Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/38332e3137312e3234392e302f32342d3234203d3e203233343730.roa
File:                     38332e3137312e3234392e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          ymbY4LVWFrD8J5kyRdqmAUHNHu/25e3fZBe1pAVm9XQ=
Subject key identifier:   FB:D1:B2:72:FE:A8:1C:17:2E:40:BA:66:53:50:30:DA:A9:0A:1C:BA
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       2C616508DBB6DD89C577F763F294AEC7A21491
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/38332e3137312e3234392e302f32342d3234203d3e203233343730.roa
Signing time:             Thu 31 Dec 2020 18:42:43 +0000
ROA not before:           Thu 31 Dec 2020 18:37:43 +0000
ROA not after:            Thu 30 Dec 2021 18:42:43 +0000
asID:                     23470
IP address blocks:        83.171.249.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:61:65:08:db:b6:dd:89:c5:77:f7:63:f2:94:ae:c7:a2:14:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Dec 31 18:37:43 2020 GMT
            Not After : Dec 30 18:42:43 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:72:18:ad:76:87:8d:c3:d1:9d:1d:c7:f3:84:
                    3b:2d:98:7b:3b:04:95:c5:4d:1f:35:02:9e:80:5e:
                    9e:3e:fd:a3:63:a7:90:08:df:ab:d2:d7:f0:48:df:
                    68:c3:69:41:33:6d:04:94:6f:04:d7:b1:5c:8f:eb:
                    6a:86:91:e6:1c:e0:4e:db:6e:92:e0:7d:8a:0a:20:
                    b9:da:6d:c3:75:92:d1:58:3a:ca:e0:ad:be:68:58:
                    e3:37:a1:d8:58:bb:0f:a6:f2:c2:40:b4:da:ff:95:
                    b3:ac:0d:49:2d:0e:92:de:0f:8c:63:55:1a:6e:2d:
                    2f:4d:b5:8e:88:26:c4:fa:ea:b9:4d:7d:80:53:86:
                    f6:ed:e9:e1:1e:a1:b1:a7:54:9e:5d:ad:ac:01:a4:
                    52:00:08:8b:2d:22:27:58:b4:5d:49:ac:38:58:ca:
                    a4:c1:36:56:cb:10:d6:17:b5:11:89:cd:41:f1:75:
                    0d:a2:06:ed:02:ee:e2:da:18:98:aa:70:27:9d:30:
                    5a:9d:29:2f:0d:c2:9d:2c:20:98:12:37:4c:75:f0:
                    9e:fe:cd:f6:f0:26:a1:86:ea:2b:f9:75:a1:b8:ad:
                    df:87:3a:b1:4a:43:92:4a:1c:66:e0:2e:6d:fc:41:
                    e9:1f:12:77:a0:ba:61:98:0f:6b:2b:c5:a3:87:9c:
                    05:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D1:B2:72:FE:A8:1C:17:2E:40:BA:66:53:50:30:DA:A9:0A:1C:BA
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/38332e3137312e3234392e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.171.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:58:14:0f:85:94:3c:71:b4:fc:2b:d4:98:12:4f:e9:d0:85:
         b9:6c:ac:2c:30:be:2a:25:c8:8b:b1:14:8d:32:df:60:92:3c:
         80:2e:52:d7:03:84:98:69:84:f0:54:88:90:08:8d:68:01:35:
         04:cc:5b:88:53:7f:a8:af:64:57:bd:ee:71:bd:a0:dc:a3:39:
         ef:e2:2d:c8:67:27:b3:9a:40:26:fd:6d:40:7b:0a:40:3e:46:
         f8:c2:18:65:52:89:09:cb:e7:ac:91:04:ff:b8:da:f2:2c:8f:
         57:95:db:98:a0:5d:0b:69:c6:5f:3f:18:e9:65:e8:5a:e5:6f:
         6b:26:4f:d2:cd:ee:13:15:8f:ae:31:00:d3:14:e7:52:9e:7e:
         69:3e:3d:a2:15:a8:20:71:6b:ad:01:82:d4:9e:7c:24:92:d6:
         40:91:48:8a:b9:49:07:f4:be:e3:34:08:e6:90:70:79:e2:75:
         c3:6a:3e:95:1e:28:99:3b:f8:1b:f0:c6:d8:f0:2d:32:62:d9:
         3b:bd:34:11:8b:7e:eb:e3:81:ee:3a:33:93:3e:e9:3f:4b:20:
         43:9f:bd:85:cb:f6:fd:f0:4d:8f:57:a2:1f:6e:77:9e:96:c2:
         19:72:38:b2:37:df:d3:10:1f:97:ae:bf:ac:09:f3:b0:46:a4:
         a9:fb:1e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----