Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/13/34352e31332e35382e302f32332d3234203d3e203631333137.roa
File:                     34352e31332e35382e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          osC2A5Gmw0rH2llJfnaI6l076xQFlZ+45rl3L/qYUoI=
Subject key identifier:   CF:13:FB:82:C9:BD:71:5A:65:61:06:9F:27:78:AB:58:7D:4B:95:AD
Certificate issuer:       /CN=8000e2f09d2bdd9bee9d4694e4779bca485a6067
Certificate serial:       5023295F70139B26D3263EC2ADBD67B08D67F48E
Authority key identifier: 80:00:E2:F0:9D:2B:DD:9B:EE:9D:46:94:E4:77:9B:CA:48:5A:60:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gADi8J0r3ZvunUaU5HebykhaYGc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/13/34352e31332e35382e302f32332d3234203d3e203631333137.roa
Signing time:             Sat 28 Nov 2020 12:46:35 +0000
ROA not before:           Sat 28 Nov 2020 12:41:35 +0000
ROA not after:            Sat 27 Nov 2021 12:46:35 +0000
asID:                     61317
IP address blocks:        45.13.58.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:23:29:5f:70:13:9b:26:d3:26:3e:c2:ad:bd:67:b0:8d:67:f4:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8000e2f09d2bdd9bee9d4694e4779bca485a6067
        Validity
            Not Before: Nov 28 12:41:35 2020 GMT
            Not After : Nov 27 12:46:35 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bb:14:7b:60:64:c1:da:71:51:63:be:f5:b7:
                    f1:8d:11:50:97:bf:fd:2d:68:f6:03:0a:87:1d:23:
                    09:04:80:b6:63:45:a2:70:7c:af:e7:e9:9c:1d:31:
                    23:75:c7:b3:5e:8c:40:06:a6:43:dc:51:e9:50:e1:
                    41:da:0e:e3:38:84:0f:be:0a:53:ce:7b:b4:11:f1:
                    d6:0f:93:c3:63:ba:b9:4f:c8:92:50:f0:ff:1a:ae:
                    3a:e1:bc:52:ef:61:81:eb:32:ab:df:3f:45:1a:18:
                    28:1a:21:e0:31:a8:1b:d9:1d:72:3f:7a:fb:4e:11:
                    21:71:c3:57:9e:40:2f:e5:92:bd:e5:1a:54:97:9e:
                    ab:0d:2c:22:2a:1b:f6:7a:51:81:58:60:f3:c5:7f:
                    52:6d:53:bf:20:9f:ac:3d:d3:65:cb:25:8c:ab:ca:
                    c3:3d:24:4e:31:a8:5c:ea:58:2b:4e:b1:75:69:12:
                    ac:f5:74:78:44:15:c9:98:0b:51:02:23:d7:2c:ac:
                    65:4c:22:56:d7:31:f5:5d:82:9a:a5:b0:de:ab:92:
                    f1:eb:bb:ef:95:cc:c1:92:fc:1d:0d:7b:0e:3d:87:
                    9f:08:a6:49:b4:8f:ee:f9:14:55:87:bc:8a:10:8c:
                    ff:70:80:b6:8f:ae:7a:57:70:16:a7:dc:b0:30:88:
                    1f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:13:FB:82:C9:BD:71:5A:65:61:06:9F:27:78:AB:58:7D:4B:95:AD
            X509v3 Authority Key Identifier:
                keyid:80:00:E2:F0:9D:2B:DD:9B:EE:9D:46:94:E4:77:9B:CA:48:5A:60:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/13/8000E2F09D2BDD9BEE9D4694E4779BCA485A6067.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gADi8J0r3ZvunUaU5HebykhaYGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/13/34352e31332e35382e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:fa:22:d8:83:c6:97:80:5c:9a:93:8f:17:c4:0d:c2:7f:55:
         a6:e1:6f:ab:5e:ac:3d:44:83:f4:9d:ec:04:f2:de:46:1c:58:
         c7:a6:4d:f5:cf:9e:74:f3:4a:61:b0:bf:a7:f1:21:1e:8c:c3:
         b7:14:09:48:54:f5:ae:6e:f0:dd:eb:4a:5d:86:05:63:da:3f:
         04:e5:b2:07:68:86:28:3b:2d:88:7a:76:5c:83:e7:e5:6d:bc:
         87:1a:a0:9b:53:e2:b7:af:76:99:07:78:07:34:c1:3f:0b:c2:
         b6:15:c8:c0:48:fb:86:30:bb:87:18:23:31:c5:d8:f3:c5:65:
         e9:54:fc:4c:99:51:a4:12:d0:7e:61:8e:bd:d5:5b:fe:4d:81:
         d7:a8:05:6a:9c:6e:d6:c5:c7:72:64:4e:ef:61:f1:ca:cd:5a:
         3f:54:25:fa:e4:b7:da:6a:65:a4:52:74:0b:0b:be:f2:a6:51:
         65:dc:c1:4b:9a:c4:95:db:9f:6a:8b:58:08:44:4e:53:3b:f3:
         d4:96:6b:f4:b6:07:86:36:f7:f0:08:43:0b:c7:4a:74:8c:d6:
         dc:92:11:ab:38:e7:42:f5:63:9f:da:fe:0b:c5:19:3c:d6:e1:
         a7:14:97:28:40:2f:0c:a4:ca:c7:01:d1:93:18:b1:3e:57:a6:
         9e:f3:c9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----