Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3134392e36322e33372e302f32342d3234203d3e203233343730.roa
File:                     3134392e36322e33372e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          7/wcfr7zYwkKe3Eg9JnGDKoX4u11QLnyAPNVKcurmE0=
Subject key identifier:   B6:16:EC:C4:82:5F:24:6E:53:B2:BF:8B:8F:BC:48:4B:39:C1:57:0E
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       6AD57BDDFDECE8FCCF3243CE01B02D9667386906
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3134392e36322e33372e302f32342d3234203d3e203233343730.roa
Signing time:             Wed 13 Jan 2021 08:19:04 +0000
ROA not before:           Wed 13 Jan 2021 08:14:04 +0000
ROA not after:            Wed 12 Jan 2022 08:19:04 +0000
asID:                     23470
IP address blocks:        149.62.37.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d5:7b:dd:fd:ec:e8:fc:cf:32:43:ce:01:b0:2d:96:67:38:69:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Jan 13 08:14:04 2021 GMT
            Not After : Jan 12 08:19:04 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a7:9d:8d:ea:a7:d2:4b:cf:b5:54:4d:8f:bc:
                    85:e1:e1:eb:23:f0:d8:d9:eb:50:3c:15:23:2f:9b:
                    38:2b:ef:4b:7b:0f:bd:83:56:e7:31:8d:73:e5:fa:
                    83:16:da:b9:bd:20:01:cb:c3:42:27:09:4f:2f:2b:
                    a7:da:0b:c7:19:98:32:01:34:f3:4e:3f:bd:f8:70:
                    60:8e:ff:40:79:f6:fa:cf:0a:62:ca:57:6b:59:c6:
                    9b:03:4e:c4:6f:2a:ff:e4:7f:37:9c:ce:18:14:fc:
                    b0:3d:af:97:6a:52:f3:83:12:63:77:1d:f3:6c:c2:
                    bb:b9:79:b0:6f:cc:5b:94:8b:2b:68:81:62:f0:22:
                    80:4e:7e:33:81:12:a9:99:51:67:bf:00:19:37:3a:
                    f5:7b:9a:86:d9:84:5f:c8:19:0f:2b:a2:52:f1:df:
                    7c:d6:0c:6b:17:ba:96:f8:bc:c0:70:56:24:fe:30:
                    1a:07:71:29:30:16:11:31:c9:6a:24:59:83:5f:29:
                    69:2f:50:8e:27:54:0d:ce:b3:21:a8:71:a9:bf:4e:
                    81:76:cc:a3:2d:1a:46:a7:49:ba:07:44:57:07:6a:
                    a8:3c:54:be:22:9f:bc:d0:6c:c7:2c:da:1e:fb:77:
                    74:9c:0c:33:b4:74:19:6f:70:28:dd:4d:db:13:8e:
                    ce:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:16:EC:C4:82:5F:24:6E:53:B2:BF:8B:8F:BC:48:4B:39:C1:57:0E
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3134392e36322e33372e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.62.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:c6:be:b3:c8:b7:76:df:ea:1a:80:10:be:a2:82:40:1c:71:
         a6:42:48:70:11:dd:3c:2f:04:2d:d4:41:4b:ac:58:17:98:56:
         4f:4d:d3:90:4e:62:1b:d2:58:65:ba:bc:13:fa:5b:05:de:d0:
         80:0c:c4:fc:50:92:12:86:cf:df:d7:39:8f:7c:25:a3:57:eb:
         28:c7:fe:93:9f:45:b2:11:8e:07:95:eb:62:6a:bb:1f:e2:84:
         9c:09:1b:9b:29:49:e4:55:59:69:8d:6b:19:79:cd:20:5e:fe:
         2a:8d:bc:fd:10:5b:c9:92:ca:7c:9b:8e:2c:8d:7f:8b:fd:48:
         72:ea:ed:cc:6e:17:7d:5b:c7:dd:fe:0c:a6:d6:06:3c:b8:a2:
         33:12:0f:e8:cf:72:47:89:ef:ae:7a:28:69:59:e2:2c:da:a3:
         64:a3:cb:ef:a7:49:6c:53:64:b0:70:6d:69:1e:91:51:9f:02:
         19:2f:36:e4:33:cc:e4:e1:56:4e:8d:a3:33:59:14:3d:c8:ae:
         9c:c9:70:30:12:cd:2d:ad:57:49:c2:19:c7:2e:3d:e1:c6:4e:
         9d:71:c1:13:92:82:ff:9c:26:87:93:2a:2d:8d:b9:d8:47:d3:
         de:25:90:f2:86:2b:bc:1b:03:fa:8f:4a:93:34:09:65:55:a7:
         83:cd:9f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----