Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/99/39312e3232392e3234342e302f32342d3234203d3e2031323339.roa
File:                     39312e3232392e3234342e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier:          3Ufvv9TIeaTLhBsq0Dmsl7vQLxh/ZU35XKbKWauvljs=
Subject key identifier:   95:03:A3:33:D7:B2:78:BD:5C:43:01:B3:6B:6D:98:7A:66:C5:89:43
Certificate issuer:       /CN=aac035144ef01fea05cb97862c36968f2f74b711
Certificate serial:       4110407BB6C55F2EE8183EFC90956C56B7FA3CCB
Authority key identifier: AA:C0:35:14:4E:F0:1F:EA:05:CB:97:86:2C:36:96:8F:2F:74:B7:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qsA1FE7wH-oFy5eGLDaWjy90txE.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/99/39312e3232392e3234342e302f32342d3234203d3e2031323339.roa
Signing time:             Wed 17 Feb 2021 11:14:52 +0000
ROA not before:           Wed 17 Feb 2021 11:09:52 +0000
ROA not after:            Wed 16 Feb 2022 11:14:52 +0000
asID:                     1239
IP address blocks:        91.229.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:10:40:7b:b6:c5:5f:2e:e8:18:3e:fc:90:95:6c:56:b7:fa:3c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac035144ef01fea05cb97862c36968f2f74b711
        Validity
            Not Before: Feb 17 11:09:52 2021 GMT
            Not After : Feb 16 11:14:52 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d2:34:2c:ba:76:1a:97:53:d2:8e:ab:f5:19:
                    2d:e6:89:48:64:cd:6f:dd:39:0f:be:27:ad:6e:e8:
                    f4:b8:cb:06:da:05:5b:ca:ef:a1:89:54:e2:0a:9d:
                    8a:35:b2:54:58:7d:06:a2:82:1f:f7:2e:8e:51:46:
                    ef:21:04:da:a5:d7:5e:fb:dd:0a:6d:14:a6:5c:d2:
                    80:fd:1f:65:37:c4:6f:30:c5:d5:c2:dc:1d:ac:1f:
                    d4:6d:f9:8e:4b:18:f1:12:cf:33:f1:1b:4f:86:ad:
                    44:f3:21:ac:be:38:de:3f:ff:da:8a:ba:c8:87:fb:
                    7b:5f:f6:e0:e2:39:f1:b9:e9:04:ef:aa:a3:ae:84:
                    40:1f:97:25:51:ed:a7:fa:50:7b:0d:90:2b:0c:49:
                    90:5c:ed:cf:ec:df:3e:d2:6e:67:66:9d:cf:9f:7c:
                    32:f3:8f:01:3c:05:bc:89:dd:50:d4:ba:e8:b3:ac:
                    1d:a2:6b:9f:06:d3:35:5d:cd:84:dd:00:5d:ee:42:
                    a6:38:e8:da:b3:52:c0:d5:94:c4:4c:4e:52:28:9d:
                    ce:bf:36:71:cc:5d:db:71:67:c3:01:8f:2c:6c:bb:
                    97:eb:97:6d:50:03:e8:99:11:19:c7:38:3d:23:8c:
                    c8:82:25:be:0c:7f:56:2a:a9:83:60:2d:89:f3:10:
                    c6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:03:A3:33:D7:B2:78:BD:5C:43:01:B3:6B:6D:98:7A:66:C5:89:43
            X509v3 Authority Key Identifier:
                keyid:AA:C0:35:14:4E:F0:1F:EA:05:CB:97:86:2C:36:96:8F:2F:74:B7:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/99/AAC035144EF01FEA05CB97862C36968F2F74B711.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsA1FE7wH-oFy5eGLDaWjy90txE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/99/39312e3232392e3234342e302f32342d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.229.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:16:88:a5:2d:44:14:c5:f2:ba:ab:68:fe:35:62:72:3e:59:
         93:c8:03:25:7e:a7:0c:f4:53:eb:3c:5e:7c:04:3d:77:b5:28:
         aa:1b:70:ec:e1:99:34:16:c0:5b:13:00:f2:1c:36:13:4e:a2:
         c3:83:eb:11:17:db:b1:59:de:41:85:18:0d:cb:54:1b:3d:15:
         e0:a0:23:f9:b7:2f:c0:07:78:7e:a7:cd:c9:51:9f:0d:13:ed:
         c1:14:65:35:af:cb:83:a9:8f:74:ed:0e:88:af:c4:bb:0e:71:
         89:55:c1:08:53:02:58:a8:c5:64:7b:1d:b0:c7:85:a2:bd:3d:
         fc:a6:a4:49:71:5a:08:16:24:1d:76:1a:a0:fa:f4:0c:47:cc:
         1a:4b:33:2f:16:9d:e5:c8:63:8e:52:6a:46:59:a6:c6:83:07:
         14:ac:82:04:71:f9:81:fa:1b:62:74:9b:1e:da:3e:48:db:6d:
         7b:50:32:f2:2a:7c:d1:91:9d:a9:c6:eb:47:3c:cc:aa:06:44:
         04:aa:6b:a1:ab:1d:3b:e5:36:a8:5a:1a:11:9b:ec:b9:59:b3:
         2a:f5:ac:b5:e1:15:d9:12:68:8a:53:92:d2:3d:5b:86:dc:7f:
         c7:c9:1d:bf:e1:9d:27:61:6c:3e:ae:06:6b:4c:a2:43:e2:31:
         a1:ce:ef:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----