Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e38372e302f32342d3234203d3e20323037373837.roa
File:                     3139342e36302e38372e302f32342d3234203d3e20323037373837.roa (raw, json)
Hash identifier:          kunLN85ArDSnmuKJgLdzb9hRDBJw4wFRf8wEpku+jv0=
Subject key identifier:   E6:EF:80:55:FF:9E:F6:2E:F0:95:A9:FC:E5:AD:F0:19:BF:95:A1:4C
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       512873E4E1F2D13D088F58F86AC87C231E4632A5
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e38372e302f32342d3234203d3e20323037373837.roa
Signing time:             Fri 27 Nov 2020 15:10:21 +0000
ROA not before:           Fri 27 Nov 2020 15:05:21 +0000
ROA not after:            Fri 26 Nov 2021 15:10:21 +0000
asID:                     207787
IP address blocks:        194.60.87.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:28:73:e4:e1:f2:d1:3d:08:8f:58:f8:6a:c8:7c:23:1e:46:32:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Nov 27 15:05:21 2020 GMT
            Not After : Nov 26 15:10:21 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:03:39:35:77:31:27:8b:94:99:da:57:3c:92:
                    d4:47:3e:25:cb:d4:9a:86:c5:cb:03:cf:95:b5:f0:
                    a4:30:18:eb:00:e4:fa:84:c4:ca:d8:af:f4:97:0a:
                    b7:14:8e:9d:42:1e:18:29:0f:73:89:f3:b3:b5:1a:
                    94:e3:65:bd:97:a6:39:0f:41:a7:2b:44:3a:64:35:
                    57:48:63:8f:89:76:36:4a:cc:f3:90:54:a4:a8:d1:
                    84:1b:a1:51:29:a3:ea:5f:14:e3:e1:90:d9:0f:e2:
                    95:3a:27:f5:30:20:e4:10:86:6c:d6:17:95:6d:ca:
                    9e:73:89:79:41:82:08:77:0b:32:0b:13:b8:bb:16:
                    1a:b2:47:51:53:d1:22:a0:a2:a4:a2:f9:7a:3a:61:
                    60:22:4d:c8:04:92:a8:14:44:a1:46:52:25:b2:d2:
                    43:84:41:3e:ab:e1:8d:46:7c:47:d8:a4:00:4a:af:
                    ad:7f:aa:07:b9:93:2f:8a:1d:46:32:f5:f7:ba:e8:
                    0a:46:69:a9:81:a6:5e:48:18:cf:69:4d:8f:af:28:
                    50:94:90:44:c0:f0:01:ef:ec:86:91:96:52:57:10:
                    6e:6c:cb:16:25:cb:ee:9d:4c:05:56:bb:10:16:95:
                    ac:af:2c:f3:b7:e8:c8:70:87:56:ca:80:4d:f9:45:
                    af:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:EF:80:55:FF:9E:F6:2E:F0:95:A9:FC:E5:AD:F0:19:BF:95:A1:4C
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e38372e302f32342d3234203d3e20323037373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.60.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:bf:20:77:fb:83:80:ca:6f:11:6f:5b:ea:f1:d8:e7:72:aa:
         31:08:23:54:41:7f:6b:eb:f2:8e:92:c2:e6:11:80:b5:d1:84:
         c0:f4:b9:34:03:f7:6c:a7:57:11:93:36:08:40:85:fc:2b:23:
         b6:99:6d:2d:f5:f3:b3:a7:67:33:b5:cd:a8:5e:67:e3:0f:ac:
         81:c8:92:bf:26:c2:c0:7b:0e:61:79:21:93:8e:05:6c:4d:c7:
         63:1a:77:7b:02:11:d5:b1:06:23:a9:94:13:ff:d8:d6:c9:67:
         74:26:7f:0c:b8:2d:d8:a4:ca:25:ba:df:de:3b:34:c5:22:50:
         c2:17:91:52:94:2c:7c:22:f4:16:5a:2e:bd:a3:f0:b9:b3:f1:
         fd:c1:d1:4d:11:5f:f6:c1:eb:7b:ed:a4:ac:50:b6:bc:bd:02:
         1f:77:0b:2c:b8:ad:bb:3a:da:f2:63:21:04:24:1f:e2:d5:58:
         aa:0a:cc:67:45:86:22:a1:04:23:fc:ad:58:f1:83:11:63:40:
         47:68:40:29:d7:eb:21:42:8f:0e:71:56:89:30:01:0e:c8:23:
         74:e1:ef:4a:63:23:b8:b3:7d:44:ed:61:45:ac:b2:17:85:39:
         57:67:97:57:65:17:15:7b:b9:2e:b8:d7:81:87:86:6e:69:a7:
         43:ba:25:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----