Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/34/34352e3132392e33342e302f32342d3234203d3e20323133303335.roa
File:                     34352e3132392e33342e302f32342d3234203d3e20323133303335.roa (raw, json)
Hash identifier:          3Z0oOcEh5lE7Q4sgmP3dfzo/rcFqsntZlQK+ukR1VMM=
Subject key identifier:   4A:45:29:E6:F7:98:57:FF:53:FE:77:FF:0E:69:3A:E6:4D:6F:EA:7F
Certificate issuer:       /CN=c87179c1501e173869629be525afd3206b2588d9
Certificate serial:       2A1EED42F3C0BEB699EF37576C37ABB52B924EE5
Authority key identifier: C8:71:79:C1:50:1E:17:38:69:62:9B:E5:25:AF:D3:20:6B:25:88:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yHF5wVAeFzhpYpvlJa_TIGsliNk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/34/34352e3132392e33342e302f32342d3234203d3e20323133303335.roa
Signing time:             Mon 30 Nov 2020 19:12:52 +0000
ROA not before:           Mon 30 Nov 2020 19:07:52 +0000
ROA not after:            Mon 29 Nov 2021 19:12:52 +0000
asID:                     213035
IP address blocks:        45.129.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:1e:ed:42:f3:c0:be:b6:99:ef:37:57:6c:37:ab:b5:2b:92:4e:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c87179c1501e173869629be525afd3206b2588d9
        Validity
            Not Before: Nov 30 19:07:52 2020 GMT
            Not After : Nov 29 19:12:52 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:19:2d:d5:7d:78:5e:d3:9a:f4:24:1b:ad:e2:
                    b6:7b:dd:0f:ee:9e:8d:45:50:a8:42:8c:8c:37:4c:
                    3c:56:7c:c7:36:00:91:1d:3c:13:92:05:fc:da:de:
                    8e:e9:c6:ea:f4:12:b1:85:49:b4:87:a9:aa:b4:02:
                    d3:aa:6d:e5:cc:0e:d9:91:f6:6b:50:b4:c0:61:a1:
                    e9:cb:42:64:d1:cf:31:e5:4f:b6:84:9b:b9:1d:b2:
                    54:84:67:86:34:27:f6:ac:74:6d:83:f4:ea:89:dc:
                    d7:d2:96:97:7f:88:db:7b:4c:eb:3e:de:67:4c:68:
                    d7:47:12:2f:2a:2b:3e:94:78:21:a1:20:63:f2:e3:
                    70:6b:40:e2:79:71:83:c5:6e:23:24:bb:69:33:98:
                    a3:a3:c0:b5:e8:52:f8:08:85:bd:ea:c4:49:1b:4d:
                    fb:46:44:8a:28:1a:2e:2f:e0:0c:5f:54:ae:fa:64:
                    4e:4f:87:d3:bc:f2:24:29:b3:c0:c7:11:08:8e:c2:
                    6f:ed:9e:fc:6d:e8:f4:cf:ce:c0:1d:4c:29:e1:f0:
                    c8:bd:15:79:80:10:a4:39:d0:6e:68:1f:2d:fa:a0:
                    b6:9c:60:0a:25:42:8a:32:ba:fc:34:66:3f:cc:89:
                    2e:2e:27:a2:5a:69:19:96:cf:ca:37:74:61:63:dc:
                    e3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:45:29:E6:F7:98:57:FF:53:FE:77:FF:0E:69:3A:E6:4D:6F:EA:7F
            X509v3 Authority Key Identifier:
                keyid:C8:71:79:C1:50:1E:17:38:69:62:9B:E5:25:AF:D3:20:6B:25:88:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/34/C87179C1501E173869629BE525AFD3206B2588D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHF5wVAeFzhpYpvlJa_TIGsliNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/34/34352e3132392e33342e302f32342d3234203d3e20323133303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.129.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:05:61:a6:5d:0c:bf:ce:8c:a3:32:11:49:55:04:0c:16:c8:
         be:29:7c:23:60:fc:40:35:59:b3:89:93:19:e1:d0:0f:1e:b7:
         da:cf:86:ca:86:0c:5d:f1:58:5c:aa:8a:3f:4d:2f:4f:9f:e2:
         74:d2:a7:30:37:9c:0d:90:3c:98:bd:d0:30:e2:9d:38:77:fa:
         f5:bf:9d:3b:30:4d:de:e4:c5:1d:4d:ae:04:c5:2e:86:f5:28:
         57:b6:fd:c2:b5:f4:aa:11:e4:eb:3f:72:36:36:75:20:1c:e8:
         c7:ce:52:49:e2:85:31:7a:09:5a:e2:a2:bc:4f:1c:24:cb:53:
         83:d2:57:d5:c4:ff:02:18:05:9c:d3:38:85:e5:37:47:3b:89:
         11:51:41:3d:d4:d0:8d:be:eb:ec:9d:de:c5:9b:e4:7f:11:01:
         db:93:ab:a6:45:d4:a4:31:0a:59:f5:58:2a:36:cc:27:8a:d8:
         66:46:7d:cd:a3:4d:4a:79:4a:86:fa:63:0c:93:14:bd:b2:e8:
         5e:fd:c6:78:79:fd:b4:f5:56:4b:33:0f:68:bb:56:bd:ed:09:
         d2:29:1e:be:2c:82:b7:9b:d9:ba:42:f4:4e:49:dc:89:49:01:
         a5:02:92:37:c5:50:86:b6:14:94:f1:7b:49:57:9b:97:ee:64:
         01:8f:43:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----