Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e3230312e302f32342d3234203d3e203631333137.roa
File:                     3139342e36302e3230312e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          LvKDBeAzUMQavGosqi3kThR8cgnlAMHLhUdQ4DHfdL0=
Subject key identifier:   D3:A5:1F:B1:30:AE:5B:8B:68:87:01:D4:0D:4D:DE:B3:D8:EB:81:ED
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       68224883F5DBEEDBA33020363AEE7B6F94D2313E
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e3230312e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 27 Nov 2020 15:10:22 +0000
ROA not before:           Fri 27 Nov 2020 15:05:22 +0000
ROA not after:            Fri 26 Nov 2021 15:10:22 +0000
asID:                     61317
IP address blocks:        194.60.201.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:22:48:83:f5:db:ee:db:a3:30:20:36:3a:ee:7b:6f:94:d2:31:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Nov 27 15:05:22 2020 GMT
            Not After : Nov 26 15:10:22 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:77:5f:27:db:74:32:52:14:ac:d0:bf:6e:e8:
                    78:b8:7c:9b:95:79:9d:ea:0d:31:24:6b:0c:ef:6d:
                    d9:4e:8f:79:c6:53:9b:95:ab:8b:fd:5a:ee:65:a0:
                    31:6d:4c:d1:a4:bb:29:3e:ca:8f:64:40:4e:3f:e9:
                    20:42:7f:84:1c:f2:60:49:08:a1:df:ad:46:fa:33:
                    2a:2f:ce:73:67:37:d4:9a:37:87:e1:dc:b5:62:90:
                    88:49:b0:e9:c6:7b:12:3c:01:97:93:85:17:c1:3a:
                    6d:79:97:e8:5d:63:98:5b:6b:2b:1e:b2:45:f9:f3:
                    8f:53:19:c1:da:11:2a:f0:86:d0:c8:e9:2a:41:95:
                    51:1f:22:af:c6:3c:52:f8:fc:e2:37:78:9e:d3:50:
                    0f:d6:ba:f9:46:e8:79:71:20:3b:ed:69:eb:1e:30:
                    cf:2a:bf:99:6b:ea:9e:3d:ae:4f:d2:cc:d7:a0:cb:
                    76:3e:02:a1:36:46:5c:82:76:44:3d:16:34:93:f3:
                    5a:a6:6c:ff:83:6f:ee:89:3c:b6:d8:f0:fa:71:05:
                    fb:82:ff:43:92:5c:39:e5:dd:d2:48:67:1b:fa:0f:
                    da:fa:3e:b8:c5:7d:2a:c0:7b:b3:d8:77:45:9a:47:
                    f2:fe:f5:1e:1b:07:9f:02:2d:82:ed:7e:f9:a0:39:
                    4d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A5:1F:B1:30:AE:5B:8B:68:87:01:D4:0D:4D:DE:B3:D8:EB:81:ED
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e3230312e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.60.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:57:53:81:46:7b:60:d0:c6:77:c1:be:73:97:ce:53:0c:08:
         62:5b:20:e3:a6:21:f8:32:8e:c4:e4:7f:cc:fa:87:2d:cd:3c:
         f2:cd:42:1b:27:fe:0f:37:19:ab:59:49:da:f3:8e:ee:12:b6:
         41:d1:ad:1d:76:4f:5e:87:db:a4:bc:d7:82:51:ea:ce:cb:3c:
         60:20:1c:4a:ca:4f:44:69:30:6a:01:f5:82:9d:68:fa:08:f8:
         a6:42:a4:a0:81:16:31:08:02:83:27:3c:2e:11:3f:bf:48:a9:
         76:25:04:fa:2c:01:dd:c4:47:25:b7:f1:af:6a:4f:6f:ce:f7:
         81:5c:1a:fb:ae:b5:e6:a5:c2:be:12:d7:73:04:c0:c5:24:fa:
         bb:60:5e:aa:bc:80:4c:76:8b:d5:27:ac:6f:43:6f:39:28:bf:
         1f:22:5c:c4:8a:59:c8:80:4c:7b:db:54:d9:8d:14:2d:91:7c:
         65:bd:a3:62:66:11:17:33:1b:99:8e:ae:14:f7:5a:6a:a5:17:
         a6:34:78:df:39:a6:83:b7:32:91:b7:68:20:7c:70:9f:51:bd:
         f4:4e:59:85:dc:98:9d:4e:25:eb:f4:4e:6a:a6:51:39:31:d4:
         e7:52:a5:aa:d4:da:55:31:fb:a8:c0:82:8e:86:cc:3c:5b:8c:
         e0:29:69:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----