Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139352e38382e38372e302f32342d3234203d3e20323132303532.roa
File:                     3139352e38382e38372e302f32342d3234203d3e20323132303532.roa (raw, json)
Hash identifier:          7kkaum0xB9z+Rg12TYTPoJFHTQWjK5Ws/Pyl6hhDxn0=
Subject key identifier:   51:15:F4:9E:32:B8:30:35:D8:18:C9:82:34:A5:DF:93:5B:21:C6:EB
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       083A9CC261FCA94E597A02B01818519F8218FF3E
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139352e38382e38372e302f32342d3234203d3e20323132303532.roa
Signing time:             Wed 13 Jan 2021 08:17:22 +0000
ROA not before:           Wed 13 Jan 2021 08:12:22 +0000
ROA not after:            Wed 12 Jan 2022 08:17:22 +0000
asID:                     212052
IP address blocks:        195.88.87.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:3a:9c:c2:61:fc:a9:4e:59:7a:02:b0:18:18:51:9f:82:18:ff:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Jan 13 08:12:22 2021 GMT
            Not After : Jan 12 08:17:22 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:49:5c:2d:99:1f:5b:0c:4e:5e:4c:d6:0a:4d:
                    77:7a:6f:9c:2b:21:08:66:76:81:8e:07:a2:ce:d5:
                    30:37:d6:6c:3b:0f:58:e1:a9:f2:f9:ec:3a:18:52:
                    0e:18:d3:c9:43:f7:cb:6a:38:11:58:93:ee:d2:1c:
                    88:07:02:cd:77:0e:b4:2f:71:4f:d0:e7:00:70:83:
                    db:00:35:50:67:fe:89:ad:44:71:4a:a5:2b:6a:07:
                    58:5f:5c:35:15:2a:d8:17:6e:26:8d:6d:d4:97:0d:
                    12:bc:23:98:7a:07:c8:ac:9a:ec:a3:9c:dd:5e:95:
                    30:6d:9a:4b:21:ac:bf:02:2e:ed:f0:f2:75:cb:75:
                    d2:ce:24:98:bd:74:9c:6b:d2:53:af:f1:73:1a:0d:
                    58:92:13:12:e4:3c:76:c3:a6:75:4f:b8:f3:98:32:
                    83:bd:36:8b:e6:20:2b:d1:63:e2:5a:af:1e:0a:e5:
                    61:b4:8e:c6:e8:04:f8:a2:b2:8f:6b:38:f0:5c:2c:
                    7d:41:1a:08:f8:b3:0e:2c:08:a8:dd:9b:bc:39:e5:
                    96:e3:48:6c:b4:94:63:ae:6a:46:dd:2b:36:49:45:
                    3f:a9:15:8e:80:d3:78:5c:96:8e:a8:2e:93:d3:c5:
                    b0:22:e6:82:07:37:ee:e8:32:23:ea:52:2b:f4:bf:
                    0e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:15:F4:9E:32:B8:30:35:D8:18:C9:82:34:A5:DF:93:5B:21:C6:EB
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139352e38382e38372e302f32342d3234203d3e20323132303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.88.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:da:2b:be:e0:b4:15:f0:bc:3d:fc:a1:e2:3f:6c:e7:2f:f0:
         fa:58:5a:d0:ed:09:e8:83:fc:c5:e9:b6:14:c9:4c:55:27:89:
         2a:fb:82:6f:a3:22:e7:48:51:d7:09:98:db:eb:eb:91:67:8b:
         0b:33:6c:cf:da:a2:5c:20:42:95:e5:fb:a8:6b:30:72:9b:53:
         f5:99:48:9d:5a:6e:53:b5:03:67:dd:20:7b:e6:8e:ad:10:61:
         bc:d1:04:ce:ec:1b:d9:c6:b7:7c:7e:e9:85:7a:c2:36:e1:c7:
         af:59:c8:09:37:14:e8:29:0e:0d:0d:9e:c7:de:24:91:c4:1a:
         13:95:fb:7d:e6:7b:cd:35:8a:21:98:ce:7d:f6:e1:6b:eb:c1:
         47:88:1e:16:b2:8d:9b:0a:20:c9:9e:9a:b0:84:f3:ee:70:a1:
         af:54:8d:c9:d6:64:20:95:91:7e:b4:33:a7:55:62:aa:48:1e:
         ac:13:47:3b:0a:01:eb:82:29:61:3b:db:39:43:b1:0d:44:f4:
         a7:73:19:58:13:5a:46:23:58:54:ec:36:a9:bd:20:55:8c:bb:
         01:af:74:14:b3:8f:95:91:80:af:e5:4f:0e:93:ee:60:9b:ea:
         39:a2:33:bd:71:2c:e0:90:50:f9:66:5c:d5:65:9a:58:0a:bd:
         26:58:0e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----