Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3139342e33312e3135302e302f32342d3234203d3e20323037353936.roa
File:                     3139342e33312e3135302e302f32342d3234203d3e20323037353936.roa (raw, json)
Hash identifier:          BcnmlXmWR3UgNwIgEkv/Jm55tWXtPx8YM01WCczSVfI=
Subject key identifier:   11:1C:7D:EB:85:A8:DF:74:70:BE:4A:8E:77:92:E5:55:75:97:17:39
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       4CD2B857BC46D6FFF43751A17DB21CCCEEE82059
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e33312e3135302e302f32342d3234203d3e20323037353936.roa
Signing time:             Thu 31 Dec 2020 18:42:20 +0000
ROA not before:           Thu 31 Dec 2020 18:37:20 +0000
ROA not after:            Thu 30 Dec 2021 18:42:20 +0000
asID:                     207596
IP address blocks:        194.31.150.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d2:b8:57:bc:46:d6:ff:f4:37:51:a1:7d:b2:1c:cc:ee:e8:20:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Dec 31 18:37:20 2020 GMT
            Not After : Dec 30 18:42:20 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bd:5a:87:01:45:06:9b:8b:6d:da:f8:8e:12:
                    03:0c:15:c0:d4:29:33:80:9b:2f:42:b9:0c:e6:e1:
                    61:5c:4a:ae:90:8b:66:b9:27:91:a2:7a:b1:d0:21:
                    a4:1a:6d:89:12:d0:aa:59:db:04:4c:a3:94:6c:90:
                    de:55:dd:c4:44:15:85:38:d6:19:f6:49:7c:ed:d7:
                    42:dc:a0:14:56:11:fc:22:b7:de:9b:b1:74:b2:02:
                    d8:b3:0e:68:e2:6a:d1:eb:a1:57:10:40:7b:3c:8f:
                    c4:6e:f0:e5:c1:0f:b5:7f:d8:4c:21:1c:36:fc:c5:
                    1b:8d:e2:51:97:ab:1d:0a:72:9e:b1:59:c0:6b:f4:
                    51:c0:5a:87:fa:69:ad:f9:ca:4f:44:e1:fc:eb:d3:
                    bb:50:5e:14:83:c4:3b:a8:4f:e7:0a:ce:c5:da:e0:
                    5e:5b:b5:61:97:dd:ac:0d:77:55:5d:1a:64:cd:a5:
                    c9:04:ec:dc:de:e0:a8:ad:a9:86:5a:69:c5:2e:fb:
                    20:ee:f5:e2:6b:09:42:ac:6a:fb:fb:ca:79:32:88:
                    83:b5:f6:d7:30:c0:74:0a:0f:44:23:a7:1d:12:1f:
                    5b:15:58:77:3c:68:36:da:3e:49:bb:07:ba:e5:fe:
                    de:01:f2:06:e2:8c:b3:93:1a:d7:3a:ac:fd:2c:86:
                    d9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:1C:7D:EB:85:A8:DF:74:70:BE:4A:8E:77:92:E5:55:75:97:17:39
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e33312e3135302e302f32342d3234203d3e20323037353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.31.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:ef:24:80:df:64:0d:bf:9f:24:64:11:df:28:33:c0:fc:d1:
         10:77:c6:f0:53:c9:6b:72:5c:b8:33:f5:3e:0d:7a:54:09:cd:
         5d:e2:f9:58:a3:9a:91:1f:5c:2a:89:2c:0a:e7:a7:07:fe:fa:
         f5:6e:90:02:fa:a6:8e:6e:2c:df:9d:27:33:a3:7d:b2:21:b7:
         30:f7:8b:a6:4e:9a:c1:e5:ac:7d:6c:eb:05:94:d2:60:09:91:
         a8:b1:ad:40:b6:de:8c:25:c3:fe:99:16:c0:e4:12:8a:fa:7c:
         da:90:cc:7c:23:1a:30:79:48:9a:9c:17:9d:9e:bf:47:0c:60:
         52:5b:99:49:0b:54:10:83:3e:74:15:8a:a2:64:54:13:ea:cf:
         72:17:40:c8:08:6d:93:73:e9:cb:30:8f:0d:ab:1e:34:d7:f8:
         f5:42:ee:63:32:1b:6b:3d:10:95:31:b8:1a:f1:33:a0:90:c5:
         fb:14:f4:ec:35:30:c6:be:c3:1e:24:0f:67:87:36:c8:74:a7:
         96:ab:7f:09:ad:1d:27:5f:a3:e8:15:2f:0e:8e:36:6f:62:8b:
         3c:2f:5d:58:16:e7:18:e2:73:08:78:62:30:d9:34:45:12:e5:
         3c:f0:b7:af:7d:d5:f5:fe:c4:4b:52:ac:8a:b2:3d:f7:ca:44:
         54:9f:4e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----