Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/3130392e3233362e36312e302f32342d3234203d3e20323035383134.roa
File:                     3130392e3233362e36312e302f32342d3234203d3e20323035383134.roa (raw, json)
Hash identifier:          vEYe5EgFclhggHB/6RqIjgqAqBzSVZ2Qlctqk1R2IjA=
Subject key identifier:   33:B4:50:5E:2F:B1:C4:D8:C1:08:66:11:18:34:65:7A:69:A7:66:55
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       51B1390E044E52E7A9ADD4D83C312FD4458016E8
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/3130392e3233362e36312e302f32342d3234203d3e20323035383134.roa
Signing time:             Fri 27 Nov 2020 15:10:28 +0000
ROA not before:           Fri 27 Nov 2020 15:05:28 +0000
ROA not after:            Fri 26 Nov 2021 15:10:28 +0000
asID:                     205814
IP address blocks:        109.236.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b1:39:0e:04:4e:52:e7:a9:ad:d4:d8:3c:31:2f:d4:45:80:16:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Nov 27 15:05:28 2020 GMT
            Not After : Nov 26 15:10:28 2021 GMT
        Subject: CN=3082010A0282010100C405FD76C78E067CCF0A38924C9D61AD392F341C3311D344CDF2E4EFC1326C3C344580C25D652EB1BDBC3241F4F959A8700B7D937445034641020A8FE61082A34247384DFB2BF451F5D396275D84BF7CE7C5FE57F3016840B88C6179B56099DE4801B2E4C9498FEE22F507D473B88B8DC4BDFAD37A9A80E73F37C8ABAAC3DF9C815F48329BDEA57C14E70A97B7755067F7F2A0B38F4C5494A26920955DEA0AEB1F9564802F1CA9D67A7C8FD03050B88FDA672F7973FF7A6C2157D3907510B1D776C6B990D3470151EC60BAB6FBDEF3DB8355C76C2B8B4F57CB3752595CB6E37ED7DCBC35632DF540F14A79DDF968E213159D6660CE6C0EC4A4B55C64836AA3950203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:05:fd:76:c7:8e:06:7c:cf:0a:38:92:4c:9d:
                    61:ad:39:2f:34:1c:33:11:d3:44:cd:f2:e4:ef:c1:
                    32:6c:3c:34:45:80:c2:5d:65:2e:b1:bd:bc:32:41:
                    f4:f9:59:a8:70:0b:7d:93:74:45:03:46:41:02:0a:
                    8f:e6:10:82:a3:42:47:38:4d:fb:2b:f4:51:f5:d3:
                    96:27:5d:84:bf:7c:e7:c5:fe:57:f3:01:68:40:b8:
                    8c:61:79:b5:60:99:de:48:01:b2:e4:c9:49:8f:ee:
                    22:f5:07:d4:73:b8:8b:8d:c4:bd:fa:d3:7a:9a:80:
                    e7:3f:37:c8:ab:aa:c3:df:9c:81:5f:48:32:9b:de:
                    a5:7c:14:e7:0a:97:b7:75:50:67:f7:f2:a0:b3:8f:
                    4c:54:94:a2:69:20:95:5d:ea:0a:eb:1f:95:64:80:
                    2f:1c:a9:d6:7a:7c:8f:d0:30:50:b8:8f:da:67:2f:
                    79:73:ff:7a:6c:21:57:d3:90:75:10:b1:d7:76:c6:
                    b9:90:d3:47:01:51:ec:60:ba:b6:fb:de:f3:db:83:
                    55:c7:6c:2b:8b:4f:57:cb:37:52:59:5c:b6:e3:7e:
                    d7:dc:bc:35:63:2d:f5:40:f1:4a:79:dd:f9:68:e2:
                    13:15:9d:66:60:ce:6c:0e:c4:a4:b5:5c:64:83:6a:
                    a3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B4:50:5E:2F:B1:C4:D8:C1:08:66:11:18:34:65:7A:69:A7:66:55
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/3130392e3233362e36312e302f32342d3234203d3e20323035383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.236.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:ec:63:23:6b:a6:a3:e6:78:fa:1b:fa:a6:97:fb:97:5b:3f:
         51:9f:43:c7:ac:ec:f7:93:86:ee:50:00:59:65:bc:a1:d4:a6:
         81:41:28:e4:af:0a:59:bb:a7:fc:1f:3f:9a:01:b5:d3:66:70:
         6b:0d:80:a7:91:80:7f:3c:9c:c4:c9:b8:35:c7:8b:af:5a:8f:
         fa:dd:82:f4:dd:ef:74:63:05:92:e7:a3:04:69:a8:4f:b6:4c:
         02:ee:1f:ef:de:34:89:f9:3b:0d:4f:b7:36:0c:78:ee:c8:a9:
         68:d7:11:5b:1f:9f:6b:53:9a:8e:1f:44:24:c2:bd:9e:d8:bf:
         ae:4f:5b:3e:bf:fc:a4:b1:fc:62:3d:64:de:26:e4:92:93:04:
         3c:f3:a5:ce:4b:fd:72:f3:44:60:cf:e8:ff:73:c6:41:1b:02:
         44:0c:6e:12:83:5b:2b:ef:da:f2:be:ad:e8:f2:f6:69:96:ad:
         4d:aa:b0:54:3e:e5:ba:d8:35:02:97:7a:e7:a3:d7:57:d2:64:
         fc:a2:ba:62:f0:d8:d4:a3:64:b4:c9:b4:27:1f:7a:37:40:63:
         bb:6a:24:ee:2d:91:74:fc:9c:f9:92:32:d2:4b:c4:06:5c:06:
         d7:59:f2:ee:65:12:ea:bc:f2:76:31:37:5d:df:0f:8a:60:94:
         9b:b6:44:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----