Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e362e302f32342d3234203d3e203530363733.roa
File:                     33312e3232302e362e302f32342d3234203d3e203530363733.roa (raw, json)
Hash identifier:          2/b5eXXZ+XzsI8IP9r9vgz9G6GdrczpPZS/ShujiDl4=
Subject key identifier:   50:35:55:29:3D:BC:8B:4A:76:61:39:95:5B:DA:A3:67:70:30:B4:BE
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       0292C04727FC1F988ED478F5D9C5638E16B76F39
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e362e302f32342d3234203d3e203530363733.roa
Signing time:             Fri 27 Nov 2020 15:10:31 +0000
ROA not before:           Fri 27 Nov 2020 15:05:31 +0000
ROA not after:            Fri 26 Nov 2021 15:10:31 +0000
asID:                     50673
IP address blocks:        31.220.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:92:c0:47:27:fc:1f:98:8e:d4:78:f5:d9:c5:63:8e:16:b7:6f:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 27 15:05:31 2020 GMT
            Not After : Nov 26 15:10:31 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:94:bc:3d:64:6e:88:58:2a:a8:01:c5:2b:05:
                    c3:b8:95:b7:c0:29:28:9c:38:6f:b1:91:31:5c:a3:
                    4e:f1:ea:9d:a0:ef:d7:cf:3c:a3:3e:26:6e:ce:ba:
                    9a:0c:64:59:ad:73:77:e0:aa:76:e0:cf:f7:49:57:
                    b6:44:84:80:97:7f:df:bd:cc:4b:ec:7d:fb:d5:71:
                    f7:81:74:46:93:7c:49:0f:2f:cd:a2:7e:b8:9f:c4:
                    50:4c:73:02:cd:e6:f9:8e:10:4f:cd:bf:28:89:5a:
                    29:c0:c3:a6:95:96:bd:b1:7b:4f:37:66:61:0f:f5:
                    23:ea:ce:35:f6:24:29:ed:b6:7e:7a:8b:d9:39:b6:
                    4b:c9:39:83:bd:7f:91:cb:71:3c:62:0c:60:12:86:
                    fa:e5:0d:39:68:da:18:da:41:cd:4d:58:74:91:24:
                    89:5d:bf:03:4a:fc:04:e8:6a:c6:45:2c:f1:3d:8b:
                    98:b5:e6:49:73:51:1f:7d:50:c2:32:f7:8d:17:11:
                    84:8c:bb:ea:fb:99:59:55:8a:0b:40:1f:96:20:60:
                    ba:9a:1f:f7:9c:77:b6:0f:66:6b:4b:11:26:bc:23:
                    6b:5f:b0:be:40:ae:c8:d6:40:8d:ab:f4:a1:99:1d:
                    fd:59:84:95:9a:0f:64:a3:19:40:2d:cf:9d:3a:25:
                    5f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:35:55:29:3D:BC:8B:4A:76:61:39:95:5B:DA:A3:67:70:30:B4:BE
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e362e302f32342d3234203d3e203530363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.220.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:b9:9a:09:36:bc:2f:32:33:13:64:1a:c8:65:d7:d7:99:59:
         d8:be:17:1c:f1:07:35:85:a3:0d:52:b0:91:33:76:72:8d:bc:
         18:f4:88:8c:26:66:0d:31:d0:d9:42:a8:e4:58:58:56:cc:51:
         90:ff:a5:3b:15:86:da:ee:20:85:ca:fc:74:00:fb:65:62:90:
         ee:97:10:41:9f:97:2c:a7:8e:7e:2b:22:bf:8f:7b:da:8a:68:
         d3:fe:88:ff:be:4e:09:67:61:7f:11:35:7d:d8:ef:5a:0e:c9:
         a2:20:9e:c2:1e:12:e7:07:81:07:59:9f:a9:24:97:3f:f9:7c:
         24:11:df:fc:e0:a7:4b:42:c3:f0:f7:41:f6:9b:64:8a:7c:2c:
         f7:0d:70:ac:13:22:21:bb:07:ba:c2:1f:85:2c:ec:2d:b5:42:
         ac:c2:a3:1f:d2:43:a9:67:68:5a:1a:ef:cd:c8:e4:09:74:6e:
         0d:94:6f:a9:be:cd:51:58:61:96:fe:dc:6a:12:49:16:9b:f5:
         cf:9e:3c:9a:3a:4f:6e:96:04:9d:be:ec:d6:fa:0d:47:bd:29:
         a7:ce:eb:31:af:ee:72:87:7f:b1:7f:1f:69:14:04:65:06:f4:
         ca:95:f1:03:55:29:2e:f0:7f:44:7f:ae:2a:76:8f:46:64:23:
         9e:94:a5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----