Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/178/3139332e34322e3133372e302f32342d3234203d3e203631333137.roa
File:                     3139332e34322e3133372e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          dOgec+PH8LDXwjgC3ZB8+D9gm5/CzUQNVFRx+B1uCM4=
Subject key identifier:   34:1B:D2:9E:5F:94:2E:1F:23:1A:86:52:90:D4:1B:10:72:39:CA:8A
Certificate issuer:       /CN=67a6e5206be3501ddd38d6f31c3368200c43a473
Certificate serial:       5EB6B0B31CFA3B5BBC1C385F1B36048E95B4C333
Authority key identifier: 67:A6:E5:20:6B:E3:50:1D:DD:38:D6:F3:1C:33:68:20:0C:43:A4:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z6blIGvjUB3dONbzHDNoIAxDpHM.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/178/3139332e34322e3133372e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 03 Dec 2020 15:57:09 +0000
ROA not before:           Thu 03 Dec 2020 15:52:09 +0000
ROA not after:            Thu 02 Dec 2021 15:57:09 +0000
asID:                     61317
IP address blocks:        193.42.137.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:b6:b0:b3:1c:fa:3b:5b:bc:1c:38:5f:1b:36:04:8e:95:b4:c3:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67a6e5206be3501ddd38d6f31c3368200c43a473
        Validity
            Not Before: Dec  3 15:52:09 2020 GMT
            Not After : Dec  2 15:57:09 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b8:f1:d5:fc:53:c2:54:75:78:45:2f:81:de:
                    ee:3b:62:2b:ef:ff:70:1a:77:52:ec:4c:44:68:7f:
                    e7:cf:48:d5:37:57:59:2d:81:4c:7f:23:2d:04:e6:
                    f3:49:71:6c:4b:ab:c7:ba:67:e9:41:09:a9:f3:f2:
                    2f:bd:2b:c5:57:0d:32:80:1c:6f:10:5b:e3:e6:1f:
                    33:46:ae:0a:30:e3:78:eb:ef:da:94:33:92:59:9a:
                    16:21:aa:6a:61:9d:1e:07:76:6f:f7:b4:d8:13:1c:
                    06:47:52:d5:57:0e:31:7a:d7:88:eb:33:83:ea:00:
                    ab:9f:1e:83:77:44:d7:77:25:46:b1:de:24:0f:03:
                    f3:1a:83:32:1f:95:a7:6b:0a:9d:73:b2:df:ad:00:
                    7f:a0:8c:37:40:8c:f4:62:f3:c9:b2:36:05:04:48:
                    74:b6:d8:10:3c:0b:98:cc:84:e5:9b:b3:89:6c:a9:
                    6d:65:e6:5e:b6:4a:28:dd:b3:25:1a:dc:3e:bc:ed:
                    4a:67:1b:e3:84:2a:47:a2:2f:94:3f:33:73:45:65:
                    72:07:da:47:d9:3b:10:a9:65:c3:47:73:7c:a0:ae:
                    0a:a8:96:98:6f:6e:7d:13:37:7a:b6:a0:62:20:87:
                    61:5f:e6:49:59:2f:9c:38:37:df:8c:52:e0:11:ab:
                    9a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:1B:D2:9E:5F:94:2E:1F:23:1A:86:52:90:D4:1B:10:72:39:CA:8A
            X509v3 Authority Key Identifier:
                keyid:67:A6:E5:20:6B:E3:50:1D:DD:38:D6:F3:1C:33:68:20:0C:43:A4:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/178/67A6E5206BE3501DDD38D6F31C3368200C43A473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6blIGvjUB3dONbzHDNoIAxDpHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/178/3139332e34322e3133372e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.42.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:c9:a0:e8:5f:8b:0a:e1:e6:40:52:52:66:5b:50:e4:d4:3c:
         43:20:ef:46:c2:e8:0f:f2:cc:36:a3:f9:ce:20:94:bf:89:f2:
         f8:f8:35:39:ac:ff:be:41:4d:65:61:1f:90:87:bd:3a:d7:15:
         fd:c4:1f:94:04:35:82:02:ee:1b:7c:05:dd:61:b2:01:80:80:
         56:4e:68:e1:a7:83:c7:fe:45:78:08:91:b8:3d:75:60:72:93:
         21:9e:d0:06:b3:ac:ed:33:0d:92:8d:78:6e:b8:d4:eb:c1:26:
         3b:d8:14:13:17:71:d8:ec:90:b2:2b:6f:55:9b:e4:43:9d:9e:
         5a:8b:46:5e:36:5b:02:e8:d5:cb:0a:03:22:96:9b:74:6b:0c:
         f0:58:5b:68:e8:dd:d1:a6:8f:50:da:1e:13:f5:6e:c9:6f:51:
         1a:e0:30:4c:2d:d2:46:cb:85:2e:5d:70:7d:72:8a:12:6c:58:
         64:75:af:0b:3e:0e:93:61:ba:f9:36:11:ac:5a:73:e8:3d:04:
         5a:f9:95:ff:39:30:05:25:5a:a0:b0:f3:8d:5f:42:4c:2e:9f:
         05:22:95:9c:4d:0e:b3:f2:49:4a:67:68:60:fe:4f:9f:28:45:
         25:57:e4:0e:5e:f5:c9:16:50:76:32:65:cc:57:34:de:8f:dd:
         95:93:6f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----