Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/39342e3134302e382e302f32332d3234203d3e203631333137.roa
File:                     39342e3134302e382e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          aiqmuVM/38Jxxu0+MNy8y5FP/WW0L2FLSCggkx5mECY=
Subject key identifier:   44:1F:94:D8:96:60:2B:9E:12:E4:B7:29:12:16:F2:A2:34:67:39:69
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       49E7DED9448C22FF9DB8BD123AFF36E50585B022
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/39342e3134302e382e302f32332d3234203d3e203631333137.roa
Signing time:             Fri 27 Nov 2020 15:10:29 +0000
ROA not before:           Fri 27 Nov 2020 15:05:29 +0000
ROA not after:            Fri 26 Nov 2021 15:10:29 +0000
asID:                     61317
IP address blocks:        94.140.8.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e7:de:d9:44:8c:22:ff:9d:b8:bd:12:3a:ff:36:e5:05:85:b0:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 27 15:05:29 2020 GMT
            Not After : Nov 26 15:10:29 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f2:93:bf:df:1b:41:e7:5a:7f:21:55:e0:b1:
                    89:2f:aa:81:e3:79:b0:ec:24:b7:35:24:e4:99:77:
                    3e:c5:37:44:22:9a:f2:2f:9b:29:6e:40:e7:0f:a0:
                    6f:e6:33:ac:dc:9c:7c:6d:3b:b6:f3:c9:32:67:cd:
                    d2:d7:9c:61:d2:4a:4f:bf:55:b0:c4:08:c8:47:9e:
                    a3:a7:69:5a:68:9a:11:44:9c:f5:46:ac:58:f0:35:
                    70:2e:6b:83:d9:04:23:cd:2e:06:99:58:c0:02:2a:
                    78:05:4b:76:3f:d7:f9:ce:79:9b:10:6f:0c:0d:f1:
                    72:3e:68:7b:8f:7e:ee:57:8b:c5:1d:e7:8c:24:4c:
                    47:31:d0:cc:c7:e8:12:95:98:41:fc:40:37:21:d8:
                    10:6c:51:8f:c2:67:33:6e:2f:90:51:7b:81:35:f5:
                    42:88:3b:45:bd:fe:4d:e4:05:53:84:5e:1e:9c:07:
                    29:bd:03:a8:9f:b2:51:64:49:d7:6b:bd:c7:96:1e:
                    f0:ed:8d:b9:5c:7c:ae:e9:8a:a8:8e:5c:14:33:e6:
                    8d:10:40:c7:84:73:a5:2b:92:41:dd:a8:88:61:f6:
                    4f:46:41:c8:d5:20:96:e3:6f:e5:8f:87:36:6f:64:
                    8a:13:d2:64:44:73:7c:55:4b:91:62:5e:e6:0c:b9:
                    25:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:1F:94:D8:96:60:2B:9E:12:E4:B7:29:12:16:F2:A2:34:67:39:69
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/39342e3134302e382e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.140.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:b5:a0:a4:8e:b1:e6:ba:92:96:50:97:dc:b7:08:46:86:ce:
         e6:ae:fb:ef:a5:25:2d:e9:66:15:22:b3:a6:63:90:8a:10:fd:
         0b:20:82:c3:d6:b3:2e:77:92:23:ce:d6:13:0d:a3:6b:0b:b8:
         d4:00:83:ff:bd:b3:e0:87:94:f1:3e:e8:8c:07:55:09:b9:c7:
         94:e3:a7:d8:d5:5f:8d:cc:2a:e4:cf:ef:c5:57:75:a8:ce:e7:
         9b:91:93:f3:56:ab:13:1a:88:c5:37:1e:48:61:b5:7a:44:ba:
         f0:79:ca:d9:15:f6:f7:33:3d:81:1d:68:25:00:b1:b1:17:d1:
         85:bb:c0:da:e8:10:01:4b:ba:0a:ff:55:30:c0:7a:9b:60:40:
         a3:18:eb:38:37:ef:72:f0:48:5f:f0:d0:05:83:eb:6b:57:e6:
         32:bb:28:bd:e1:06:86:77:6f:b7:f8:bd:e9:7f:5d:05:2d:25:
         5e:ee:05:d8:92:ce:60:b9:f3:32:2c:72:77:5a:38:cd:f5:55:
         72:ec:ba:d2:7f:fb:22:30:c8:15:99:42:bd:fd:b5:91:da:98:
         9f:e5:4a:05:0e:48:c6:e0:47:7b:6a:55:c9:b2:e5:59:28:50:
         04:b5:86:bb:e0:e6:bd:b0:a6:6f:ee:57:35:a1:d9:20:33:83:
         36:34:bd:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----