Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/117/322e35392e3135372e302f32342d3234203d3e203631333137.roa
File:                     322e35392e3135372e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          VUXXYCU6zjirOtfTkVWig849kdNwQHx/oh30cHwZcOg=
Subject key identifier:   69:99:8E:81:93:21:FC:BD:8F:B7:CF:20:E6:12:26:CC:79:03:9A:B6
Certificate issuer:       /CN=7878c3df04dbfd4674ba6706c36e9b455e708bde
Certificate serial:       69B17C8DDB3554C747866CFB4B4C1370376B934B
Authority key identifier: 78:78:C3:DF:04:DB:FD:46:74:BA:67:06:C3:6E:9B:45:5E:70:8B:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eHjD3wTb_UZ0umcGw26bRV5wi94.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/117/322e35392e3135372e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 01 Dec 2020 23:29:53 +0000
ROA not before:           Tue 01 Dec 2020 23:24:53 +0000
ROA not after:            Tue 30 Nov 2021 23:29:53 +0000
asID:                     61317
IP address blocks:        2.59.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:b1:7c:8d:db:35:54:c7:47:86:6c:fb:4b:4c:13:70:37:6b:93:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7878c3df04dbfd4674ba6706c36e9b455e708bde
        Validity
            Not Before: Dec  1 23:24:53 2020 GMT
            Not After : Nov 30 23:29:53 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0b:a3:12:6e:e5:3f:c0:8c:ef:9b:9b:8b:af:
                    14:02:af:31:a7:76:5d:93:23:7c:9d:d5:34:5d:16:
                    b0:36:11:a2:aa:8b:d1:89:bb:9d:7e:4d:2b:c7:56:
                    ad:01:55:4d:37:6a:96:ae:6a:27:6a:6c:a3:4c:cb:
                    48:d1:75:2b:6c:c8:66:4b:26:10:ae:1b:41:c0:e8:
                    3f:01:14:e7:19:fe:0e:d0:e3:51:46:05:25:fb:74:
                    54:aa:22:fe:a5:61:b9:6e:76:94:23:ba:1a:ff:27:
                    b2:05:25:0a:86:45:2c:e7:75:62:df:bb:c2:45:7c:
                    a3:b6:27:4c:ca:2f:4a:c6:82:26:a2:48:50:cd:51:
                    2a:2f:10:d5:17:bc:05:53:56:26:59:f2:06:9e:0c:
                    83:c3:e0:36:8c:b9:0f:14:56:36:12:cf:f6:4a:dc:
                    01:dd:ab:32:5a:c1:f2:55:61:c0:11:2f:92:39:32:
                    a9:51:ef:ce:31:57:73:85:dc:ce:9c:4a:21:6d:e0:
                    3f:ae:50:99:55:1f:29:35:1b:ff:f2:95:e2:fb:72:
                    56:6e:b7:44:fc:48:15:04:c5:bb:57:59:0c:28:1d:
                    50:81:fa:4f:95:d0:15:c6:56:d9:95:62:9a:f4:fc:
                    81:d5:9f:a5:77:2c:f5:34:a6:78:d1:ba:29:ab:31:
                    d3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:99:8E:81:93:21:FC:BD:8F:B7:CF:20:E6:12:26:CC:79:03:9A:B6
            X509v3 Authority Key Identifier:
                keyid:78:78:C3:DF:04:DB:FD:46:74:BA:67:06:C3:6E:9B:45:5E:70:8B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/117/7878C3DF04DBFD4674BA6706C36E9B455E708BDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHjD3wTb_UZ0umcGw26bRV5wi94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/117/322e35392e3135372e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.59.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:07:23:90:67:f5:7d:20:c6:a9:66:df:1c:c3:d1:ac:f4:b0:
         c2:f0:77:20:82:ed:c2:2d:d3:b4:ee:43:29:f0:8b:5e:eb:68:
         51:96:7d:13:96:7d:9f:cd:ff:3b:4d:3f:fc:bb:a4:2f:be:b2:
         2a:92:a1:e0:4a:75:b5:7a:4b:26:d6:74:97:27:d4:6d:a8:76:
         52:d5:b6:95:cc:00:84:49:9e:7d:88:50:67:8d:00:cd:9e:62:
         3b:e7:32:9c:e7:61:90:d2:38:ef:b4:51:56:1b:fa:e3:93:39:
         f6:4e:e8:4f:f4:c3:a1:36:e3:98:d7:c0:ca:8c:3b:99:44:a5:
         25:82:9a:49:71:7a:6d:48:fd:6f:24:9f:36:f6:18:ff:d7:9f:
         21:f8:ad:30:a1:0d:00:8d:64:0b:c0:10:ba:01:13:3b:e8:94:
         7d:5b:02:a9:48:6e:8a:fe:a6:b3:6c:dc:36:eb:b1:e0:f5:2d:
         94:bf:8d:d2:18:87:1d:21:b8:3d:99:a5:1d:87:84:1a:90:be:
         60:4a:5c:8f:c7:62:f0:c0:84:52:86:8a:09:34:06:be:1d:f7:
         11:96:06:70:04:e2:a1:21:98:6b:12:86:42:fb:cd:9c:8a:a7:
         41:5d:53:55:06:c8:a8:eb:fc:9a:1c:49:f0:35:c2:98:22:a6:
         0b:f1:18:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----