Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37332e302f32342d3234203d3e20323132373836.roa
File:                     33312e3138372e37332e302f32342d3234203d3e20323132373836.roa (raw, json)
Hash identifier:          HvtbIYB6h4H3phblgD0NgV18nHG9BybdJD0glxrNfSM=
Subject key identifier:   8E:48:EA:C2:87:9D:BF:E7:5F:7A:EE:D9:F9:71:4E:33:24:8C:E4:6C
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       6B59CC9FBC6E168F544C7A13B32716FF1E763CD3
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37332e302f32342d3234203d3e20323132373836.roa
Signing time:             Fri 29 Oct 2021 16:00:12 +0000
ROA not before:           Fri 29 Oct 2021 15:55:12 +0000
ROA not after:            Fri 28 Oct 2022 16:00:12 +0000
asID:                     212786
IP address blocks:        31.187.73.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:59:cc:9f:bc:6e:16:8f:54:4c:7a:13:b3:27:16:ff:1e:76:3c:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 29 15:55:12 2021 GMT
            Not After : Oct 28 16:00:12 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a8:74:63:ef:1d:69:ad:bc:81:f6:64:06:87:
                    19:09:59:14:40:4c:f3:98:6b:02:56:10:b4:6f:56:
                    c2:12:93:28:c3:f3:fc:33:ef:ce:39:02:3d:5a:73:
                    74:97:27:07:27:49:14:51:00:5c:33:89:6d:4e:49:
                    17:a3:40:c6:4d:df:be:68:a2:34:8d:4e:4a:c4:09:
                    3b:cf:19:de:a5:54:12:96:d5:4e:36:8c:ff:9e:c2:
                    92:23:2c:26:a1:e9:30:ad:ba:48:a0:ab:97:1b:9b:
                    83:09:9c:a2:40:0a:46:e6:eb:62:25:47:c3:c5:94:
                    13:0c:27:57:60:cc:23:4e:6d:3a:0d:4d:d2:b7:de:
                    f2:3a:83:7a:ee:27:5b:da:93:c6:85:f8:56:93:f2:
                    8d:b6:26:a1:6e:35:01:35:d3:c2:7a:23:e9:c8:75:
                    02:83:3a:ea:34:40:ad:28:f2:fd:34:33:b8:58:3d:
                    44:6a:c0:3a:13:9b:74:eb:eb:a4:63:5f:29:ab:2e:
                    d7:f1:ca:f5:0b:11:33:c8:cf:50:da:2d:21:61:4c:
                    d3:fe:e2:1d:b2:f2:0f:b7:cc:34:91:a7:61:77:5e:
                    82:23:c2:b4:57:08:14:a3:b6:36:24:09:e1:02:3a:
                    80:9e:e2:3c:9d:09:d6:48:33:ac:11:89:49:b5:49:
                    0e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:48:EA:C2:87:9D:BF:E7:5F:7A:EE:D9:F9:71:4E:33:24:8C:E4:6C
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37332e302f32342d3234203d3e20323132373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.187.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:b3:93:0e:3f:dd:e8:cd:9f:40:dc:95:cd:22:f4:79:17:b8:
         ab:8e:2b:05:e7:9c:76:ad:de:7c:5c:c3:1b:1e:79:e6:2a:a2:
         69:96:de:bc:ca:d4:a8:02:4b:42:2b:a7:c4:01:6e:54:97:61:
         df:ce:c1:3c:bc:ad:47:8c:f4:91:49:4c:9b:c1:43:b7:ab:21:
         af:25:cc:7c:a4:48:91:9d:67:57:a2:b3:ff:75:86:26:20:7e:
         3a:ac:b2:a5:98:3e:ed:91:25:6d:d4:88:b2:3d:6f:f0:53:61:
         72:e9:e6:da:ca:8e:af:64:23:73:c7:93:af:09:1a:69:54:dc:
         39:d5:b2:4d:bb:93:c4:62:b9:f9:1b:90:6d:16:ef:8d:98:05:
         f4:42:8b:d7:64:e4:2e:6c:ac:ea:68:19:a0:38:8e:5c:e5:ae:
         19:50:bb:64:90:90:dd:12:3f:06:44:95:76:10:4c:a4:3f:41:
         6d:0a:48:96:34:14:52:10:63:2f:8a:cc:cf:b0:46:c7:cc:a7:
         7d:e1:72:b9:9b:d4:3e:bc:5b:f0:c1:03:79:8e:1d:ba:f0:7d:
         0d:9e:32:7e:b1:60:a2:ec:db:34:37:92:ef:ae:93:b2:b7:25:
         7f:a2:8d:8d:fb:3e:5a:a6:3e:58:4b:64:31:79:78:45:59:df:
         64:11:0b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----