Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e38362e302f32342d3234203d3e20323035383134.roa
File:                     3139342e36302e38362e302f32342d3234203d3e20323035383134.roa (raw, json)
Hash identifier:          83il/jZZffpGS2KYh94/8o0j1kjTkqZvq0hlrhZZbtk=
Subject key identifier:   DB:85:53:FA:97:D2:90:C1:B3:C0:B1:31:6E:2B:E2:19:E1:F2:64:DE
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       63FD707D66B4681878C5EAFD0EB5D497671F9B07
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e38362e302f32342d3234203d3e20323035383134.roa
Signing time:             Fri 27 Nov 2020 15:10:20 +0000
ROA not before:           Fri 27 Nov 2020 15:05:20 +0000
ROA not after:            Fri 26 Nov 2021 15:10:20 +0000
asID:                     205814
IP address blocks:        194.60.86.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:fd:70:7d:66:b4:68:18:78:c5:ea:fd:0e:b5:d4:97:67:1f:9b:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Nov 27 15:05:20 2020 GMT
            Not After : Nov 26 15:10:20 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1c:9e:f6:4c:c7:b8:76:90:b4:e3:70:88:69:
                    af:14:d7:79:94:10:b6:6c:21:38:52:1d:76:ad:f7:
                    da:8b:63:50:cb:66:c5:08:4c:0a:c0:1b:6c:5c:e5:
                    c4:30:bb:43:b5:e9:2a:b8:8a:dc:b3:42:32:64:23:
                    f8:d4:5c:84:1a:68:b9:24:fe:58:6d:8c:1c:92:09:
                    75:cc:9d:f1:35:7b:24:4d:63:9c:c8:ab:9a:4e:5e:
                    5e:b5:f6:00:5b:60:f8:e2:1e:71:36:d4:19:f9:58:
                    b6:11:a3:58:37:5b:6e:74:51:e6:a4:58:45:3c:cd:
                    de:b6:0e:65:76:0a:7c:c6:99:e6:fe:09:34:91:75:
                    04:cf:8b:04:d3:d2:40:da:b5:d7:b7:fa:75:20:18:
                    38:39:9a:ff:8d:a5:fc:3b:4b:7c:56:48:3e:bf:bf:
                    bf:09:24:b2:17:ba:98:da:a3:cd:68:41:28:1d:4c:
                    ea:6a:af:92:b1:c3:5c:e7:00:b6:b5:92:76:e3:e0:
                    1e:13:04:71:11:97:0c:1c:76:d2:99:cb:f2:a5:da:
                    dd:b1:4e:d7:26:2c:eb:50:c2:7e:ec:82:e0:23:30:
                    dc:c1:97:c3:92:94:09:c7:c3:f5:cb:4c:47:fc:39:
                    5b:fe:a6:fc:e7:cb:72:65:85:5b:8a:e0:10:a4:11:
                    08:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:85:53:FA:97:D2:90:C1:B3:C0:B1:31:6E:2B:E2:19:E1:F2:64:DE
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e38362e302f32342d3234203d3e20323035383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.60.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:22:60:07:7c:83:72:aa:83:b5:e4:e9:7c:3d:86:74:2b:f4:
         aa:70:4c:b6:88:7c:d3:1f:60:db:a6:15:a6:e4:77:14:6a:5a:
         40:8b:6c:c6:c4:a5:2f:1a:a5:61:68:fb:63:d9:67:21:50:33:
         61:2d:eb:e9:43:1a:17:07:6f:72:bb:f5:57:1c:08:e6:a4:42:
         91:7b:23:b3:23:9f:e0:37:fc:9d:8a:27:77:75:0f:c8:44:2f:
         35:17:1f:18:45:89:06:c9:84:3e:88:b0:d2:68:e0:c9:04:48:
         19:e8:25:96:a4:0b:13:0d:a9:3d:ed:1c:fa:3a:91:e8:de:4d:
         b6:23:34:78:56:1d:fe:1b:0d:04:b3:92:5e:bd:01:20:e5:c6:
         a0:79:f6:20:45:09:61:33:01:57:b6:65:77:7a:dd:bc:bd:25:
         23:55:69:6c:cc:05:38:8f:a7:bd:c4:e0:93:ae:d6:7f:96:35:
         96:98:e3:68:c9:d5:d7:f6:66:7b:9d:a7:09:49:16:65:09:85:
         6d:da:ae:81:fb:f1:f4:91:52:d0:38:8d:d9:e4:82:9a:99:bf:
         af:ae:34:a2:4f:58:b3:61:aa:fe:0f:e1:d6:83:c8:c3:9e:a9:
         f0:2a:f4:60:c0:63:f0:97:2c:80:e1:f3:ef:9f:34:16:9f:a2:
         b6:72:8b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----