Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3136302e3233382e33382e302f32342d3234203d3e203434363835.roa
File:                     3136302e3233382e33382e302f32342d3234203d3e203434363835.roa (raw, json)
Hash identifier:          B5l2uZNo90ZHchC3jCcTbuT8Xeg4JsTyKrPiIQGaXR4=
Subject key identifier:   A9:F5:75:39:69:3F:18:53:9A:56:6E:7B:C8:08:F1:88:8F:D0:17:50
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       680C378B8FDFE2E5549D0EACB51850A11EFFC95B
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3136302e3233382e33382e302f32342d3234203d3e203434363835.roa
Signing time:             Fri 27 Nov 2020 15:10:21 +0000
ROA not before:           Fri 27 Nov 2020 15:05:21 +0000
ROA not after:            Fri 26 Nov 2021 15:10:21 +0000
asID:                     44685
IP address blocks:        160.238.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:0c:37:8b:8f:df:e2:e5:54:9d:0e:ac:b5:18:50:a1:1e:ff:c9:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Nov 27 15:05:21 2020 GMT
            Not After : Nov 26 15:10:21 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8b:cd:3a:2d:ee:17:12:19:3c:c2:f6:e3:d2:
                    fd:36:38:ce:8b:37:27:75:8e:58:fb:68:40:0c:dd:
                    66:b2:51:72:16:59:56:18:3c:64:7e:5c:01:d6:f9:
                    69:56:8a:d0:a5:3a:45:eb:f7:18:10:c3:6d:8b:86:
                    41:6f:df:f5:15:6c:29:48:97:1d:e0:d4:1b:1b:0b:
                    0f:00:68:f8:4d:8c:88:22:4a:b8:b5:09:0c:08:00:
                    a4:a0:61:ff:78:10:2b:e1:c7:0d:05:bc:de:3c:d7:
                    57:3b:19:98:47:0e:08:56:69:7d:f5:d4:ad:48:b0:
                    67:ad:84:77:b1:8d:43:fc:2d:4f:2c:d1:f1:3e:b0:
                    82:89:ec:39:50:87:b0:02:17:ec:51:c9:71:6d:c6:
                    a0:72:0b:b0:3a:13:3d:9d:53:f2:89:73:60:db:9f:
                    c9:98:97:d6:ec:5e:da:0f:51:ca:a9:c0:b5:c0:a7:
                    cc:35:63:94:0b:32:6b:c9:38:4c:42:ef:5f:7c:86:
                    24:20:11:f9:67:f7:65:9d:ba:31:f9:38:84:59:f6:
                    b9:f3:b3:6e:4d:b0:68:3f:12:ee:b0:70:7e:bc:47:
                    1a:54:9c:ae:de:0c:42:8c:51:b5:e2:07:f8:cd:56:
                    68:eb:3d:5c:bc:ee:92:2b:2b:5c:cf:a3:80:54:63:
                    c3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F5:75:39:69:3F:18:53:9A:56:6E:7B:C8:08:F1:88:8F:D0:17:50
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3136302e3233382e33382e302f32342d3234203d3e203434363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:e7:e1:f4:0a:10:96:4f:de:06:76:b2:78:cd:a5:6b:57:55:
         54:3a:cf:38:4c:f6:30:3b:e1:90:cb:d7:10:af:41:9f:a0:82:
         8d:dc:97:79:d8:2f:62:d1:80:ad:f8:c0:0f:00:ba:84:df:a6:
         f6:d6:73:b0:f8:db:db:19:05:32:c8:35:ce:7c:b5:92:37:d1:
         4a:57:33:f9:9d:e5:ba:18:3c:94:ab:67:14:77:b3:33:cf:f4:
         d4:db:f9:b3:a0:4f:36:7e:85:4b:da:60:eb:64:17:70:c9:2d:
         ef:3b:64:5b:9b:4f:ef:07:72:71:83:30:a0:fb:c9:b0:f0:f2:
         48:2a:bc:5f:a7:04:57:1d:fe:bf:0d:04:92:fe:ef:9a:cf:66:
         14:c0:47:b5:a3:73:5a:04:3f:53:b3:7c:e6:c0:ca:da:af:d7:
         5d:5a:a0:6c:13:cb:cf:57:6f:19:b5:60:92:a4:a9:31:05:54:
         da:20:09:65:ea:02:2d:d0:ca:7a:8a:33:c5:81:e6:ba:0e:93:
         43:b8:95:1f:25:15:fc:d6:37:94:e7:54:50:e0:9e:b2:41:96:
         82:c0:43:c6:aa:d2:c2:b2:60:1d:89:fe:5e:52:77:20:3c:ab:
         84:13:8c:67:8b:bf:67:aa:a6:9e:ae:cd:78:1f:bf:3b:1c:ad:
         6c:0f:39:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----