Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/137/34352e3133302e3130362e302f32342d3234203d3e203631333137.roa
File:                     34352e3133302e3130362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          8yX/Oee/GRcUf6RugYc3nRbgEJgkxAe8d0XXIWAwOns=
Subject key identifier:   DB:48:AB:45:F2:55:25:4E:71:CF:0D:A9:DE:09:F1:30:61:12:35:4C
Certificate issuer:       /CN=b5ea515d763f618f9a8d9ac5b8d05e4f317b1a4b
Certificate serial:       6B295ADD88ACAC86149D88772E839E501BB569C4
Authority key identifier: B5:EA:51:5D:76:3F:61:8F:9A:8D:9A:C5:B8:D0:5E:4F:31:7B:1A:4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tepRXXY_YY-ajZrFuNBeTzF7Gks.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/137/34352e3133302e3130362e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 01 Dec 2020 23:29:32 +0000
ROA not before:           Tue 01 Dec 2020 23:24:32 +0000
ROA not after:            Tue 30 Nov 2021 23:29:32 +0000
asID:                     61317
IP address blocks:        45.130.106.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:29:5a:dd:88:ac:ac:86:14:9d:88:77:2e:83:9e:50:1b:b5:69:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5ea515d763f618f9a8d9ac5b8d05e4f317b1a4b
        Validity
            Not Before: Dec  1 23:24:32 2020 GMT
            Not After : Nov 30 23:29:32 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:eb:09:75:eb:89:c1:e7:c8:4a:a0:d9:8e:fd:
                    ad:30:15:eb:da:0b:8c:42:67:e4:24:19:4d:12:25:
                    7a:bd:11:55:a3:8f:88:48:14:ce:fa:2b:de:78:7e:
                    62:13:06:0a:0d:70:65:d3:23:62:18:d1:72:2e:07:
                    17:13:fc:94:d9:ff:41:28:e3:68:9c:a7:b6:d4:9e:
                    fc:7d:b1:66:58:9a:86:31:a5:49:ee:7e:99:29:b2:
                    24:f6:6b:a3:d3:18:5b:0a:86:89:05:86:06:f8:25:
                    41:46:ed:db:60:d1:6d:aa:a1:a7:17:aa:0e:5f:3f:
                    b5:53:19:db:72:fc:01:0a:54:b1:94:3a:17:ce:40:
                    9f:76:3b:68:f6:98:c0:d3:53:a6:72:d4:c2:8c:8e:
                    ef:b4:5f:37:c1:fb:57:75:d7:6b:6a:1f:e0:c6:4c:
                    5f:d6:24:f8:62:59:11:06:bf:79:c1:a9:6b:99:e9:
                    ee:08:25:a1:a4:ab:78:62:b3:b8:4e:5a:7f:4a:c0:
                    31:8c:c9:33:8a:d0:af:53:8f:78:12:5a:84:bf:d0:
                    43:f2:d7:c2:78:e4:56:ec:14:3d:b2:ea:99:bb:7f:
                    ce:f7:87:84:c2:80:cd:64:14:ab:cb:9a:e9:ed:0d:
                    0f:22:a4:f9:dc:2f:d1:5f:6e:d6:dd:a6:c8:ff:a8:
                    e9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:48:AB:45:F2:55:25:4E:71:CF:0D:A9:DE:09:F1:30:61:12:35:4C
            X509v3 Authority Key Identifier:
                keyid:B5:EA:51:5D:76:3F:61:8F:9A:8D:9A:C5:B8:D0:5E:4F:31:7B:1A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/137/B5EA515D763F618F9A8D9AC5B8D05E4F317B1A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tepRXXY_YY-ajZrFuNBeTzF7Gks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/137/34352e3133302e3130362e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.130.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:d4:4e:04:c3:31:a7:4b:d9:ab:70:23:17:6d:51:73:46:ff:
         38:b8:e1:e4:de:9c:46:8e:25:0c:9c:95:c6:9d:75:43:f1:4b:
         ef:83:13:d5:53:e2:32:d1:b6:8e:cc:a4:4d:63:6e:c3:6b:cb:
         68:90:f4:d2:0b:e8:b4:97:65:48:4a:9c:ae:94:46:0b:8d:01:
         a0:3b:15:1e:85:3d:71:cb:f9:4d:7c:b7:61:46:b4:03:71:8c:
         e9:a6:34:4c:42:70:26:88:45:f7:03:a6:7a:c8:de:71:1e:8e:
         73:af:14:72:49:78:e9:d3:6c:3f:b9:2e:9b:31:99:a4:1d:a5:
         f8:35:d5:84:1e:98:19:55:7e:75:a6:1e:a2:d0:20:9d:52:bd:
         3d:63:31:b7:64:5c:06:b3:03:9a:f1:17:99:27:72:f9:a2:c9:
         4f:6c:68:aa:e3:92:3f:ee:5f:62:3d:ec:08:49:dd:fa:cf:65:
         d6:57:bf:6b:1d:77:c2:f3:98:d4:9f:3e:51:26:08:2b:7d:6c:
         9f:11:c8:77:73:d0:2f:f1:f5:16:24:19:5e:1e:e7:3e:b6:81:
         58:2a:11:35:e3:fc:69:94:da:40:ee:69:54:21:9a:22:7e:7c:
         01:54:5b:13:a8:4b:8b:d5:ff:97:47:21:ab:31:39:62:4e:ff:
         eb:36:33:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----