ea:83:79:b2:fd:1f:32:55:da:01:3a:
                    33:1c:10:55:38:6c:da:42:a6:e7:a3:38:5c:f7:48:
                    cb:fa:bc:3d:f2:3e:54:61:ec:47:d0:d7:fe:82:36:
                    db:09:06:6e:46:22:c9:8c:f0:22:c3:d5:72:39:73:
                    fb:c8:1c:93:b0:f8:43:40:1b:2b:ea:31:ce:cf:b8:
                    b5:31:cf:5d:a3:df:63:be:9e:0d:36:58:6c:ca:f2:
                    ac:d3:1b:fb:c9:36:e2:88:51:18:fe:52:69:8a:56:
                    b7:c0:74:8c:9c:13:fb:f2:b6:cc:39:2a:51:97:e7:
                    74:2f:0e:0d:57:e3:43:4b:30:7d:cf:70:61:28:50:
                    47:66:17:91:76:ec:6d:02:91:49:87:4f:50:83:27:
                    27:c3:5e:14:98:10:ef:db:6d:6a:29:53:87:03:d7:
                    bc:3e:b6:01:ec:18:13:9a:3c:72:77:6e:33:3d:ff:
                    d2:eb:f3:b9:ea:ab:4f:bb:f9:c7:1c:96:1c:c4:1a:
                    5a:08:fc:af:54:3f:22:38:2b:b7:e6:52:96:99:52:
                    f9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:3A:4B:CA:7C:95:AD:90:D6:C7:44:96:8C:D4:BA:1F:DF:C2:0E:E8
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e3230312e302f32342d3234203d3e203235393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.60.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:ff:8a:ac:8e:89:c2:a8:7d:96:eb:94:f5:62:a8:96:91:cd:
         93:4b:ad:cc:bf:79:97:34:5a:6f:ad:bf:fe:72:48:4d:53:b0:
         c3:ba:ed:bd:43:6c:5a:cc:02:12:99:6d:b5:af:26:71:06:45:
         62:75:19:0c:8c:61:4b:17:d9:8e:4f:0a:7a:46:04:c8:50:5a:
         4e:c3:e5:da:64:d7:ae:17:c1:2e:01:40:ff:00:8b:64:7c:f1:
         c9:45:41:32:87:3e:ed:cc:06:9e:6a:be:34:f2:11:ce:11:64:
         d9:9c:a0:6d:fa:27:82:88:28:20:3a:f9:ee:2f:6d:c3:a8:05:
         08:db:b5:9f:bc:52:9e:e8:8f:7a:d0:69:50:5a:fb:37:b5:1e:
         bf:c7:5e:65:b9:23:8e:56:05:db:bb:6c:20:77:80:ad:cd:42:
         d7:30:94:82:ea:99:68:05:34:c5:2d:d8:20:92:79:bf:9b:44:
         6a:6c:23:62:ea:4d:60:17:03:e8:a6:ab:ee:26:e0:bb:12:d6:
         cc:b4:ed:5d:cd:87:d6:d4:f3:31:a9:e1:54:e1:5b:e8:53:66:
         4d:7e:6b:6e:31:64:db:f8:0e:2c:97:eb:0a:c1:84:1d:41:6e:
         50:e0:92:66:e5:00:b0:ae:2a:53:a9:ba:f9:0a:71:79:dd:87:
         c2:a4:46:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----