Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139322e3136362e3234372e302f32342d3234203d3e203235303938.roa
File:                     3139322e3136362e3234372e302f32342d3234203d3e203235303938.roa (raw, json)
Hash identifier:          shXcc+BCLcawrryFMBkUiDAcnZD9pQ1BtE512q7bNZY=
Subject key identifier:   F1:17:0B:8D:74:A5:8E:9B:C5:28:B9:8B:2F:01:B5:B7:41:63:F3:C4
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       30F95C27D8ADE8115E087EE2C65D3967850E839E
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139322e3136362e3234372e302f32342d3234203d3e203235303938.roa
Signing time:             Fri 27 Nov 2020 15:10:18 +0000
ROA not before:           Fri 27 Nov 2020 15:05:18 +0000
ROA not after:            Fri 26 Nov 2021 15:10:18 +0000
asID:                     25098
IP address blocks:        192.166.247.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:f9:5c:27:d8:ad:e8:11:5e:08:7e:e2:c6:5d:39:67:85:0e:83:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Nov 27 15:05:18 2020 GMT
            Not After : Nov 26 15:10:18 2021 GMT
        Subject: CN=3082010A0282010100B8CD8A68E35708D33D44389247DC77B981AF17CB5B4E40AC7678EF2A475DFFEFC0B48F57272E9DBFABE04F55A7738C3BDBFC77D500F0AA5277441486694BEF739C4DA329096A714EB72BD764D4F4B0DEFF2CA5D665DE205D2A81307FD6CA0A2EFCFFF323AF81D6B40E03BFBF459B8D2BC22168EDAC07FE60F83AB59B6C06565E89E541E654ED19630F0EDA660E3044AC0153AFDFB45233503A665FC708BEF1915B04CB8B28FF6DC5BA9FC16B544E917FEAB9C768DE7ECBE58C708BA08B8ECB7D4DD99B7AFBD3C645440354BE2C82F1969E3AE1D592EBCC5FAF6F989C9B62E0304ACFD921FBEEF82D6375F6C4F57B3144C37CCC13DCB5418C28CA03AD1BE1FDAD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cd:8a:68:e3:57:08:d3:3d:44:38:92:47:dc:
                    77:b9:81:af:17:cb:5b:4e:40:ac:76:78:ef:2a:47:
                    5d:ff:ef:c0:b4:8f:57:27:2e:9d:bf:ab:e0:4f:55:
                    a7:73:8c:3b:db:fc:77:d5:00:f0:aa:52:77:44:14:
                    86:69:4b:ef:73:9c:4d:a3:29:09:6a:71:4e:b7:2b:
                    d7:64:d4:f4:b0:de:ff:2c:a5:d6:65:de:20:5d:2a:
                    81:30:7f:d6:ca:0a:2e:fc:ff:f3:23:af:81:d6:b4:
                    0e:03:bf:bf:45:9b:8d:2b:c2:21:68:ed:ac:07:fe:
                    60:f8:3a:b5:9b:6c:06:56:5e:89:e5:41:e6:54:ed:
                    19:63:0f:0e:da:66:0e:30:44:ac:01:53:af:df:b4:
                    52:33:50:3a:66:5f:c7:08:be:f1:91:5b:04:cb:8b:
                    28:ff:6d:c5:ba:9f:c1:6b:54:4e:91:7f:ea:b9:c7:
                    68:de:7e:cb:e5:8c:70:8b:a0:8b:8e:cb:7d:4d:d9:
                    9b:7a:fb:d3:c6:45:44:03:54:be:2c:82:f1:96:9e:
                    3a:e1:d5:92:eb:cc:5f:af:6f:98:9c:9b:62:e0:30:
                    4a:cf:d9:21:fb:ee:f8:2d:63:75:f6:c4:f5:7b:31:
                    44:c3:7c:cc:13:dc:b5:41:8c:28:ca:03:ad:1b:e1:
                    fd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:17:0B:8D:74:A5:8E:9B:C5:28:B9:8B:2F:01:B5:B7:41:63:F3:C4
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139322e3136362e3234372e302f32342d3234203d3e203235303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.166.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:b7:7f:7c:8b:eb:97:c4:cb:b4:49:ea:6d:40:a3:61:4f:38:
         2e:fd:d8:04:be:8e:a7:19:15:b4:c2:28:b0:33:b2:49:6b:d1:
         9d:29:f3:02:fd:6d:38:93:20:93:ae:0b:c5:d4:82:9e:0b:21:
         40:35:d7:b8:e9:d1:2d:59:ee:36:df:bd:aa:13:e0:4d:67:a3:
         77:8b:d8:12:c0:b3:c9:42:65:77:ca:f4:3d:b0:00:49:72:4e:
         aa:81:3e:9a:f0:87:58:65:98:c4:06:85:9a:e9:23:a9:61:0c:
         32:ee:a5:bc:db:27:26:f1:52:d0:b7:4e:7e:41:72:1a:30:c4:
         91:5e:53:6c:c0:81:f5:ab:e9:24:c6:14:7d:28:ef:92:f9:5e:
         c4:c2:1d:aa:59:ad:b7:c4:d6:1b:99:9f:e4:87:74:cf:5a:b4:
         b3:d9:95:1d:72:7d:0e:40:34:e2:66:eb:8c:76:eb:e0:6c:4e:
         b7:04:97:dd:b2:af:73:ee:23:49:47:d5:3d:73:47:b3:ce:1f:
         f4:0c:63:9a:17:24:e4:97:10:1a:24:4d:35:da:48:23:31:b1:
         62:7f:48:ee:2e:16:f3:f6:9b:f7:12:37:c7:44:c0:0d:58:31:
         0c:fb:51:fd:dc:9c:a6:13:25:59:b3:ef:e7:4d:fd:8d:51:53:
         db:ff:ba:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----