Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/39312e3139362e36392e302f32342d3234203d3e20313734.roa
File:                     39312e3139362e36392e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier:          Vc8BPpGq+Zpwtg9+eDMCr45hP83GzF4/wB5U7P9j2x8=
Subject key identifier:   43:9F:4C:5B:DD:F9:C8:A3:7E:43:CC:47:20:B8:06:5B:06:66:3B:2E
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       39E133A0B03D5E8176AF73F4ABB71D14E65354E3
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/39312e3139362e36392e302f32342d3234203d3e20313734.roa
Signing time:             Wed 27 Jan 2021 20:02:56 +0000
ROA not before:           Wed 27 Jan 2021 19:57:56 +0000
ROA not after:            Wed 26 Jan 2022 20:02:56 +0000
asID:                     174
IP address blocks:        91.196.69.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e1:33:a0:b0:3d:5e:81:76:af:73:f4:ab:b7:1d:14:e6:53:54:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Jan 27 19:57:56 2021 GMT
            Not After : Jan 26 20:02:56 2022 GMT
        Subject: CN=3082010A0282010100E9B56FBF0301B0C9201F93A4C743EB0F2525F1280B6E0937C3CE4AA7B1308B77E54E8018C5C1CFC8D0077B86E29EDCE5BD288A5BF6FDC371C99C0B5AE41D77DCE1FD291C72747662C1DD8189B9C71363278737AD174149E61284147A158F76B268AAA1C3F2B35299DC07D11FE7C61D8B4F292CC2F6739AE2E3F44C26DCC8C2C84D443F670D301277CB5A4067CA43C8A2FFB71E9936BA74BCBEEB0B0A5CD938316A7DA100F51299F35020AF00938D5961CC7ADBA72F8112AC520434A87190505DD6F76860D4D2B88B9CDA0F46C2DABE6066BB94607C60D38BAE75E83E1F86536595C8A38CAC6B71708DC52C0DDFA5C155C137E23AA822E53515D6D8772B0FF9FD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b5:6f:bf:03:01:b0:c9:20:1f:93:a4:c7:43:
                    eb:0f:25:25:f1:28:0b:6e:09:37:c3:ce:4a:a7:b1:
                    30:8b:77:e5:4e:80:18:c5:c1:cf:c8:d0:07:7b:86:
                    e2:9e:dc:e5:bd:28:8a:5b:f6:fd:c3:71:c9:9c:0b:
                    5a:e4:1d:77:dc:e1:fd:29:1c:72:74:76:62:c1:dd:
                    81:89:b9:c7:13:63:27:87:37:ad:17:41:49:e6:12:
                    84:14:7a:15:8f:76:b2:68:aa:a1:c3:f2:b3:52:99:
                    dc:07:d1:1f:e7:c6:1d:8b:4f:29:2c:c2:f6:73:9a:
                    e2:e3:f4:4c:26:dc:c8:c2:c8:4d:44:3f:67:0d:30:
                    12:77:cb:5a:40:67:ca:43:c8:a2:ff:b7:1e:99:36:
                    ba:74:bc:be:eb:0b:0a:5c:d9:38:31:6a:7d:a1:00:
                    f5:12:99:f3:50:20:af:00:93:8d:59:61:cc:7a:db:
                    a7:2f:81:12:ac:52:04:34:a8:71:90:50:5d:d6:f7:
                    68:60:d4:d2:b8:8b:9c:da:0f:46:c2:da:be:60:66:
                    bb:94:60:7c:60:d3:8b:ae:75:e8:3e:1f:86:53:65:
                    95:c8:a3:8c:ac:6b:71:70:8d:c5:2c:0d:df:a5:c1:
                    55:c1:37:e2:3a:a8:22:e5:35:15:d6:d8:77:2b:0f:
                    f9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:9F:4C:5B:DD:F9:C8:A3:7E:43:CC:47:20:B8:06:5B:06:66:3B:2E
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/39312e3139362e36392e302f32342d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.196.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:e3:61:d9:c7:1e:20:ba:7a:a8:d2:db:d0:9d:33:c8:2d:9d:
         73:01:a1:21:1d:0d:79:e6:4b:7d:10:c1:5c:09:6f:34:92:c0:
         2c:b1:a2:3b:1f:81:48:c4:85:b9:28:e3:b5:12:36:1d:cb:aa:
         f7:19:fc:35:05:fd:23:ff:e5:ae:8f:2e:a6:6d:94:b3:e6:80:
         1f:57:be:63:a1:b8:47:ac:9f:0f:4f:ac:ef:eb:2c:b0:86:e3:
         cc:32:72:eb:a7:b6:2b:22:6f:6c:92:42:38:ab:b2:7a:bc:af:
         88:bf:0e:5b:ea:92:77:24:2a:b4:02:16:9e:e9:69:f1:ca:70:
         8f:ef:0b:21:c9:e5:70:6a:76:bc:fb:80:ae:c6:eb:4f:ae:1f:
         cf:86:3b:39:c1:1b:4b:c4:67:5a:5e:e7:e9:35:df:e2:b4:95:
         ff:e9:01:87:0b:a1:87:37:9c:4f:cf:4b:64:4f:d6:7a:8a:42:
         46:04:32:ec:2f:db:cc:42:62:b5:1b:fb:b5:46:e2:d1:21:91:
         92:8f:75:ee:86:9d:e2:91:67:c8:90:2a:f4:d6:0f:52:83:91:
         4c:6e:27:04:2f:75:8f:c0:0a:6a:d2:dc:af:ff:7e:3c:15:31:
         d0:3f:32:e3:b4:c2:aa:d1:cb:fa:8a:9a:bd:91:95:c0:24:06:
         86:25:46:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----