Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/32/34352e3133322e3135392e302f32342d3234203d3e20323037313839.roa
File:                     34352e3133322e3135392e302f32342d3234203d3e20323037313839.roa (raw, json)
Hash identifier:          91cTFLTvQEy/KlvdmQcq2BwcLwCfCBkU5mj+HMVqyns=
Subject key identifier:   E1:78:5F:DE:F9:BD:01:7C:6B:EC:B6:19:22:A2:1D:66:3A:2B:10:E0
Certificate issuer:       /CN=54f5873c142ab7b29dc4fd7fe7a23a384394c7b1
Certificate serial:       11FF69112AC422AE0356D384F256A876BBF6941D
Authority key identifier: 54:F5:87:3C:14:2A:B7:B2:9D:C4:FD:7F:E7:A2:3A:38:43:94:C7:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VPWHPBQqt7KdxP1_56I6OEOUx7E.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/32/34352e3133322e3135392e302f32342d3234203d3e20323037313839.roa
Signing time:             Mon 30 Nov 2020 19:13:13 +0000
ROA not before:           Mon 30 Nov 2020 19:08:13 +0000
ROA not after:            Mon 29 Nov 2021 19:13:13 +0000
asID:                     207189
IP address blocks:        45.132.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ff:69:11:2a:c4:22:ae:03:56:d3:84:f2:56:a8:76:bb:f6:94:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54f5873c142ab7b29dc4fd7fe7a23a384394c7b1
        Validity
            Not Before: Nov 30 19:08:13 2020 GMT
            Not After : Nov 29 19:13:13 2021 GMT
        Subject: CN=3082010A0282010100B7B7EE4DDE2CD8F4EF35F694B165D14E0CC638BD5FB2EDC73209AD8A7ED0A70D9C584EA0E97615F439CAB888083C274300842B68190322D438C34886AFA4E549FF87B83B4ABEFD09793FAF8FA82E6EBF7E30ADE6EFFB01DFA866EA1703364D7E0A701766BDEEB2E3629DAE317B2365C0B0C3588529C66BC1D69C83AAC35E1FAB5D59B20BBB94C92527659F551289D34F9ED369A3F59EC4640CD7F1B68F57CF049466B7A7BAB912FA6C68388D0A0FB5F080046FEF9DE5E53DFBB369C415245AA5DFC316BF1C4CAC3C35A2E8DB0B54F758B2F7090DD5484B4BB68381FAC8A20C5EE8620A2E2F787BE81B6CA909FD1136C6951C46A9640A7D3F3A4EC46C450367650203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b7:ee:4d:de:2c:d8:f4:ef:35:f6:94:b1:65:
                    d1:4e:0c:c6:38:bd:5f:b2:ed:c7:32:09:ad:8a:7e:
                    d0:a7:0d:9c:58:4e:a0:e9:76:15:f4:39:ca:b8:88:
                    08:3c:27:43:00:84:2b:68:19:03:22:d4:38:c3:48:
                    86:af:a4:e5:49:ff:87:b8:3b:4a:be:fd:09:79:3f:
                    af:8f:a8:2e:6e:bf:7e:30:ad:e6:ef:fb:01:df:a8:
                    66:ea:17:03:36:4d:7e:0a:70:17:66:bd:ee:b2:e3:
                    62:9d:ae:31:7b:23:65:c0:b0:c3:58:85:29:c6:6b:
                    c1:d6:9c:83:aa:c3:5e:1f:ab:5d:59:b2:0b:bb:94:
                    c9:25:27:65:9f:55:12:89:d3:4f:9e:d3:69:a3:f5:
                    9e:c4:64:0c:d7:f1:b6:8f:57:cf:04:94:66:b7:a7:
                    ba:b9:12:fa:6c:68:38:8d:0a:0f:b5:f0:80:04:6f:
                    ef:9d:e5:e5:3d:fb:b3:69:c4:15:24:5a:a5:df:c3:
                    16:bf:1c:4c:ac:3c:35:a2:e8:db:0b:54:f7:58:b2:
                    f7:09:0d:d5:48:4b:4b:b6:83:81:fa:c8:a2:0c:5e:
                    e8:62:0a:2e:2f:78:7b:e8:1b:6c:a9:09:fd:11:36:
                    c6:95:1c:46:a9:64:0a:7d:3f:3a:4e:c4:6c:45:03:
                    67:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:78:5F:DE:F9:BD:01:7C:6B:EC:B6:19:22:A2:1D:66:3A:2B:10:E0
            X509v3 Authority Key Identifier:
                keyid:54:F5:87:3C:14:2A:B7:B2:9D:C4:FD:7F:E7:A2:3A:38:43:94:C7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/32/54F5873C142AB7B29DC4FD7FE7A23A384394C7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPWHPBQqt7KdxP1_56I6OEOUx7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/32/34352e3133322e3135392e302f32342d3234203d3e20323037313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:d6:2a:68:fb:f0:75:ed:b0:39:e9:86:e6:e7:6d:9c:8d:81:
         31:9e:d2:f5:4b:f5:fc:92:32:9b:ec:1b:43:0d:1e:b4:d8:9d:
         a6:c9:d5:89:54:1d:3a:a3:28:df:87:98:12:90:88:92:16:b5:
         7c:a2:17:3a:ec:c2:e0:8e:12:88:fb:8d:f8:c8:48:5c:38:26:
         95:5d:f2:a0:a9:c1:0e:53:26:b4:75:6c:1a:80:0f:c7:bc:c2:
         7c:bd:41:8c:9d:b6:f2:d8:28:f5:06:8b:7d:85:76:b0:13:21:
         f6:32:74:32:3d:8f:a0:cb:5f:df:f7:20:81:eb:55:11:1e:70:
         a4:05:d2:d4:3e:12:5b:1a:7f:d3:ff:19:2b:8f:c8:ca:6d:6a:
         26:de:b9:c5:e5:25:d4:28:41:2b:ad:f4:d9:b6:ec:58:2c:1a:
         82:56:f9:55:7a:a1:95:17:92:45:8d:bd:9d:2a:f6:d2:52:c8:
         0e:df:84:2d:27:e6:5f:49:9c:24:f3:22:8a:7d:af:16:21:34:
         0d:70:f9:eb:76:9d:77:d6:ba:88:e4:39:82:92:91:6f:4a:48:
         11:86:bd:04:74:14:e0:43:f4:f9:64:55:eb:fe:cb:5e:f5:8a:
         b9:d2:60:17:68:9d:c6:10:5e:7a:37:c8:d3:89:c0:03:e3:6f:
         73:f8:98:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----