Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/27/34352e382e3135302e302f32332d3234203d3e203631333137.roa
File:                     34352e382e3135302e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          ZhD8NcoYzv2jYEMdpXVac8y25FiO2ocA+KgXQKo0D2s=
Subject key identifier:   8F:03:DD:39:F0:B7:C2:59:0B:5C:E0:03:7A:1D:2D:02:F2:9F:8C:0C
Certificate issuer:       /CN=00de5a79794df58205a4c7ab118447e34a5d743c
Certificate serial:       1854DE7392271785BAE4E1B128055C6554B628C5
Authority key identifier: 00:DE:5A:79:79:4D:F5:82:05:A4:C7:AB:11:84:47:E3:4A:5D:74:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AN5aeXlN9YIFpMerEYRH40pddDw.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/27/34352e382e3135302e302f32332d3234203d3e203631333137.roa
Signing time:             Mon 30 Nov 2020 19:11:37 +0000
ROA not before:           Mon 30 Nov 2020 19:06:37 +0000
ROA not after:            Mon 29 Nov 2021 19:11:37 +0000
asID:                     61317
IP address blocks:        45.8.150.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:54:de:73:92:27:17:85:ba:e4:e1:b1:28:05:5c:65:54:b6:28:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00de5a79794df58205a4c7ab118447e34a5d743c
        Validity
            Not Before: Nov 30 19:06:37 2020 GMT
            Not After : Nov 29 19:11:37 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:90:16:86:de:1a:d7:95:d6:d9:4c:4a:df:13:
                    c2:3c:d3:b5:ef:c0:3b:f0:a7:06:50:a6:de:cb:fd:
                    4e:dc:28:06:8f:d6:da:76:88:82:80:8f:7a:cc:32:
                    8c:39:27:8f:18:5e:4f:3e:8a:d0:41:ca:50:8e:d0:
                    2e:da:42:8b:51:36:71:b8:b1:01:d2:28:dd:a1:34:
                    c0:d5:de:d7:67:fe:4e:6b:f2:81:9b:b5:34:32:f1:
                    61:93:81:eb:9e:f6:67:a6:9e:9e:80:5a:06:eb:42:
                    43:da:a0:7a:1e:c8:26:21:b0:06:d7:83:4a:15:e0:
                    df:01:52:89:9b:a1:da:7a:58:d2:61:e8:9f:73:5e:
                    00:73:f4:68:aa:65:35:ff:5b:8c:7e:87:79:40:a4:
                    b7:71:3f:45:3c:9c:87:dd:57:0f:8a:77:d5:cd:e8:
                    74:2f:e2:6c:fc:d9:e7:7a:15:d2:ac:85:ee:31:af:
                    bb:93:d3:f8:f8:32:9f:f4:ca:e7:86:a4:3e:c1:59:
                    d1:a7:ab:0e:85:e5:a1:d6:02:cb:99:9f:d2:4e:10:
                    53:4b:e1:c9:e3:7f:49:54:d4:02:64:d3:b1:6e:ce:
                    ed:88:66:b8:77:32:fa:45:84:5d:2e:a8:0c:7e:20:
                    a3:aa:b0:45:8b:6f:9f:57:e2:33:39:e2:52:b3:e9:
                    b5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:03:DD:39:F0:B7:C2:59:0B:5C:E0:03:7A:1D:2D:02:F2:9F:8C:0C
            X509v3 Authority Key Identifier:
                keyid:00:DE:5A:79:79:4D:F5:82:05:A4:C7:AB:11:84:47:E3:4A:5D:74:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/27/00DE5A79794DF58205A4C7AB118447E34A5D743C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AN5aeXlN9YIFpMerEYRH40pddDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/27/34352e382e3135302e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:36:a9:a4:2e:5b:9c:6d:39:1e:6d:f9:e6:e6:14:18:12:09:
         4c:cb:d5:41:9f:35:6c:f7:af:b1:46:6b:53:3b:34:2d:c4:7f:
         dd:67:b1:30:1a:84:12:e9:5d:00:e9:3e:0d:e0:c3:b5:c6:ad:
         a1:ee:b6:3a:ed:57:8b:b8:af:6a:3a:9e:51:e2:48:2a:ff:95:
         7d:f9:0c:ad:95:41:aa:4a:cd:88:b4:c0:8b:d5:b2:32:f2:7d:
         47:c2:e5:4f:02:92:a1:41:cf:5b:00:bb:54:06:94:72:fd:b8:
         e0:0e:aa:f7:d5:23:8c:04:67:5e:45:3b:d7:8d:0b:db:e5:c4:
         fc:64:ed:ff:cb:a8:5c:35:36:a2:a9:db:3e:42:24:27:56:4f:
         0d:c8:e6:db:f1:bd:80:aa:1d:c9:b1:e6:ba:d6:07:d2:3f:e7:
         d8:7a:c4:1a:2c:c0:9f:90:e5:80:61:7b:3a:35:08:97:b2:2f:
         ec:95:a7:5d:c0:a4:7b:fc:6d:16:94:9a:07:06:16:41:97:f6:
         96:a7:62:db:0d:03:59:72:df:a1:23:a8:ce:ec:a4:ec:91:48:
         de:b5:bd:98:40:e0:0a:a6:1e:e1:46:f2:38:d1:8e:4b:dc:e3:
         8d:69:2b:42:d3:16:87:f9:3b:cf:2d:3e:25:42:a6:ec:d4:7a:
         66:c1:dd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----