Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/3130392e3233362e36312e302f32342d3234203d3e20333935373837.roa
File:                     3130392e3233362e36312e302f32342d3234203d3e20333935373837.roa (raw, json)
Hash identifier:          ZavGJGDekRdZrnosqYUbOhn4GgYmbk9+LtTWbP0j7jc=
Subject key identifier:   8A:85:B9:09:0A:73:47:BA:88:22:27:54:E1:75:9E:87:54:69:1E:58
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       6C78A2878ACF4ED38A98AD6B5C2EAECC92F88D2F
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/3130392e3233362e36312e302f32342d3234203d3e20333935373837.roa
Signing time:             Fri 27 Nov 2020 15:10:27 +0000
ROA not before:           Fri 27 Nov 2020 15:05:27 +0000
ROA not after:            Fri 26 Nov 2021 15:10:27 +0000
asID:                     395787
IP address blocks:        109.236.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:78:a2:87:8a:cf:4e:d3:8a:98:ad:6b:5c:2e:ae:cc:92:f8:8d:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Nov 27 15:05:27 2020 GMT
            Not After : Nov 26 15:10:27 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f4:cc:77:ca:6d:4c:7d:58:c0:09:f0:f3:bd:
                    b1:54:c3:93:5c:d1:05:dc:da:c2:73:4d:21:4b:aa:
                    7f:a6:20:b7:6b:17:3e:14:1f:bf:b8:11:01:60:b0:
                    78:e8:72:02:fc:64:ed:d4:43:b3:05:08:77:13:01:
                    af:02:72:51:a4:83:cb:ef:58:27:36:24:74:a5:80:
                    a2:49:22:9b:c5:66:c2:ff:cf:9c:51:7a:8f:96:27:
                    fd:a9:c7:6b:0f:5f:b6:7e:9b:74:4c:45:d8:1b:b7:
                    9b:d1:b3:65:76:20:0e:e5:e5:e0:11:30:20:e9:b9:
                    d6:2b:f0:70:7d:0d:10:2c:8c:f8:a9:56:29:7b:43:
                    66:60:a6:aa:20:98:2a:74:46:3a:04:f0:7f:51:18:
                    d6:43:54:b4:03:37:7f:1c:1c:58:a6:7d:9a:2c:35:
                    75:14:ea:5d:dd:cd:ae:0b:fb:83:2f:58:3f:cc:fe:
                    9f:a6:6c:60:ad:0c:bb:6f:bc:eb:2c:6a:8a:27:2b:
                    8a:b9:e2:9c:c9:d5:76:15:9c:15:fc:41:78:b8:a5:
                    ce:64:a8:d3:4e:23:9b:0b:6e:e4:7d:87:08:36:72:
                    48:80:b7:e9:b0:20:5e:ba:34:3c:b4:70:8e:fa:71:
                    f2:e1:78:e4:7b:a3:36:f8:ee:4b:9e:a8:8d:d0:d4:
                    dc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:85:B9:09:0A:73:47:BA:88:22:27:54:E1:75:9E:87:54:69:1E:58
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/3130392e3233362e36312e302f32342d3234203d3e20333935373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.236.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:76:11:4b:f9:99:a7:85:36:2a:f7:a1:aa:46:2b:b0:bd:fe:
         74:3c:44:c4:44:32:c8:3d:cd:d8:e8:f7:fa:d6:73:41:62:a0:
         6d:dd:1f:4c:5b:33:1a:d6:51:26:1e:a7:d3:cf:45:ef:f1:c5:
         a4:1e:35:c2:86:72:b9:34:2b:f8:72:fc:16:69:61:32:77:32:
         f3:5e:d6:00:ab:58:90:12:cf:ed:dd:ce:a5:5c:83:3c:2c:a9:
         6d:e2:b4:02:41:9c:57:3a:ac:e2:6b:72:0d:97:ce:ab:90:9e:
         90:51:7d:36:99:09:52:d5:94:bf:85:66:c2:b0:19:82:58:38:
         02:2c:91:94:c0:3d:db:ef:4c:75:55:4e:e0:dc:b5:87:05:93:
         ac:af:06:51:bc:82:2b:be:26:e9:05:10:fa:52:eb:4a:ec:51:
         32:9d:b0:32:5f:20:eb:2e:37:4d:1f:ce:7e:95:42:99:43:f7:
         01:c4:00:04:f6:47:f2:3c:bb:d2:c8:9a:71:30:d9:dd:e8:59:
         48:71:c3:ed:8c:9f:66:02:74:bc:4f:72:8e:0f:cc:50:2a:30:
         c1:3d:b6:b6:5e:d3:cc:2b:1c:6a:ae:cd:82:cc:fe:1e:35:c2:
         8d:1f:03:40:5f:85:3e:ad:8b:b5:57:a3:ba:03:33:c6:66:64:
         c4:f8:d8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----