Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37342e302f32342d3234203d3e203631333137.roa
File:                     33312e3138372e37342e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          P/PvNxVaB76yZiK1omnB39mUBNad0jp4wP3/IE746Os=
Subject key identifier:   C1:7B:AF:D5:25:06:D4:88:1A:69:1D:95:0C:6F:72:29:07:C0:50:F4
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       75DF7D435A0447D135E584A80FA4DD981E43930E
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37342e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 27 Nov 2020 15:10:32 +0000
ROA not before:           Fri 27 Nov 2020 15:05:32 +0000
ROA not after:            Fri 26 Nov 2021 15:10:32 +0000
asID:                     61317
IP address blocks:        31.187.74.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:df:7d:43:5a:04:47:d1:35:e5:84:a8:0f:a4:dd:98:1e:43:93:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 27 15:05:32 2020 GMT
            Not After : Nov 26 15:10:32 2021 GMT
        Subject: CN=3082010A0282010100B779E7C6E539854AF4470F50AAA6548A6393234C00D9404899B55085A3355C4554ED61731760364ACFFF9BA01C8ED0BB4887481FBEF72BC8CF922470CF3D59CC945781396BD25F246B0658E03D6B1ADFF34EF66F88154E853C6A0397902C437826C39CEB4A14EA7865B8751FB8616EC670384C9A8FF19D9523401432968DBB4B6EBF49BAB62C9EA2BC62BFFBE5061A5532CF93624D5A2F0BC520952A06155792A1BE1860F50A517E3D72DA35A08195936D745E6EFA1ABC8A1B8BDABEADE0E63EBDFAF0D0037AC3E83FA857FCF0B48AC0AC44BD5091E2F3C95B2197BCB2A261FCAFAFA70881EA913F98707AE0DC2CEFAE0C327700E5C5E0A01F70BE14D2D179210203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:79:e7:c6:e5:39:85:4a:f4:47:0f:50:aa:a6:
                    54:8a:63:93:23:4c:00:d9:40:48:99:b5:50:85:a3:
                    35:5c:45:54:ed:61:73:17:60:36:4a:cf:ff:9b:a0:
                    1c:8e:d0:bb:48:87:48:1f:be:f7:2b:c8:cf:92:24:
                    70:cf:3d:59:cc:94:57:81:39:6b:d2:5f:24:6b:06:
                    58:e0:3d:6b:1a:df:f3:4e:f6:6f:88:15:4e:85:3c:
                    6a:03:97:90:2c:43:78:26:c3:9c:eb:4a:14:ea:78:
                    65:b8:75:1f:b8:61:6e:c6:70:38:4c:9a:8f:f1:9d:
                    95:23:40:14:32:96:8d:bb:4b:6e:bf:49:ba:b6:2c:
                    9e:a2:bc:62:bf:fb:e5:06:1a:55:32:cf:93:62:4d:
                    5a:2f:0b:c5:20:95:2a:06:15:57:92:a1:be:18:60:
                    f5:0a:51:7e:3d:72:da:35:a0:81:95:93:6d:74:5e:
                    6e:fa:1a:bc:8a:1b:8b:da:be:ad:e0:e6:3e:bd:fa:
                    f0:d0:03:7a:c3:e8:3f:a8:57:fc:f0:b4:8a:c0:ac:
                    44:bd:50:91:e2:f3:c9:5b:21:97:bc:b2:a2:61:fc:
                    af:af:a7:08:81:ea:91:3f:98:70:7a:e0:dc:2c:ef:
                    ae:0c:32:77:00:e5:c5:e0:a0:1f:70:be:14:d2:d1:
                    79:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:7B:AF:D5:25:06:D4:88:1A:69:1D:95:0C:6F:72:29:07:C0:50:F4
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37342e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.187.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:73:8c:cb:d7:14:64:09:d5:d9:34:8f:39:7e:fd:20:e9:4b:
         27:07:c2:27:08:99:14:5a:b8:b8:26:de:aa:3d:3e:a6:71:e1:
         95:44:fd:db:c1:7a:bd:18:de:af:08:5c:79:31:4c:40:82:e3:
         cc:de:52:70:b2:30:1a:9a:62:2b:0c:62:6d:eb:5c:a2:d2:ca:
         d6:01:2c:ee:7c:83:65:33:d9:1c:51:75:b3:9a:89:3f:8d:a3:
         c5:e6:14:cb:a1:f4:19:8e:d5:07:12:e9:ed:24:b6:5e:88:84:
         8f:68:bd:7a:3c:2c:5a:2b:e7:a4:47:07:20:8b:6c:b6:93:f6:
         44:90:21:95:82:5f:5b:04:ee:7d:ac:53:24:d8:b1:82:24:e2:
         bc:59:43:f5:31:20:be:5b:51:09:d6:ae:dd:68:6b:95:1c:3b:
         dc:e6:97:e0:4a:6a:1f:c4:11:f5:f0:d5:56:d0:80:93:c7:7e:
         f3:2d:46:84:fb:fd:18:b4:86:5d:7b:34:2c:52:15:dc:19:67:
         06:73:6d:6b:da:59:bf:d4:8e:03:df:27:7e:f4:1d:37:bf:d3:
         f0:44:09:1d:0a:d5:e0:11:73:8d:ee:e2:c4:84:9f:e7:7a:46:
         fd:97:bf:f7:fe:b6:98:8c:3b:9a:a5:e8:8e:c1:16:75:82:ff:
         71:03:ee:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----