Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37362e302f32342d3234203d3e203530363733.roa
File:                     33312e3138372e37362e302f32342d3234203d3e203530363733.roa (raw, json)
Hash identifier:          8sd0iLv3k2iQ9We+vhr+XSKXEeu23rgU3UY45nreB4s=
Subject key identifier:   AB:E3:81:AF:DA:47:AF:AE:42:94:DA:6F:7D:7B:2D:D4:AC:8A:F3:76
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       0892C15D48618E498F614AE1159F665ABD4DEE2D
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37362e302f32342d3234203d3e203530363733.roa
Signing time:             Fri 27 Nov 2020 15:10:38 +0000
ROA not before:           Fri 27 Nov 2020 15:05:38 +0000
ROA not after:            Fri 26 Nov 2021 15:10:38 +0000
asID:                     50673
IP address blocks:        31.187.76.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:92:c1:5d:48:61:8e:49:8f:61:4a:e1:15:9f:66:5a:bd:4d:ee:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 27 15:05:38 2020 GMT
            Not After : Nov 26 15:10:38 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a6:ce:b6:10:67:f6:88:4d:a9:fd:61:e2:b1:
                    a6:ff:f4:97:36:91:59:d8:7a:18:fe:2f:bd:20:04:
                    6e:a7:e3:7a:40:6f:0c:d4:ff:2b:d9:66:20:d8:66:
                    13:cb:0c:e0:2d:37:ca:b8:c3:bd:b5:a7:b1:fc:d3:
                    cd:49:c4:f2:45:f6:db:ce:e7:5d:56:f5:ff:7c:03:
                    6b:80:dc:05:c9:54:d8:4f:9c:00:ca:7f:81:2e:12:
                    42:f5:06:dc:11:a0:bf:32:74:f4:b5:05:ee:55:70:
                    ad:e4:f3:04:87:67:e3:bc:23:4f:f9:fa:a0:8e:b1:
                    ca:6a:d2:8e:1c:30:38:0d:e5:d6:bb:49:a9:26:15:
                    ff:d9:cd:05:ce:0e:e5:d4:f5:8a:b4:58:3f:85:ab:
                    cb:93:44:16:ef:a2:6b:3c:85:f3:6e:01:54:72:b2:
                    5b:37:e4:a7:55:0e:7d:44:1f:c4:fb:f1:cb:a7:e6:
                    13:af:00:bc:8f:b0:7f:d0:19:18:a8:72:52:89:9a:
                    78:37:f2:e0:53:4f:79:52:f2:f5:50:21:60:af:86:
                    59:d8:c3:aa:4a:3e:27:a0:fe:1d:a4:6c:7c:f1:7e:
                    04:7d:36:d2:ab:8a:af:07:ca:b0:35:89:65:19:ed:
                    73:a1:cd:4b:12:5e:8a:13:dd:92:cd:b6:4b:f2:57:
                    5c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E3:81:AF:DA:47:AF:AE:42:94:DA:6F:7D:7B:2D:D4:AC:8A:F3:76
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3138372e37362e302f32342d3234203d3e203530363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.187.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:98:9e:17:70:90:6c:89:83:02:46:ac:8f:2b:74:00:92:8d:
         8e:2d:5d:cc:a7:3c:b5:4c:40:2b:4c:27:4b:b7:eb:76:4f:fa:
         2b:eb:33:43:2f:ce:90:fc:f1:a4:0a:05:4a:20:09:68:c1:52:
         f4:d2:06:22:87:67:df:4e:22:b5:ca:09:5e:48:b2:7d:f9:76:
         34:c1:ab:5d:6c:31:b8:b5:f7:e3:ec:52:f6:f9:c2:79:ae:84:
         c0:9e:31:ae:ce:fb:fa:01:40:36:28:54:f1:94:85:c9:7f:88:
         ae:38:68:77:0b:49:67:8c:8b:ce:2b:d8:2f:c2:b0:83:12:fa:
         ad:a3:96:f7:e1:bc:3b:ee:50:24:b2:8f:b0:d3:4c:b8:54:66:
         b0:39:f5:da:f6:07:2e:62:08:45:7c:80:97:e1:53:e3:c2:30:
         01:6b:47:b8:74:26:87:68:dd:6a:d1:c7:df:f6:0f:61:1a:91:
         84:2c:27:40:29:80:df:d2:9b:9b:13:b6:02:6c:cf:61:16:11:
         3e:c3:88:d9:2e:d7:13:71:8a:9b:3d:52:d7:03:25:f3:b7:e7:
         ce:6e:fa:12:99:13:49:f2:07:6c:2c:c5:cb:4f:0a:b1:39:be:
         81:ab:1c:2d:d1:b8:78:f8:6c:ac:cd:df:8b:f6:1c:c5:96:e1:
         61:95:ff:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----