Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/38332e3137312e3234382e302f32322d3232203d3e2037393232.roa
File:                     38332e3137312e3234382e302f32322d3232203d3e2037393232.roa (raw, json)
Hash identifier:          CuKz0idFaibP8vI/Vaz0cdXDDl6o2K9gIlIz7zKpNWI=
Subject key identifier:   65:7C:09:AB:1D:88:5A:DD:7B:42:A9:03:00:73:A7:64:63:76:E1:ED
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       1348E32D2A8DFD77CCE6604B9A443A37EFF8AF08
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/38332e3137312e3234382e302f32322d3232203d3e2037393232.roa
Signing time:             Fri 27 Nov 2020 15:10:27 +0000
ROA not before:           Fri 27 Nov 2020 15:05:27 +0000
ROA not after:            Fri 26 Nov 2021 15:10:27 +0000
asID:                     7922
IP address blocks:        83.171.248.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:48:e3:2d:2a:8d:fd:77:cc:e6:60:4b:9a:44:3a:37:ef:f8:af:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Nov 27 15:05:27 2020 GMT
            Not After : Nov 26 15:10:27 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f3:90:8f:a0:b4:a2:f8:2b:56:be:bc:ce:9e:
                    72:24:29:39:86:bf:c1:b0:52:0e:39:33:e4:c6:1d:
                    89:be:7c:ee:77:26:f4:e0:50:32:cd:04:74:42:16:
                    c4:29:dc:a1:06:75:f8:67:7a:27:0f:b1:df:0a:12:
                    ff:1e:92:97:ce:dc:ec:a3:76:15:de:5e:cc:79:c9:
                    24:fd:b6:d9:63:54:eb:d2:0d:50:90:b2:76:8c:84:
                    99:f3:e0:35:d8:92:bc:e5:65:df:4a:3b:5e:aa:6c:
                    79:ea:3d:5c:94:1d:b1:e4:9e:7d:3d:55:08:c1:e1:
                    ae:15:9d:56:2b:21:28:7b:03:90:fc:06:fe:45:58:
                    b8:a0:46:7f:38:bf:66:85:db:2e:f3:48:3d:69:61:
                    01:d0:e4:52:76:0c:94:38:1e:f3:76:09:ed:96:b8:
                    dc:5d:0b:0a:59:83:22:0c:f1:de:7b:f5:a1:a4:96:
                    11:a0:0c:92:5c:41:8a:d8:9b:d1:01:15:5b:85:6c:
                    c1:9d:fb:64:65:36:1e:4f:ca:bd:48:d2:5d:68:d0:
                    89:55:cf:a9:f3:9a:95:bc:4d:da:30:aa:48:8b:f6:
                    31:91:a3:37:eb:83:08:ed:c6:c6:71:d0:f4:c7:8e:
                    28:c9:0f:48:3c:7f:91:e4:15:92:6f:6f:b0:7d:48:
                    56:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7C:09:AB:1D:88:5A:DD:7B:42:A9:03:00:73:A7:64:63:76:E1:ED
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/38332e3137312e3234382e302f32322d3232203d3e2037393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.171.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:fd:ae:4a:ce:f9:d5:a4:2c:31:37:4f:e2:df:e5:6d:8a:83:
         8f:c8:af:ba:a5:74:68:11:26:5d:72:94:e3:66:c8:99:76:b2:
         0b:ac:e8:e9:f7:91:26:f3:03:7b:8f:af:b6:5d:df:98:6c:a5:
         8c:11:29:da:76:d2:85:c5:43:a2:d0:04:ad:43:81:76:7d:25:
         8e:88:d0:ef:b6:71:3d:8c:f0:55:9f:cf:fa:bc:0d:9e:53:da:
         b3:e1:73:8f:97:ce:d1:ed:a7:c2:be:bf:6a:ca:af:9e:0f:d0:
         61:28:70:47:b3:e9:b4:2d:21:e3:94:c2:33:e0:54:9e:d7:0c:
         b6:1b:5a:bf:87:e4:ee:df:a6:ba:a6:24:15:8e:81:6f:d6:62:
         99:23:49:cf:7e:d1:7d:31:5a:47:29:e0:20:1e:a3:a7:70:e5:
         84:58:41:e2:2d:c5:c3:b5:f4:8d:92:2c:aa:27:04:65:e4:80:
         ee:d6:0b:53:0f:91:7b:26:b0:ba:4f:5f:91:9a:36:4e:9f:5c:
         aa:25:26:9e:58:4b:b9:68:cb:ef:d2:69:8b:d7:b4:0b:33:12:
         c9:3a:3b:22:6a:b2:b4:95:ff:a4:dc:99:37:b6:61:0c:8c:ce:
         5a:51:a2:7d:1f:4c:f8:6c:f4:07:1a:f1:f3:eb:53:46:09:9d:
         d5:a2:d7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----