Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37322e302f32342d3234203d3e203630373231.roa
File:                     33312e3138372e37322e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          mcsALjXE8zdZs5JkGP/V0hFOnNS3PnDqCPnbceWW5ek=
Subject key identifier:   41:47:E8:07:9A:3D:4B:8D:64:63:66:89:3A:31:93:A6:C6:0C:B9:3B
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       7487A1F437F6F09842F516E640A723D874A448B2
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37322e302f32342d3234203d3e203630373231.roa
Signing time:             Tue 09 Feb 2021 11:21:32 +0000
ROA not before:           Tue 09 Feb 2021 11:16:32 +0000
ROA not after:            Tue 08 Feb 2022 11:21:32 +0000
asID:                     60721
IP address blocks:        31.187.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:87:a1:f4:37:f6:f0:98:42:f5:16:e6:40:a7:23:d8:74:a4:48:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Feb  9 11:16:32 2021 GMT
            Not After : Feb  8 11:21:32 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:fd:a7:71:91:f9:2a:8a:f1:c3:4a:b4:46:64:
                    70:3e:4b:37:48:a9:e8:5c:ee:84:51:5e:4d:fb:77:
                    5d:ca:19:c7:75:e3:dc:d1:9f:6a:e1:c0:24:47:f3:
                    a2:1a:c4:f5:18:37:71:51:14:7c:a8:e4:01:f0:0b:
                    0d:9f:5a:45:19:e0:de:80:54:5c:2d:7d:7d:4b:85:
                    f2:8a:96:89:16:42:3d:4d:89:0c:18:c8:f2:4a:f6:
                    b5:96:85:8e:d5:85:38:ab:fb:d2:6c:9c:fa:9d:ad:
                    eb:61:a1:bc:08:4f:b7:db:2a:19:fa:e5:92:39:a3:
                    b7:a2:3c:bd:33:1d:a0:43:04:3c:b4:8f:7a:c0:f4:
                    43:f9:31:a4:d8:53:d1:e9:14:98:42:b8:22:1d:82:
                    35:7d:04:65:5e:02:e4:b4:32:65:35:af:7f:68:fa:
                    70:7d:6d:5f:30:bf:03:1b:6d:93:58:a6:12:27:f0:
                    61:4b:16:cd:e7:20:4f:24:45:94:d0:72:dd:6e:fb:
                    cf:a2:3a:17:68:5c:2b:37:08:71:54:ee:a3:de:fd:
                    18:a6:dc:a6:d5:cc:dc:df:c4:6f:3c:37:53:3e:d0:
                    da:7c:09:0e:d6:b9:0e:a6:2a:ea:b7:04:91:c0:17:
                    cf:a6:8e:49:bf:d1:e5:4e:19:2a:f9:c0:40:4c:97:
                    1a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:47:E8:07:9A:3D:4B:8D:64:63:66:89:3A:31:93:A6:C6:0C:B9:3B
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37322e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.187.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:b8:81:31:6b:42:51:2f:52:0f:21:cc:01:e2:14:06:8f:50:
         86:33:7b:71:2e:91:a9:74:52:04:e9:1d:ec:6c:a3:27:68:2f:
         39:00:a0:50:ad:af:8f:48:93:61:d6:d2:b5:d4:16:fa:8b:e3:
         77:e5:60:be:6b:3e:36:25:ab:9f:e9:8e:16:51:98:6a:36:7b:
         20:36:3b:84:fd:16:ff:c6:ee:ac:14:a2:4f:4c:ac:ac:75:8b:
         c0:6c:b5:81:03:6e:34:b6:6b:66:40:0f:af:ff:c4:d8:62:af:
         23:f4:49:eb:7d:38:83:24:0e:ff:e9:fd:e3:82:85:e9:44:0f:
         de:07:f1:c1:30:ba:0c:42:7a:73:4e:6c:2e:a6:b9:8d:18:aa:
         07:f7:f2:73:f0:1d:af:4b:17:fd:8c:ea:a1:ed:e9:0e:4b:4b:
         96:5a:9d:b1:5a:7a:d3:21:27:50:19:0b:02:3b:07:ff:a3:f5:
         48:3f:95:2e:98:b9:96:a0:a3:8a:b9:02:a8:93:cb:6c:4d:3f:
         f5:a1:4c:89:ea:b4:65:12:40:58:b8:f9:de:75:2d:b9:e7:d8:
         0e:4d:bf:d5:b8:9b:eb:4d:1e:d3:a9:ab:6a:27:33:35:a1:bc:
         96:64:9f:86:c8:bc:b3:69:d0:4e:03:91:27:8e:38:bf:5d:3e:
         50:d7:fe:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----