Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/tt1-51/0/39322e3131392e38302e302f32322d3234203d3e203335393133.roa
File:                     39322e3131392e38302e302f32322d3234203d3e203335393133.roa (raw, json)
Hash identifier:          JSYwRde/JaFbzX2jPSFrATNZ6bWkqFTdaVs9rfMrcr4=
Subject key identifier:   13:EA:70:67:A3:F1:93:39:84:99:95:AB:5E:98:35:59:E4:58:07:01
Certificate issuer:       /CN=a86bb2d6000dca3fd27a42470aea8caa70c22688
Certificate serial:       4E1B6B1EA675A6D6C2F625CF11778A4BC9CD26BB
Authority key identifier: A8:6B:B2:D6:00:0D:CA:3F:D2:7A:42:47:0A:EA:8C:AA:70:C2:26:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qGuy1gANyj_SekJHCuqMqnDCJog.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/tt1-51/0/39322e3131392e38302e302f32322d3234203d3e203335393133.roa
Signing time:             Wed 25 Nov 2020 21:57:56 +0000
ROA not before:           Wed 25 Nov 2020 21:52:56 +0000
ROA not after:            Wed 24 Nov 2021 21:57:56 +0000
asID:                     35913
IP address blocks:        92.119.80.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:1b:6b:1e:a6:75:a6:d6:c2:f6:25:cf:11:77:8a:4b:c9:cd:26:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a86bb2d6000dca3fd27a42470aea8caa70c22688
        Validity
            Not Before: Nov 25 21:52:56 2020 GMT
            Not After : Nov 24 21:57:56 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:db:eb:bf:ff:d2:96:f9:82:bf:a4:c4:d7:22:
                    7a:8e:1f:20:b5:ef:ba:3d:ab:8a:4a:fc:4f:db:6c:
                    b0:4c:86:e6:b9:98:17:24:04:22:61:78:3d:73:23:
                    ca:d4:a5:db:8e:e5:00:35:05:a9:30:03:31:40:34:
                    ac:dd:65:37:e8:d5:1e:06:c9:16:38:4a:8b:c6:fa:
                    32:8b:2c:9b:46:de:51:4f:b9:85:89:ac:9f:d7:32:
                    76:41:7e:57:3a:84:b1:9c:5f:a9:35:ad:55:3b:a1:
                    94:a6:88:d3:c3:4f:ee:6d:1d:73:7e:8c:43:70:8f:
                    00:cd:55:c3:ef:99:f1:f4:43:6b:75:4f:d1:ad:10:
                    1b:3d:2b:46:5f:8e:0c:ac:6e:eb:13:3f:42:6b:03:
                    b9:89:e5:74:ad:c1:1a:29:03:c0:29:0c:55:5f:07:
                    47:0e:39:13:ef:7a:94:65:a9:56:73:52:20:50:96:
                    5a:7a:bc:d4:12:5a:59:71:08:51:d5:49:c8:3f:a7:
                    4a:34:74:70:ae:6c:fb:93:cc:32:08:5d:6e:f6:e0:
                    59:19:d7:65:be:2c:28:cd:c0:5c:a0:3d:26:5a:c9:
                    4b:ee:41:7a:ca:08:d1:a2:39:eb:ed:c4:d2:91:9b:
                    18:b8:12:51:46:32:71:d8:fc:9c:48:00:e7:25:ba:
                    d7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:EA:70:67:A3:F1:93:39:84:99:95:AB:5E:98:35:59:E4:58:07:01
            X509v3 Authority Key Identifier:
                keyid:A8:6B:B2:D6:00:0D:CA:3F:D2:7A:42:47:0A:EA:8C:AA:70:C2:26:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/tt1-51/0/A86BB2D6000DCA3FD27A42470AEA8CAA70C22688.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGuy1gANyj_SekJHCuqMqnDCJog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/tt1-51/0/39322e3131392e38302e302f32322d3234203d3e203335393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.119.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:5b:bb:9a:73:50:dd:55:8c:5c:ea:71:5f:69:8f:e7:a8:c7:
         6a:69:6b:80:43:4c:69:b1:71:17:0e:82:09:81:17:00:4c:15:
         07:82:55:41:5c:df:c3:72:0f:58:d1:71:0f:a4:12:10:05:4d:
         15:66:22:7a:16:a1:d2:57:bb:f9:44:eb:de:7c:48:6a:e2:0f:
         08:6d:86:9f:95:31:b9:94:fb:1c:e6:a2:79:ee:31:84:9e:23:
         2c:08:9f:c2:f7:05:c2:95:7b:ef:7a:fd:26:9d:33:be:c4:a0:
         98:49:1c:26:f4:04:ad:93:b7:5a:bc:ba:31:40:ac:61:49:b3:
         43:4e:2a:c2:39:2f:eb:be:d6:06:81:5e:b5:eb:02:6a:98:a8:
         5c:fe:48:4e:2c:12:9d:09:6c:9e:94:cc:76:5b:c6:7e:11:30:
         8b:a9:37:d1:a3:6c:dd:60:8a:be:c0:de:3e:bb:54:6f:77:b2:
         0a:ec:4e:80:17:f1:98:7e:e8:18:d0:cb:35:6b:c7:0d:28:8f:
         53:51:ec:47:68:44:84:3e:08:da:93:e6:bb:bb:f5:0a:1c:75:
         d5:ed:53:96:b8:8a:f0:b6:31:af:0d:fa:af:8f:4b:9d:48:3e:
         1c:07:80:b9:bb:e6:25:f5:a3:ca:d8:19:5a:4e:39:f6:d7:ba:
         0a:58:12:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----