Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/36/34352e3134302e3138372e302f32342d3234203d3e203233343730.roa
File:                     34352e3134302e3138372e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          iK8e9wRmLpIHBnc8suETlAVYT/ewZPupUagOur6jotk=
Subject key identifier:   96:3C:F6:2B:34:C5:D7:4B:B2:10:73:9A:AC:17:F2:63:13:73:7E:9B
Certificate issuer:       /CN=01e7a569556a65e7d9852cf72ac4c466ac380be8
Certificate serial:       60889054A40A060A959316E0780082727AC14917
Authority key identifier: 01:E7:A5:69:55:6A:65:E7:D9:85:2C:F7:2A:C4:C4:66:AC:38:0B:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AeelaVVqZefZhSz3KsTEZqw4C-g.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/36/34352e3134302e3138372e302f32342d3234203d3e203233343730.roa
Signing time:             Thu 07 Jan 2021 20:58:39 +0000
ROA not before:           Thu 07 Jan 2021 20:53:39 +0000
ROA not after:            Thu 06 Jan 2022 20:58:39 +0000
asID:                     23470
IP address blocks:        45.140.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:88:90:54:a4:0a:06:0a:95:93:16:e0:78:00:82:72:7a:c1:49:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01e7a569556a65e7d9852cf72ac4c466ac380be8
        Validity
            Not Before: Jan  7 20:53:39 2021 GMT
            Not After : Jan  6 20:58:39 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:10:62:b4:b2:d2:38:d2:70:92:3c:d0:74:fe:
                    12:6c:c4:7f:4e:79:5a:ae:45:f6:f5:2a:ca:eb:06:
                    43:74:0b:d0:d1:d0:07:a2:aa:e0:52:07:5f:57:a4:
                    6b:fa:cf:d1:d3:76:89:96:34:73:f4:90:a9:2f:22:
                    da:20:0f:6a:20:f1:3c:88:ac:df:4f:95:2e:64:3c:
                    c6:b0:0a:bf:ec:7d:27:05:62:4c:45:e3:66:03:b1:
                    f2:f9:33:ff:18:06:f5:9d:bf:a2:9d:03:68:8f:da:
                    a0:b2:cc:a1:3b:a0:81:d5:08:07:e4:d5:e7:6b:cd:
                    76:61:f3:0d:2e:dc:c0:16:af:13:4e:d7:fd:f7:1c:
                    dc:5e:3d:19:61:ea:ff:05:8b:19:93:eb:d8:7e:4e:
                    dd:f2:34:52:31:b3:d7:cb:76:b9:c7:31:18:6f:4b:
                    ff:5c:e4:2e:75:cc:fb:0e:aa:1d:b0:bd:22:2f:ca:
                    52:3f:a8:58:aa:72:7f:50:d7:51:ab:20:c5:be:c7:
                    d1:ec:a3:1f:2e:4f:45:75:3b:14:64:68:fb:b0:4c:
                    21:3c:b6:a9:f3:e2:65:62:cb:3b:54:6f:8a:9d:6a:
                    04:ec:f3:e5:c6:8f:1e:d5:8d:82:cc:06:3d:59:d9:
                    9c:02:5b:5d:2c:bd:cb:fe:b6:7d:14:8d:7e:f6:23:
                    a0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:3C:F6:2B:34:C5:D7:4B:B2:10:73:9A:AC:17:F2:63:13:73:7E:9B
            X509v3 Authority Key Identifier:
                keyid:01:E7:A5:69:55:6A:65:E7:D9:85:2C:F7:2A:C4:C4:66:AC:38:0B:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/36/01E7A569556A65E7D9852CF72AC4C466AC380BE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AeelaVVqZefZhSz3KsTEZqw4C-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/36/34352e3134302e3138372e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.140.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:f6:ac:11:67:a5:4b:75:9b:d8:ec:7d:59:e4:60:40:51:35:
         8a:49:2a:12:7a:cd:18:9b:5f:e3:34:fd:87:38:86:58:10:c0:
         13:57:0f:6a:8f:37:35:e5:b8:90:45:9c:46:e2:bc:b1:35:89:
         10:67:16:c3:64:f8:77:f6:c2:0e:03:76:dd:91:f1:bb:16:27:
         25:04:f4:0c:c7:a3:1d:cd:b3:a9:b5:72:cb:fc:ce:2c:91:6e:
         38:73:1e:2e:45:7a:3b:21:a9:5f:b4:6d:0a:02:f2:6c:43:3d:
         6c:3b:4a:8f:aa:20:0d:7d:e0:a8:3a:7e:e1:03:19:6d:82:ff:
         54:47:67:bf:c8:df:3c:e6:94:5e:6b:55:16:3f:0d:6e:10:78:
         7d:5a:34:d4:04:00:01:7e:a4:fe:e8:34:6d:8d:78:da:21:4d:
         e7:bc:2b:6b:de:1d:ec:97:e6:5a:36:83:9c:32:13:e8:ef:43:
         af:26:6a:ff:25:dc:22:e9:ca:1f:b1:99:fe:41:c4:6d:bc:a8:
         b4:82:cb:d8:3f:98:58:40:e7:39:d0:ad:3d:9e:27:ff:70:44:
         63:a2:8c:db:1c:98:e4:31:35:40:62:5b:ad:c5:99:cd:cb:cb:
         e7:d4:37:7b:b2:86:f0:e3:fa:84:a4:68:8b:c5:0c:f1:84:28:
         e4:ca:c1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----