Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139322e3136362e3234342e302f32342d3234203d3e203434363835.roa
File:                     3139322e3136362e3234342e302f32342d3234203d3e203434363835.roa (raw, json)
Hash identifier:          ek2S0mAHnCQQEnnaP7I8FMM3EDhLn02dmm+fl3ub1ts=
Subject key identifier:   10:FE:01:B2:C6:69:E6:9D:0B:59:17:ED:D0:A6:41:02:A9:29:C7:E5
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       33CE2AB1BAE2C4F6C57F2DD437D37EEF3B6BCA7B
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139322e3136362e3234342e302f32342d3234203d3e203434363835.roa
Signing time:             Fri 27 Nov 2020 15:10:19 +0000
ROA not before:           Fri 27 Nov 2020 15:05:19 +0000
ROA not after:            Fri 26 Nov 2021 15:10:19 +0000
asID:                     44685
IP address blocks:        192.166.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ce:2a:b1:ba:e2:c4:f6:c5:7f:2d:d4:37:d3:7e:ef:3b:6b:ca:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Nov 27 15:05:19 2020 GMT
            Not After : Nov 26 15:10:19 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:62:d7:b7:52:70:40:c8:f9:2c:4a:48:70:de:
                    b3:12:19:fa:a1:71:54:0c:82:0a:a2:73:91:7b:6e:
                    59:83:44:0c:65:50:6f:0e:02:0e:28:eb:8d:85:d4:
                    aa:a1:cc:60:ff:6e:04:fd:89:0b:97:0d:5d:94:d4:
                    7e:55:ef:b4:ec:f2:a5:55:61:f1:0e:f5:0c:91:d7:
                    3e:6a:e9:ac:f7:65:25:43:0e:f9:23:b4:06:f3:2c:
                    e1:31:4f:d4:87:c2:23:07:05:10:e3:83:95:d5:0f:
                    f5:6f:12:79:99:22:d8:b9:7a:53:6e:58:63:26:a1:
                    b6:07:6e:b0:82:57:6a:dd:2a:c9:b5:ee:e7:db:25:
                    89:a2:8b:61:b3:ab:6f:46:df:78:90:fd:81:6b:89:
                    ee:fc:54:59:de:c1:c1:21:79:8c:3e:57:08:13:14:
                    4d:85:c4:21:0d:5c:e8:8a:94:5d:a4:19:04:a9:68:
                    f0:9b:83:89:c4:43:62:74:7e:02:f4:c3:4c:f5:d4:
                    d8:30:2c:41:9c:72:ca:38:f7:d8:9b:b3:c8:13:b7:
                    4a:a0:0c:2f:80:39:24:8d:ab:f6:f2:fb:75:e0:6c:
                    9b:de:08:6d:fb:cc:33:3c:4e:84:4d:67:b5:0a:9c:
                    52:ba:8d:19:54:e6:06:a3:e0:97:b8:91:27:c7:13:
                    9a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:FE:01:B2:C6:69:E6:9D:0B:59:17:ED:D0:A6:41:02:A9:29:C7:E5
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139322e3136362e3234342e302f32342d3234203d3e203434363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.166.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:46:32:53:4a:2b:e1:31:1d:52:f1:0a:ac:8e:95:cc:43:8b:
         a0:0a:80:ab:9f:41:52:70:6d:dc:90:e3:f6:6f:73:e0:17:70:
         c9:7b:f8:87:a6:4e:d2:c7:5a:fa:52:d3:07:09:ce:35:37:c6:
         30:9d:5f:31:af:40:92:4d:ed:d9:5b:9c:ed:a7:4e:8c:1c:44:
         98:20:46:c7:eb:c8:85:c0:27:6e:63:86:bf:27:1f:4d:61:77:
         c8:2e:52:6b:72:df:14:ca:3a:1e:83:be:6e:33:00:bd:14:00:
         e4:59:15:6a:10:c0:c5:9f:c4:48:11:f6:55:e9:03:1a:b3:f9:
         05:a7:cf:d8:cd:d1:0b:8a:3a:f8:0b:1e:12:27:6d:95:68:c1:
         3a:5e:cb:dc:ab:c6:1c:f1:63:af:64:ed:a3:7f:28:36:9d:8e:
         90:72:91:7d:88:19:b9:ce:98:e4:5c:41:1b:ed:1e:a0:8c:c6:
         6b:3f:2e:7e:79:69:f6:3b:fb:c8:ce:e1:94:9e:22:45:ca:bd:
         05:60:99:b3:36:6a:2d:94:7c:50:09:0d:bd:ee:21:77:9e:35:
         b7:a5:40:a4:a1:7e:9c:c6:9d:40:ca:cd:11:fc:77:c4:10:a3:
         ca:94:65:59:d0:f7:aa:85:29:24:a5:3e:91:0a:43:0f:ec:8a:
         ec:9a:20:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----