Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/99/39312e3232392e3234342e302f32342d3234203d3e203631333137.roa
File:                     39312e3232392e3234342e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          lib9fcm6eF0fuMvAsssr9NGkXOsZLMSFftKZ38eXHc8=
Subject key identifier:   90:64:48:95:BD:DD:6E:28:13:14:A8:18:7B:5A:42:E5:53:DC:9A:63
Certificate issuer:       /CN=aac035144ef01fea05cb97862c36968f2f74b711
Certificate serial:       1264D4281574EAAA5D3AB7CFB900AB11C441E40F
Authority key identifier: AA:C0:35:14:4E:F0:1F:EA:05:CB:97:86:2C:36:96:8F:2F:74:B7:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qsA1FE7wH-oFy5eGLDaWjy90txE.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/99/39312e3232392e3234342e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 03 Dec 2020 16:43:47 +0000
ROA not before:           Thu 03 Dec 2020 16:38:47 +0000
ROA not after:            Thu 02 Dec 2021 16:43:47 +0000
asID:                     61317
IP address blocks:        91.229.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:64:d4:28:15:74:ea:aa:5d:3a:b7:cf:b9:00:ab:11:c4:41:e4:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac035144ef01fea05cb97862c36968f2f74b711
        Validity
            Not Before: Dec  3 16:38:47 2020 GMT
            Not After : Dec  2 16:43:47 2021 GMT
        Subject: CN=3082010A0282010100BF614E20D1D3FC0D0D3CE682D7314E7D93B2F47A05598FBA0B51A5556829045C99BFD5753379A38081488086CC51C3FF3420488BCE5E8AE1C831634950D3F072E5D3A5D4CDE4911F5E26BDD3763C6C47750DA333840700CE8AA76F8C4FE9CC48C5D25CF19F57DE064FA38D4ED3D22F74987CE898F3A39B7C3381D6AD6F2D29E6C7E372A857BF89D6EB76377C6590D1A8B41F920F83FB869683736911FB0272453B687299737FAC1E0E22A25B545ED00C6C2BA59D535907CF87309666C4A031B6EB97007EDFADA84CF90BCF26AF99FA04C0C61B42EA4FC919CFCE0FD7B000AF956C81A32FA5EDB8FA2D72E3F499CCD6B05D0933A47415F603D9C297E4C789F8210203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:61:4e:20:d1:d3:fc:0d:0d:3c:e6:82:d7:31:
                    4e:7d:93:b2:f4:7a:05:59:8f:ba:0b:51:a5:55:68:
                    29:04:5c:99:bf:d5:75:33:79:a3:80:81:48:80:86:
                    cc:51:c3:ff:34:20:48:8b:ce:5e:8a:e1:c8:31:63:
                    49:50:d3:f0:72:e5:d3:a5:d4:cd:e4:91:1f:5e:26:
                    bd:d3:76:3c:6c:47:75:0d:a3:33:84:07:00:ce:8a:
                    a7:6f:8c:4f:e9:cc:48:c5:d2:5c:f1:9f:57:de:06:
                    4f:a3:8d:4e:d3:d2:2f:74:98:7c:e8:98:f3:a3:9b:
                    7c:33:81:d6:ad:6f:2d:29:e6:c7:e3:72:a8:57:bf:
                    89:d6:eb:76:37:7c:65:90:d1:a8:b4:1f:92:0f:83:
                    fb:86:96:83:73:69:11:fb:02:72:45:3b:68:72:99:
                    73:7f:ac:1e:0e:22:a2:5b:54:5e:d0:0c:6c:2b:a5:
                    9d:53:59:07:cf:87:30:96:66:c4:a0:31:b6:eb:97:
                    00:7e:df:ad:a8:4c:f9:0b:cf:26:af:99:fa:04:c0:
                    c6:1b:42:ea:4f:c9:19:cf:ce:0f:d7:b0:00:af:95:
                    6c:81:a3:2f:a5:ed:b8:fa:2d:72:e3:f4:99:cc:d6:
                    b0:5d:09:33:a4:74:15:f6:03:d9:c2:97:e4:c7:89:
                    f8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:64:48:95:BD:DD:6E:28:13:14:A8:18:7B:5A:42:E5:53:DC:9A:63
            X509v3 Authority Key Identifier:
                keyid:AA:C0:35:14:4E:F0:1F:EA:05:CB:97:86:2C:36:96:8F:2F:74:B7:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/99/AAC035144EF01FEA05CB97862C36968F2F74B711.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsA1FE7wH-oFy5eGLDaWjy90txE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/99/39312e3232392e3234342e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.229.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:0c:e4:ab:62:79:03:6f:5c:aa:ce:78:82:14:89:09:ea:dd:
         06:c4:ea:71:1a:8a:4c:16:a6:52:e7:a1:97:60:f7:b5:11:d8:
         2f:ab:81:01:fa:58:f6:b1:45:8a:f2:74:05:46:df:ed:f4:8a:
         4d:27:80:bc:5f:16:bc:33:37:02:c7:78:d7:54:e8:9c:94:3d:
         51:e9:6a:50:24:9f:d8:11:e3:43:ff:77:00:f1:e8:0c:3c:bb:
         bc:0c:59:bd:e2:a9:e0:55:43:ff:de:c3:09:f3:97:7e:9b:72:
         22:78:dc:49:33:6e:5c:1d:ae:0c:66:73:c8:9f:82:5c:49:98:
         3f:63:91:c9:b5:94:c8:de:d9:12:5b:8e:b2:76:14:b7:8f:cb:
         b6:35:e5:77:e4:fe:42:f7:8c:99:3e:6c:e7:fd:27:93:3f:de:
         42:8c:78:fd:d8:71:12:da:7d:cb:0e:93:67:b3:6f:0d:09:81:
         77:1c:ae:7e:81:43:fd:37:6d:97:87:2b:7e:da:c1:ad:73:ac:
         41:21:70:5b:67:1f:f8:de:37:3e:d5:ad:29:ce:6c:74:7e:07:
         2a:9f:cb:14:8b:4f:a4:1c:3c:46:54:fd:9a:bf:82:fa:25:f4:
         0a:35:55:63:df:c4:f7:d0:8a:1a:39:70:1e:33:1b:8d:25:58:
         09:62:d2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----