Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/36/34352e3134302e3138372e302f32342d3234203d3e203235303938.roa
File:                     34352e3134302e3138372e302f32342d3234203d3e203235303938.roa (raw, json)
Hash identifier:          X1HYapM4VLF/uhW2WbjrHwcEmzHf9E9cN9kqKle+tMM=
Subject key identifier:   06:42:9E:99:67:79:F5:84:57:4D:E2:CB:9C:B6:B7:DA:37:99:84:A4
Certificate issuer:       /CN=01e7a569556a65e7d9852cf72ac4c466ac380be8
Certificate serial:       709466CD51218745CC12DFAE6D2E235D2A35D11A
Authority key identifier: 01:E7:A5:69:55:6A:65:E7:D9:85:2C:F7:2A:C4:C4:66:AC:38:0B:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AeelaVVqZefZhSz3KsTEZqw4C-g.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/36/34352e3134302e3138372e302f32342d3234203d3e203235303938.roa
Signing time:             Mon 30 Nov 2020 19:13:47 +0000
ROA not before:           Mon 30 Nov 2020 19:08:47 +0000
ROA not after:            Mon 29 Nov 2021 19:13:47 +0000
asID:                     25098
IP address blocks:        45.140.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:94:66:cd:51:21:87:45:cc:12:df:ae:6d:2e:23:5d:2a:35:d1:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01e7a569556a65e7d9852cf72ac4c466ac380be8
        Validity
            Not Before: Nov 30 19:08:47 2020 GMT
            Not After : Nov 29 19:13:47 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9b:fa:89:b3:1f:e3:ab:0a:6a:46:ca:17:7e:
                    4f:05:2a:70:6a:07:ad:85:86:88:dc:3b:4b:89:18:
                    29:36:24:6d:95:85:78:f5:61:33:15:80:00:b2:b7:
                    29:7c:2c:b4:09:d6:3a:5f:b2:bf:c4:1a:c0:98:3b:
                    71:dd:dc:02:3b:b6:eb:cd:4e:57:28:9a:36:a3:8f:
                    ba:eb:4b:23:17:2c:39:7b:61:9c:1f:51:41:e9:92:
                    37:4d:81:3c:5f:5a:e7:cf:ce:45:f6:b2:b9:d2:ed:
                    fb:de:b9:b3:4d:9d:9d:b0:2d:68:1d:ac:6e:32:82:
                    63:b7:60:cc:26:c7:35:6f:62:95:f9:b3:c7:d8:97:
                    2a:fc:ce:63:55:65:73:44:03:59:b0:12:83:c5:93:
                    00:91:2d:29:0a:fc:64:b4:d4:83:4d:ee:de:87:04:
                    d2:57:1c:14:27:2b:2f:e8:1b:da:f2:a1:05:f0:e8:
                    6d:19:4f:54:d6:7a:da:ac:48:d7:ec:c9:4f:fc:d7:
                    54:f4:67:47:c8:32:4e:93:42:5b:e8:6e:57:5e:93:
                    80:a2:49:3b:88:b9:c9:12:7d:e9:b5:65:00:ad:4b:
                    54:36:d4:06:ff:56:43:cb:f0:74:3d:d8:dd:a2:19:
                    96:c2:b5:54:b8:ad:3a:21:b5:45:61:61:69:18:bd:
                    eb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:42:9E:99:67:79:F5:84:57:4D:E2:CB:9C:B6:B7:DA:37:99:84:A4
            X509v3 Authority Key Identifier:
                keyid:01:E7:A5:69:55:6A:65:E7:D9:85:2C:F7:2A:C4:C4:66:AC:38:0B:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/36/01E7A569556A65E7D9852CF72AC4C466AC380BE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AeelaVVqZefZhSz3KsTEZqw4C-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/36/34352e3134302e3138372e302f32342d3234203d3e203235303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.140.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:1f:73:31:ca:4e:77:f7:4c:ef:72:78:f7:f0:c3:bd:41:bf:
         be:b0:53:9c:c5:36:0e:1a:77:8d:b3:a2:8c:92:12:ad:02:ca:
         69:b8:aa:8a:c3:2c:a0:3c:5f:9f:f7:05:7f:58:b1:98:67:ff:
         7a:f9:93:2f:29:fe:49:ac:e4:3f:25:39:7a:96:cc:2e:44:f0:
         01:a6:9f:0f:d2:fa:22:a5:3b:6b:df:12:09:80:2d:b8:5e:1a:
         32:d3:41:de:e0:2a:17:9d:4a:07:c6:72:9f:9e:bf:e5:a1:53:
         f1:e1:a9:12:f5:6f:ff:38:eb:3c:19:97:43:96:ee:a3:49:ef:
         51:c6:b1:71:c1:28:e2:7f:52:93:4e:5f:4a:54:fa:98:0c:fb:
         3c:0d:5e:c4:88:ba:70:3c:01:05:39:3b:f7:69:9c:37:21:ee:
         6a:de:69:77:f0:b2:99:cf:4a:97:28:4e:de:f4:ca:55:b1:aa:
         b8:54:20:9c:f6:a9:44:a5:98:4d:32:64:13:b0:26:d9:58:23:
         74:99:d4:ea:68:27:5d:79:e8:bf:0a:d4:72:38:26:f7:a6:43:
         12:c6:da:bb:9a:3e:51:20:aa:dc:1a:c0:da:4f:17:46:94:78:
         1c:c8:07:69:12:80:c1:46:f5:3e:6a:1e:65:bd:37:d3:61:32:
         85:4b:c0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----