Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/95/34352e3134332e38322e302f32342d3234203d3e203630373231.roa
File:                     34352e3134332e38322e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          4mrojEL9MLTk6/NLOhiDm7wo5b3uhFuBi3ssCggdhDc=
Subject key identifier:   68:E9:8F:ED:47:1B:87:20:C6:CF:A8:E6:5A:CC:B7:0C:11:88:80:8D
Certificate issuer:       /CN=3bc02841ee05535614927daa2cd69e043e5a6286
Certificate serial:       455DFCB15010E1E138EAE90BFB4FF1190E4BD069
Authority key identifier: 3B:C0:28:41:EE:05:53:56:14:92:7D:AA:2C:D6:9E:04:3E:5A:62:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O8AoQe4FU1YUkn2qLNaeBD5aYoY.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/95/34352e3134332e38322e302f32342d3234203d3e203630373231.roa
Signing time:             Wed 13 Jan 2021 08:23:04 +0000
ROA not before:           Wed 13 Jan 2021 08:18:04 +0000
ROA not after:            Wed 12 Jan 2022 08:23:04 +0000
asID:                     60721
IP address blocks:        45.143.82.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:5d:fc:b1:50:10:e1:e1:38:ea:e9:0b:fb:4f:f1:19:0e:4b:d0:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bc02841ee05535614927daa2cd69e043e5a6286
        Validity
            Not Before: Jan 13 08:18:04 2021 GMT
            Not After : Jan 12 08:23:04 2022 GMT
        Subject: CN=3082010A0282010100B930B925F8086118C09A3FFE4471676830D773EF4F314A34EE1906CE2C9602919B9D7A57078E298D98DDF6BB318F5839E2A6B8974380CF5C7F0EEEA6E0256B2AF01DD5B621F935BCBF9BAD84577C097BB0F7271998461744094A1FD0FF62D0E834F6A8C0C63B6D7015266A45CA87F169B5336E4A05203714D3FA089C9E4BD35A8C8C933836A0A691BC095A52DDC81259D0BB46798EDDD89D2A80FEE82E56F94563A6C532C7E0B68E271BA09A4784CD246A88F1B171D5FAC043E4C6D5E632B45F86E31AFF6F20FE8B8EA3C44EE62842C6EF2A7E38615A4DE4140253B6B46D468C0359F02E7368EF40B2DED3655BA578BD93479A6B052B5D1E1F4ECDC451C413810203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:30:b9:25:f8:08:61:18:c0:9a:3f:fe:44:71:
                    67:68:30:d7:73:ef:4f:31:4a:34:ee:19:06:ce:2c:
                    96:02:91:9b:9d:7a:57:07:8e:29:8d:98:dd:f6:bb:
                    31:8f:58:39:e2:a6:b8:97:43:80:cf:5c:7f:0e:ee:
                    a6:e0:25:6b:2a:f0:1d:d5:b6:21:f9:35:bc:bf:9b:
                    ad:84:57:7c:09:7b:b0:f7:27:19:98:46:17:44:09:
                    4a:1f:d0:ff:62:d0:e8:34:f6:a8:c0:c6:3b:6d:70:
                    15:26:6a:45:ca:87:f1:69:b5:33:6e:4a:05:20:37:
                    14:d3:fa:08:9c:9e:4b:d3:5a:8c:8c:93:38:36:a0:
                    a6:91:bc:09:5a:52:dd:c8:12:59:d0:bb:46:79:8e:
                    dd:d8:9d:2a:80:fe:e8:2e:56:f9:45:63:a6:c5:32:
                    c7:e0:b6:8e:27:1b:a0:9a:47:84:cd:24:6a:88:f1:
                    b1:71:d5:fa:c0:43:e4:c6:d5:e6:32:b4:5f:86:e3:
                    1a:ff:6f:20:fe:8b:8e:a3:c4:4e:e6:28:42:c6:ef:
                    2a:7e:38:61:5a:4d:e4:14:02:53:b6:b4:6d:46:8c:
                    03:59:f0:2e:73:68:ef:40:b2:de:d3:65:5b:a5:78:
                    bd:93:47:9a:6b:05:2b:5d:1e:1f:4e:cd:c4:51:c4:
                    13:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E9:8F:ED:47:1B:87:20:C6:CF:A8:E6:5A:CC:B7:0C:11:88:80:8D
            X509v3 Authority Key Identifier:
                keyid:3B:C0:28:41:EE:05:53:56:14:92:7D:AA:2C:D6:9E:04:3E:5A:62:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/95/3BC02841EE05535614927DAA2CD69E043E5A6286.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8AoQe4FU1YUkn2qLNaeBD5aYoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/95/34352e3134332e38322e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.143.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:bd:4a:b8:cb:15:fa:40:2f:86:12:8f:83:30:15:26:cc:5e:
         82:61:ba:60:f1:70:94:13:2a:c1:8c:e1:c3:66:c6:8d:fd:d8:
         66:b5:03:07:51:cd:da:12:a6:94:7f:81:37:e7:97:90:10:98:
         f4:19:89:03:e0:9b:d7:cd:65:cc:f3:fe:e0:cf:42:51:40:64:
         9b:ea:77:67:ef:06:4e:c8:8f:6e:1b:52:4a:38:97:6a:96:d4:
         69:60:52:2c:c3:4f:21:8a:12:21:3c:46:40:c0:bd:44:fb:bc:
         c7:d3:9a:b4:91:7a:b2:e1:cf:6b:54:5d:a7:a7:ec:da:24:9a:
         13:73:b4:e5:3d:c3:80:07:89:57:91:fa:1d:cb:f7:7b:e1:a7:
         54:81:14:f7:51:1e:65:ed:f2:26:ab:94:4c:26:e3:4d:2d:c2:
         ce:00:49:c3:7b:c2:1c:ff:60:d0:17:46:3b:0a:1b:ee:bb:b3:
         2b:d5:ac:4f:c1:7c:52:f6:82:2d:12:09:38:e3:fb:d8:34:51:
         29:2f:49:f0:b1:a5:1d:99:99:cc:5e:31:87:e1:00:36:dd:8b:
         6e:ee:95:b8:6a:5c:df:e3:e6:a7:ee:ee:96:87:1a:28:36:a8:
         16:39:f0:f7:99:d8:18:1d:c4:13:c0:fa:17:7e:e1:a4:53:b0:
         e6:dd:0f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----