Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/135/34352e3133362e31382e302f32342d3234203d3e20323132373836.roa
File:                     34352e3133362e31382e302f32342d3234203d3e20323132373836.roa (raw, json)
Hash identifier:          Ax+qWn8Djz2wBtHOKDpvQbgzPRSJvzhyZD4Dom+x2rQ=
Subject key identifier:   77:9A:17:AC:EC:DD:A0:6F:2D:80:F8:76:C7:03:21:05:87:F1:03:45
Certificate issuer:       /CN=3e980f91cc95086fb049172616de25c8f6353255
Certificate serial:       4370A685CCF09CFEDEC5FD638E8426ED4788AB09
Authority key identifier: 3E:98:0F:91:CC:95:08:6F:B0:49:17:26:16:DE:25:C8:F6:35:32:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PpgPkcyVCG-wSRcmFt4lyPY1MlU.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/135/34352e3133362e31382e302f32342d3234203d3e20323132373836.roa
Signing time:             Wed 10 Feb 2021 12:57:27 +0000
ROA not before:           Wed 10 Feb 2021 12:52:27 +0000
ROA not after:            Wed 09 Feb 2022 12:57:27 +0000
asID:                     212786
IP address blocks:        45.136.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:70:a6:85:cc:f0:9c:fe:de:c5:fd:63:8e:84:26:ed:47:88:ab:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e980f91cc95086fb049172616de25c8f6353255
        Validity
            Not Before: Feb 10 12:52:27 2021 GMT
            Not After : Feb  9 12:57:27 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a2:ab:c7:62:20:8a:df:02:db:4d:d7:d9:69:
                    14:12:f1:96:f1:d2:29:22:04:23:15:2d:50:45:18:
                    e5:0a:f7:ab:4a:c0:4d:a2:c1:2b:38:b2:6e:de:56:
                    a5:c1:14:f8:29:06:cc:74:85:70:62:fa:f1:26:d5:
                    24:61:ba:5d:7c:d3:89:ca:0a:fe:1c:2c:fc:c5:31:
                    42:17:03:9a:e4:4a:a7:51:6b:07:b5:d2:9a:7b:09:
                    72:de:9e:fa:a7:77:09:81:4e:b4:21:7d:1e:48:02:
                    81:ce:1d:16:9d:fc:f4:16:70:b4:15:bb:d2:59:d0:
                    27:cf:81:cc:a7:a4:18:32:03:e4:54:a3:0c:0b:10:
                    0b:ec:10:d1:2b:b3:b2:89:5e:fe:36:b7:35:a1:3f:
                    79:a4:ba:78:3b:47:fc:05:72:4c:77:b1:31:18:19:
                    89:8c:8f:b0:62:57:2e:82:18:38:0f:66:74:0d:74:
                    77:12:32:01:ea:6c:1f:99:73:6a:b3:f9:84:f8:89:
                    71:ad:32:78:d5:c3:dc:5e:a6:e1:d5:2d:56:e6:c6:
                    9d:41:80:65:cd:46:7b:f5:bf:92:76:e2:dc:ff:a4:
                    ec:67:13:9d:83:06:fa:67:fb:d3:fb:d1:3a:4c:fa:
                    0d:31:2e:4f:00:e0:f0:1f:15:1a:fd:de:d3:1f:51:
                    30:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:9A:17:AC:EC:DD:A0:6F:2D:80:F8:76:C7:03:21:05:87:F1:03:45
            X509v3 Authority Key Identifier:
                keyid:3E:98:0F:91:CC:95:08:6F:B0:49:17:26:16:DE:25:C8:F6:35:32:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/135/3E980F91CC95086FB049172616DE25C8F6353255.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PpgPkcyVCG-wSRcmFt4lyPY1MlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/135/34352e3133362e31382e302f32342d3234203d3e20323132373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.136.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:3d:e4:57:10:54:5c:09:4f:ac:25:fd:78:4a:fc:8f:0e:71:
         81:5a:11:d0:49:b2:7c:a6:5f:49:5c:25:7c:f1:8a:a0:e7:e8:
         18:d5:39:ca:07:0f:88:aa:96:92:e6:ce:f7:31:67:40:af:85:
         11:fa:ba:c3:52:1e:2b:18:c2:b5:dd:91:ab:d5:38:f2:3c:db:
         85:96:b2:f4:a0:82:68:a0:69:d5:0a:3f:02:e4:26:a9:52:c2:
         1e:e3:ce:61:9d:6d:8a:e4:a0:ac:ae:c7:b8:47:4d:65:b2:01:
         03:70:b2:9a:f8:b2:4b:bf:c7:06:63:30:74:ba:e6:0d:f9:91:
         ce:c0:bb:d9:29:e1:a7:73:83:14:74:a4:4d:34:44:f5:a0:4b:
         b2:8b:52:03:71:4d:4e:f3:8e:c9:2e:8b:15:3d:d0:69:b8:9a:
         03:8f:7f:56:bc:c9:46:39:6b:a5:04:e3:83:64:45:1c:eb:d4:
         da:51:6b:cb:c9:1f:1e:02:c9:ec:42:9b:66:df:95:cb:68:f5:
         45:fa:d9:00:d1:a5:50:37:ea:39:33:b5:f2:fa:c7:31:40:c3:
         76:0a:1d:60:57:0d:ca:e7:45:a2:05:7d:b2:04:30:5c:ed:0c:
         68:5d:f8:37:53:6f:99:1c:30:18:b0:0a:75:8f:d8:62:11:11:
         b1:48:13:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----