Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/33/34352e39302e3232322e302f32332d3234203d3e203631333137.roa
File:                     34352e39302e3232322e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          XIQEbrpihL9dXNQQ3DOEt3n914//Gs6LEA78gXIK5Go=
Subject key identifier:   AD:4A:FB:74:D4:17:83:D7:0D:A7:EA:7C:F1:C4:3A:BA:AF:81:92:BE
Certificate issuer:       /CN=67596b6a4cd6bfe459e1a9c589b881ff37abda27
Certificate serial:       0F74FF3D7E8AB331F70540F21464BDD0CDBAF63C
Authority key identifier: 67:59:6B:6A:4C:D6:BF:E4:59:E1:A9:C5:89:B8:81:FF:37:AB:DA:27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z1lrakzWv-RZ4anFibiB_zer2ic.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/33/34352e39302e3232322e302f32332d3234203d3e203631333137.roa
Signing time:             Mon 30 Nov 2020 19:12:27 +0000
ROA not before:           Mon 30 Nov 2020 19:07:27 +0000
ROA not after:            Mon 29 Nov 2021 19:12:27 +0000
asID:                     61317
IP address blocks:        45.90.222.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:74:ff:3d:7e:8a:b3:31:f7:05:40:f2:14:64:bd:d0:cd:ba:f6:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67596b6a4cd6bfe459e1a9c589b881ff37abda27
        Validity
            Not Before: Nov 30 19:07:27 2020 GMT
            Not After : Nov 29 19:12:27 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:90:e6:ab:4d:2f:c1:3d:e0:d5:07:ed:07:10:
                    ed:d8:1e:db:29:53:7f:46:44:a3:31:11:8b:a1:8b:
                    e8:76:a9:d3:e1:a0:0b:21:2e:e1:99:c1:e8:af:23:
                    94:b8:77:3e:a1:f9:4f:b9:a8:07:a5:8b:e7:8a:bf:
                    c9:3b:ef:bd:a4:f1:19:08:1f:71:e9:25:1a:e1:91:
                    5d:63:02:87:6a:a3:69:9f:72:63:80:92:01:00:4c:
                    e2:cf:65:68:a9:27:31:9a:14:a3:0b:d6:0f:1e:f3:
                    d5:5a:f8:da:12:59:28:96:30:d3:95:19:b8:4c:74:
                    47:cb:d0:7f:a4:9c:46:1e:c9:3d:87:64:b7:c2:0c:
                    21:44:74:f6:dd:cf:55:39:e8:61:31:dc:79:c4:9d:
                    c8:23:51:54:11:1c:b0:2e:19:b6:13:2b:24:73:13:
                    a8:9c:a8:cc:eb:3b:9c:dd:30:20:ea:b0:de:bd:16:
                    8c:86:e0:f3:bc:c3:29:24:71:ad:f0:79:7a:ed:55:
                    02:6e:65:83:7c:c9:a8:9f:1b:30:76:bd:9a:bc:2f:
                    91:2d:a3:3d:61:77:c8:7b:a5:83:ce:2a:91:f9:e8:
                    ff:ac:11:8b:8e:fd:71:6b:87:61:b4:cd:25:79:ee:
                    e0:7f:42:84:27:36:40:49:e6:0d:09:d9:0a:85:b1:
                    4b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:4A:FB:74:D4:17:83:D7:0D:A7:EA:7C:F1:C4:3A:BA:AF:81:92:BE
            X509v3 Authority Key Identifier:
                keyid:67:59:6B:6A:4C:D6:BF:E4:59:E1:A9:C5:89:B8:81:FF:37:AB:DA:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/33/67596B6A4CD6BFE459E1A9C589B881FF37ABDA27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1lrakzWv-RZ4anFibiB_zer2ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/33/34352e39302e3232322e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.90.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:19:eb:15:5d:7f:61:e9:eb:29:a0:ef:96:9c:84:51:60:60:
         91:4b:ae:73:4a:f6:b1:8e:47:16:ca:31:cb:33:3c:dd:f3:29:
         ba:fc:0b:7a:a9:78:cb:7b:e2:61:e5:d9:4f:ef:8e:3b:41:01:
         9b:63:82:ed:9b:40:4c:6e:af:eb:57:e0:f8:b5:04:41:54:3b:
         5b:4a:8c:00:d5:2b:25:73:6c:51:4f:88:d4:09:0e:4b:b5:00:
         44:bd:18:59:07:9f:51:18:5c:a2:ea:11:56:22:5e:8b:d1:c5:
         bf:f3:5b:ab:1f:67:61:ea:5c:bb:2f:87:e0:9a:39:ae:02:0a:
         d4:f5:1c:3c:b0:b9:ae:69:99:34:ba:8d:01:92:30:f0:e2:44:
         bf:ef:53:38:e5:30:ef:3b:92:b2:bb:3d:fc:57:eb:50:f4:56:
         6b:20:42:cf:73:e0:87:56:44:e3:8b:ed:34:ec:bb:e0:54:58:
         a9:44:bc:7b:82:59:8b:06:25:1e:48:fd:a5:6d:47:ca:24:4d:
         21:76:b3:ae:80:d4:ff:02:c2:b8:ba:11:5f:a0:29:2f:b4:ab:
         e4:38:4f:4e:ed:90:77:83:07:99:aa:df:62:ae:d2:01:a4:9f:
         c7:09:e0:71:fc:e4:5c:63:89:48:b4:2a:ae:bb:27:17:45:91:
         00:c0:73:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----