Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/135/34352e3133362e31362e302f32342d3234203d3e203235303938.roa
File:                     34352e3133362e31362e302f32342d3234203d3e203235303938.roa (raw, json)
Hash identifier:          bT9ENgMWwmxuf4xAIvZ/dgqCzblG37DqqieN+LOOeoc=
Subject key identifier:   85:95:73:A4:75:5E:4A:77:C8:0A:24:61:3B:B9:18:09:E3:7E:BB:9A
Certificate issuer:       /CN=3e980f91cc95086fb049172616de25c8f6353255
Certificate serial:       5F8387EDCA7324E8BAA64F62D8FA711C3D170DDF
Authority key identifier: 3E:98:0F:91:CC:95:08:6F:B0:49:17:26:16:DE:25:C8:F6:35:32:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PpgPkcyVCG-wSRcmFt4lyPY1MlU.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/135/34352e3133362e31362e302f32342d3234203d3e203235303938.roa
Signing time:             Tue 01 Dec 2020 23:27:35 +0000
ROA not before:           Tue 01 Dec 2020 23:22:35 +0000
ROA not after:            Tue 30 Nov 2021 23:27:35 +0000
asID:                     25098
IP address blocks:        45.136.16.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:83:87:ed:ca:73:24:e8:ba:a6:4f:62:d8:fa:71:1c:3d:17:0d:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e980f91cc95086fb049172616de25c8f6353255
        Validity
            Not Before: Dec  1 23:22:35 2020 GMT
            Not After : Nov 30 23:27:35 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6b:01:e6:be:72:7d:ee:b8:91:42:30:90:69:
                    ac:4b:77:b7:04:df:65:37:3b:bd:9e:95:92:fd:d1:
                    82:16:af:ab:f9:87:b2:a4:10:bb:08:86:7b:8b:63:
                    0b:a0:88:19:2f:d8:50:c6:fc:da:b9:6f:e5:b4:f7:
                    45:63:0c:a5:40:26:e1:9e:5f:12:26:15:9b:c2:a2:
                    df:79:e4:35:8b:3c:21:76:d5:03:03:f8:d5:eb:2b:
                    6d:95:27:8c:1a:0c:5f:5f:6e:d5:ed:59:32:29:38:
                    2d:a8:49:0a:b6:b2:32:d7:ea:9f:b1:cb:79:f3:93:
                    4c:44:75:34:55:75:3d:76:99:44:38:76:1e:a8:1d:
                    11:65:d8:e2:88:13:56:69:82:b9:9e:b8:1a:eb:73:
                    eb:17:a9:a4:a6:02:95:3e:ff:57:4d:60:48:30:0f:
                    60:90:31:ea:3f:7b:5f:cf:a4:83:ce:11:1c:17:60:
                    d8:3e:7a:4d:31:98:47:c4:48:82:75:47:cb:21:22:
                    82:8b:cc:98:17:0c:a6:d9:c5:19:ec:cb:cb:0c:bc:
                    1e:de:13:cd:78:dd:f8:b1:54:1e:80:09:2a:49:40:
                    2a:af:c7:21:4c:52:d3:a0:56:f4:24:37:c7:5c:3f:
                    9a:fb:cc:7f:79:31:47:96:42:93:c7:98:ad:1b:0d:
                    19:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:95:73:A4:75:5E:4A:77:C8:0A:24:61:3B:B9:18:09:E3:7E:BB:9A
            X509v3 Authority Key Identifier:
                keyid:3E:98:0F:91:CC:95:08:6F:B0:49:17:26:16:DE:25:C8:F6:35:32:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/135/3E980F91CC95086FB049172616DE25C8F6353255.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PpgPkcyVCG-wSRcmFt4lyPY1MlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/135/34352e3133362e31362e302f32342d3234203d3e203235303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.136.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:16:1a:16:ce:93:d4:97:ee:22:18:bd:fd:e2:49:fd:50:09:
         76:cb:86:72:eb:93:62:32:18:2b:d2:4f:79:54:01:7c:aa:72:
         84:81:81:7b:e9:8e:83:b9:3b:b2:5e:56:12:3e:7a:50:d6:c5:
         b4:f1:bc:77:09:40:c8:8f:c2:15:ea:c1:3c:38:53:f6:d6:1d:
         f0:71:1a:ab:9f:2f:68:4b:d4:f2:bc:e9:b1:6e:ab:fb:03:ee:
         5a:67:5d:27:44:c2:e9:a8:1a:9c:70:d1:54:4b:db:07:4b:dc:
         b1:f5:22:43:05:9f:51:18:2b:12:64:e5:f3:f6:06:11:58:1f:
         85:45:9b:12:d2:24:1d:cc:ae:f2:ca:00:d7:bf:e7:60:29:35:
         cb:42:91:05:ed:93:7e:3a:e7:d5:04:e0:29:c7:1b:f6:da:7e:
         70:f8:ab:af:5c:32:73:18:70:9d:89:b2:3b:8a:63:65:47:b1:
         63:61:9e:cc:35:3c:b5:20:5f:f5:f9:b6:50:46:82:37:26:11:
         4c:8f:45:76:d9:77:ff:bd:95:ec:07:0b:63:2e:5d:66:c5:ef:
         a6:01:a6:46:a1:84:ad:e2:c2:34:c8:d8:5d:4d:de:ff:7b:fe:
         58:cd:89:a2:ec:24:ff:31:09:5e:7f:6a:77:09:64:1e:af:cc:
         21:7f:e4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----