Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/39342e3134302e31302e302f32332d3234203d3e203631333137.roa
File:                     39342e3134302e31302e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          Oe22GPD7DqsxcalAzsGsfmxl/+ozBc2S0vni4YXE898=
Subject key identifier:   8F:09:CE:D5:CB:A5:DD:C5:F0:34:2B:FB:35:C4:61:FE:50:E4:1C:6B
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       4B0CE034584490ADD7358CC7FDE83766037D5001
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/39342e3134302e31302e302f32332d3234203d3e203631333137.roa
Signing time:             Fri 27 Nov 2020 15:10:34 +0000
ROA not before:           Fri 27 Nov 2020 15:05:34 +0000
ROA not after:            Fri 26 Nov 2021 15:10:34 +0000
asID:                     61317
IP address blocks:        94.140.10.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:0c:e0:34:58:44:90:ad:d7:35:8c:c7:fd:e8:37:66:03:7d:50:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 27 15:05:34 2020 GMT
            Not After : Nov 26 15:10:34 2021 GMT
        Subject: CN=3082010A0282010100A802488FC12826CB4ACFDCB962DDBC056FCAB49C5692858B288F579D10B14AAA492D56B65FED7194FDA8DF1E940060EA8472A19C4B50EBF331B6BB62D6B02B769367ECC657C97AAE45B436DF2FEF1A2560F1CD882A4AD19BAE5450B5E008FAA7DB0F4F250E8BAB9D56921BA9572E717F1CD907E573C35E873891897DFA6305F9D48FAA0AD239C06573215B80488D2772BE6CE713347A04A46FA5E944A6996E920279B9DFBB07C379E74F1035E6E52909BED96594EC4B1717C9AD9122AC9DC15A73F00EDC0B7AE09A3F6F1AD748C8B496CC9345E740701B14228D4B104287A8C89BD485A9089EE2C2462F61541D601D96FFE2CD828818AF27BAE7B41963B182990203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:02:48:8f:c1:28:26:cb:4a:cf:dc:b9:62:dd:
                    bc:05:6f:ca:b4:9c:56:92:85:8b:28:8f:57:9d:10:
                    b1:4a:aa:49:2d:56:b6:5f:ed:71:94:fd:a8:df:1e:
                    94:00:60:ea:84:72:a1:9c:4b:50:eb:f3:31:b6:bb:
                    62:d6:b0:2b:76:93:67:ec:c6:57:c9:7a:ae:45:b4:
                    36:df:2f:ef:1a:25:60:f1:cd:88:2a:4a:d1:9b:ae:
                    54:50:b5:e0:08:fa:a7:db:0f:4f:25:0e:8b:ab:9d:
                    56:92:1b:a9:57:2e:71:7f:1c:d9:07:e5:73:c3:5e:
                    87:38:91:89:7d:fa:63:05:f9:d4:8f:aa:0a:d2:39:
                    c0:65:73:21:5b:80:48:8d:27:72:be:6c:e7:13:34:
                    7a:04:a4:6f:a5:e9:44:a6:99:6e:92:02:79:b9:df:
                    bb:07:c3:79:e7:4f:10:35:e6:e5:29:09:be:d9:65:
                    94:ec:4b:17:17:c9:ad:91:22:ac:9d:c1:5a:73:f0:
                    0e:dc:0b:7a:e0:9a:3f:6f:1a:d7:48:c8:b4:96:cc:
                    93:45:e7:40:70:1b:14:22:8d:4b:10:42:87:a8:c8:
                    9b:d4:85:a9:08:9e:e2:c2:46:2f:61:54:1d:60:1d:
                    96:ff:e2:cd:82:88:18:af:27:ba:e7:b4:19:63:b1:
                    82:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:09:CE:D5:CB:A5:DD:C5:F0:34:2B:FB:35:C4:61:FE:50:E4:1C:6B
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/39342e3134302e31302e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.140.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:2c:b3:60:ea:ed:dc:35:2c:e8:0f:82:8b:a7:eb:5d:86:02:
         4f:52:6b:df:3e:e1:c3:93:b5:df:ea:de:f0:65:d9:57:32:21:
         8a:30:d6:e4:94:0d:e3:1f:95:f3:88:3a:d7:e9:93:68:9e:06:
         90:07:5c:ad:65:5f:59:d6:8c:8d:e3:fa:3f:1e:cb:e0:c1:fd:
         1c:bb:a2:2f:17:b5:2b:b8:7c:41:f4:73:98:07:e5:fa:93:47:
         7b:a2:ac:71:85:4b:e9:d8:18:ca:c5:19:a8:72:5b:bf:de:b8:
         8f:70:eb:e3:aa:dd:ab:4e:d7:8d:8c:be:2a:69:fa:97:ef:95:
         68:c6:e6:e2:25:62:90:2a:ac:85:7c:63:e1:69:8b:8d:6b:e7:
         7f:52:27:26:64:44:3d:cd:4b:a0:df:ca:19:30:35:06:8a:7f:
         2b:b1:2c:89:60:74:f4:1c:3e:4d:c6:58:20:f1:ff:a7:b9:da:
         84:3b:be:cf:f5:90:65:d7:62:d8:78:4a:77:65:b0:5f:cf:a9:
         b8:2c:ff:cf:90:e5:c7:85:93:ad:8c:35:96:b0:f8:08:4a:4a:
         66:0f:1a:bd:3c:10:a4:f6:76:27:e9:db:4b:cd:c4:2b:fc:6d:
         19:bf:e8:1c:89:56:5d:9f:1c:67:8f:1e:2d:7e:1c:3d:8e:58:
         32:f6:0b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----