Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/130/34352e3135322e34342e302f32342d3234203d3e203434363835.roa
File:                     34352e3135322e34342e302f32342d3234203d3e203434363835.roa (raw, json)
Hash identifier:          8nk4LLaRdAro9w3SUKFf2W5iSEYZCxTaz/3Z3hFmaB4=
Subject key identifier:   F2:CC:10:F1:AE:D8:59:CE:AF:79:35:D6:90:95:40:6C:39:0F:F1:4A
Certificate issuer:       /CN=4ca71a2c584e7f45e94dab910e5010135085e9d7
Certificate serial:       74840B7E37C6099AEE17E1C76FD9973A2B794440
Authority key identifier: 4C:A7:1A:2C:58:4E:7F:45:E9:4D:AB:91:0E:50:10:13:50:85:E9:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TKcaLFhOf0XpTauRDlAQE1CF6dc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/130/34352e3135322e34342e302f32342d3234203d3e203434363835.roa
Signing time:             Tue 01 Dec 2020 23:27:52 +0000
ROA not before:           Tue 01 Dec 2020 23:22:52 +0000
ROA not after:            Tue 30 Nov 2021 23:27:52 +0000
asID:                     44685
IP address blocks:        45.152.44.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:84:0b:7e:37:c6:09:9a:ee:17:e1:c7:6f:d9:97:3a:2b:79:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ca71a2c584e7f45e94dab910e5010135085e9d7
        Validity
            Not Before: Dec  1 23:22:52 2020 GMT
            Not After : Nov 30 23:27:52 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:85:a0:6f:19:aa:cf:8f:de:d4:3e:3a:9c:bd:
                    48:9f:5b:96:b7:4e:83:9a:87:c1:53:7b:be:db:99:
                    fc:88:12:5f:62:98:26:ea:36:37:cf:96:af:82:e4:
                    68:25:34:31:0c:c8:0a:49:9a:25:15:0e:17:bf:4a:
                    60:e2:07:4c:da:4f:6a:4e:b6:7a:02:e1:94:24:75:
                    f3:22:e5:82:af:e8:5d:6e:dd:88:8e:2c:a8:de:96:
                    33:80:c5:03:7c:72:9f:a9:9b:ac:9c:03:48:32:c8:
                    6d:06:5b:0d:85:07:97:97:cc:27:e7:40:8a:4e:1d:
                    79:2f:43:40:1e:bf:0d:1d:4e:2f:e0:df:29:65:85:
                    9d:3f:35:d2:64:4f:ea:f7:71:86:dc:ae:77:64:fa:
                    82:9f:8e:4f:26:69:e0:0a:1c:b8:06:f6:c5:b9:01:
                    d2:59:17:52:df:c7:ab:61:1a:87:c8:39:aa:2d:ac:
                    b6:3d:91:9c:a6:62:c4:fb:b6:dc:5e:82:2a:37:ac:
                    40:2b:94:e2:ef:22:ba:d9:e8:2d:b4:5f:59:9c:2c:
                    12:81:c4:7a:b6:a7:cf:da:1e:ea:c5:aa:c5:f9:5e:
                    19:8c:b4:b8:49:6b:cf:3c:51:de:8c:28:c3:75:18:
                    69:3a:34:b6:7e:ac:17:4a:73:be:3a:b9:4c:59:c6:
                    5e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CC:10:F1:AE:D8:59:CE:AF:79:35:D6:90:95:40:6C:39:0F:F1:4A
            X509v3 Authority Key Identifier:
                keyid:4C:A7:1A:2C:58:4E:7F:45:E9:4D:AB:91:0E:50:10:13:50:85:E9:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/130/4CA71A2C584E7F45E94DAB910E5010135085E9D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKcaLFhOf0XpTauRDlAQE1CF6dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/130/34352e3135322e34342e302f32342d3234203d3e203434363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.152.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:a9:c8:9b:54:17:e1:46:18:1c:77:3d:5f:89:68:2b:92:5a:
         0d:58:74:b6:83:67:f3:ea:68:3b:10:99:c0:88:3e:bb:74:bc:
         27:93:72:aa:f9:c6:89:65:0d:27:af:fe:af:61:d0:b9:0f:f4:
         aa:07:16:e8:16:70:5a:52:0f:1e:06:5d:e4:8e:cc:61:f7:a5:
         9c:a4:ea:5b:77:62:2e:dd:3c:f3:fe:f3:9e:f3:2e:81:87:a7:
         e5:6f:23:df:e8:e6:69:2e:a5:45:a2:ad:41:8f:a9:8f:0b:c5:
         c4:33:59:38:20:c4:97:a3:7b:21:25:54:9f:02:9d:d2:72:87:
         59:95:27:2f:31:03:f3:73:6b:68:8e:ed:21:bf:fc:be:bf:b4:
         61:12:8c:63:37:b1:f2:66:01:9d:b1:ee:e9:38:9d:1e:7d:54:
         a4:8a:57:79:a9:98:2f:ca:ff:32:98:21:c8:9f:66:96:0b:d0:
         ac:6c:1d:46:8d:ec:07:9b:44:96:03:b0:07:7e:52:be:85:25:
         a7:bc:41:64:c5:2b:2d:b0:59:88:e5:4f:ba:d1:f7:10:0c:4c:
         10:5e:a2:9e:e0:0a:3a:07:09:d0:ec:88:d1:af:d1:b6:7d:e3:
         9c:03:06:14:4b:bf:0d:8b:bf:d2:9d:fe:13:0f:32:2b:98:97:
         d4:cb:b6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----