Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/38/3139342e3234322e35362e302f32332d3233203d3e20323132373836.roa
File:                     3139342e3234322e35362e302f32332d3233203d3e20323132373836.roa (raw, json)
Hash identifier:          ZsjX1vngQhHRLgXGDxobQINz1UsfqKWW8kBNWN1+w+Q=
Subject key identifier:   04:E2:F7:59:1B:81:5D:E8:69:50:44:B9:21:6C:F6:7B:A6:69:D2:44
Certificate issuer:       /CN=e9fc48331f2e461a51bcf68c86c0f1c52df5b50f
Certificate serial:       682A267B5011CEF09C9445E316F598D53D78E1C1
Authority key identifier: E9:FC:48:33:1F:2E:46:1A:51:BC:F6:8C:86:C0:F1:C5:2D:F5:B5:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6fxIMx8uRhpRvPaMhsDxxS31tQ8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/38/3139342e3234322e35362e302f32332d3233203d3e20323132373836.roa
Signing time:             Fri 22 Jan 2021 14:29:38 +0000
ROA not before:           Fri 22 Jan 2021 14:24:38 +0000
ROA not after:            Fri 21 Jan 2022 14:29:38 +0000
asID:                     212786
IP address blocks:        194.242.56.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:2a:26:7b:50:11:ce:f0:9c:94:45:e3:16:f5:98:d5:3d:78:e1:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9fc48331f2e461a51bcf68c86c0f1c52df5b50f
        Validity
            Not Before: Jan 22 14:24:38 2021 GMT
            Not After : Jan 21 14:29:38 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9d:b5:50:40:43:cd:e0:e6:c3:18:c9:2a:03:
                    c1:58:d0:77:6e:c4:2f:d2:96:3d:d7:29:a0:c6:b8:
                    ba:32:44:70:c8:16:f8:29:d3:5a:1a:8c:3e:ca:0c:
                    48:30:9d:e3:a8:63:01:1b:e6:11:cc:1c:d2:8f:6f:
                    c0:b1:85:c3:a7:0b:96:ae:e3:03:3d:64:f8:0d:d2:
                    a0:39:89:a5:38:c3:01:74:cd:89:bc:31:f9:ec:cb:
                    d4:18:bd:c2:e7:1d:e0:61:69:cd:58:ac:e0:ae:b8:
                    57:cd:7f:c1:1f:69:7a:f5:10:43:72:aa:2e:00:e8:
                    b6:a6:52:06:36:6a:be:14:e4:21:f5:6d:b9:34:cb:
                    0e:d6:1a:0b:c9:db:5d:11:e0:1f:ae:d5:28:71:c4:
                    66:04:6b:9a:f8:3d:3d:14:e7:68:5e:d0:9b:41:15:
                    6f:14:7c:2b:1d:24:4d:18:c4:a2:64:d9:ea:db:02:
                    77:14:78:81:e8:e8:a6:c7:6f:56:43:1d:54:91:b5:
                    d7:4f:a2:49:cf:62:a0:78:34:4c:3c:f7:f1:da:6b:
                    64:e4:c8:96:ec:88:25:f9:30:3e:a4:03:4f:d8:29:
                    7d:8b:f0:3c:31:57:d0:7e:0b:5f:1b:b0:78:c6:51:
                    97:0b:68:4f:f8:8d:a9:d6:a8:8f:05:32:4f:c7:2e:
                    b4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E2:F7:59:1B:81:5D:E8:69:50:44:B9:21:6C:F6:7B:A6:69:D2:44
            X509v3 Authority Key Identifier:
                keyid:E9:FC:48:33:1F:2E:46:1A:51:BC:F6:8C:86:C0:F1:C5:2D:F5:B5:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/38/E9FC48331F2E461A51BCF68C86C0F1C52DF5B50F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6fxIMx8uRhpRvPaMhsDxxS31tQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/38/3139342e3234322e35362e302f32332d3233203d3e20323132373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.242.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c9:7a:49:75:b6:38:6e:a3:76:e4:58:88:7c:c9:5b:97:83:ab:
         6c:45:42:fc:96:61:8c:0f:0d:7e:1e:31:f6:de:0a:b7:aa:1d:
         30:0d:82:7a:9e:d6:5d:27:a3:2e:64:73:ae:e7:b9:19:0b:7e:
         b7:6c:65:4c:af:80:e9:3a:65:68:3a:4f:0e:c0:30:15:e3:a7:
         77:09:39:33:aa:b7:d1:9e:a0:96:7e:24:4c:d1:c0:22:f6:35:
         df:2f:9a:17:95:22:f9:d8:4b:4d:ad:65:98:d2:c2:98:4b:08:
         ae:17:e8:29:36:31:de:f4:1f:dc:7d:46:1a:ef:47:a0:b4:cf:
         78:c7:77:6f:25:38:d4:78:05:4e:62:0a:75:23:74:6d:bd:19:
         92:b3:fc:25:c2:64:71:ad:3d:e4:82:b1:7f:22:53:10:a3:17:
         6b:12:5f:1e:b7:c8:de:68:05:c6:f0:46:e6:86:99:c3:4c:82:
         80:d2:0e:72:a1:f5:68:b1:eb:bd:b1:5d:37:d1:58:da:de:c1:
         67:0d:82:e4:da:8c:1c:ad:3b:7c:f4:bb:df:ed:06:a3:e9:57:
         e6:e9:76:23:03:78:18:6c:63:81:0d:fb:b2:14:97:11:2c:14:
         42:2f:f4:6e:2a:1b:d9:64:17:a0:ab:89:0e:a1:4d:8b:44:44:
         71:5a:96:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----