Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/39/34352e3133372e3139332e302f32342d3234203d3e20323131383330.roa
File:                     34352e3133372e3139332e302f32342d3234203d3e20323131383330.roa (raw, json)
Hash identifier:          I8mBzqbRDaLNko7Egg0pVC04EYFk61ulIYKe7znVqzo=
Subject key identifier:   92:76:4A:9B:EC:E1:94:3C:60:BA:53:6E:5D:A0:20:25:E6:3A:C2:87
Certificate issuer:       /CN=101d22f56ee5531cc92d0861beae087dc3b08ec0
Certificate serial:       44E20A4E2140A4EE0DE7235DB759510B5D06B1A1
Authority key identifier: 10:1D:22:F5:6E:E5:53:1C:C9:2D:08:61:BE:AE:08:7D:C3:B0:8E:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EB0i9W7lUxzJLQhhvq4IfcOwjsA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/39/34352e3133372e3139332e302f32342d3234203d3e20323131383330.roa
Signing time:             Sat 13 Feb 2021 18:27:27 +0000
ROA not before:           Sat 13 Feb 2021 18:22:27 +0000
ROA not after:            Sat 12 Feb 2022 18:27:27 +0000
asID:                     211830
IP address blocks:        45.137.193.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e2:0a:4e:21:40:a4:ee:0d:e7:23:5d:b7:59:51:0b:5d:06:b1:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101d22f56ee5531cc92d0861beae087dc3b08ec0
        Validity
            Not Before: Feb 13 18:22:27 2021 GMT
            Not After : Feb 12 18:27:27 2022 GMT
        Subject: CN=3082010A0282010100C74496E0A4F0CBFCAB0DCEF6174384FFB297D431232F21420B94346FB4DE68C3ED53272BC29C0BDF454514D77709BAA0A3961F0968C9A52330FAB93B859CE682345C3ED384AF35F943DAC18937A32B85F12C9BC0BF2719F27CD7B71852ADB3A9BAA475C7DAAF60166C2E9ED36100B4D1703459CBCEB1FFF8C1683B3831CA998A6197B686B8C555ED04A8B6ED322DA28276AEB58FC724297E192FA3F0CD6B771A4C821CC44F0BC9AE0650EA196E855825098A2C9B6485428B7D89035F821763FD69B7ECDDCD9A20D38165EDA726E6854BB2217AEA03BA9D0ECF0CDB2D68BAA536FFC2B3FBFA488D8262DAD3D175A83F3B7396CFDCBB3F567C6A1EA2F6EDC006F10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:44:96:e0:a4:f0:cb:fc:ab:0d:ce:f6:17:43:
                    84:ff:b2:97:d4:31:23:2f:21:42:0b:94:34:6f:b4:
                    de:68:c3:ed:53:27:2b:c2:9c:0b:df:45:45:14:d7:
                    77:09:ba:a0:a3:96:1f:09:68:c9:a5:23:30:fa:b9:
                    3b:85:9c:e6:82:34:5c:3e:d3:84:af:35:f9:43:da:
                    c1:89:37:a3:2b:85:f1:2c:9b:c0:bf:27:19:f2:7c:
                    d7:b7:18:52:ad:b3:a9:ba:a4:75:c7:da:af:60:16:
                    6c:2e:9e:d3:61:00:b4:d1:70:34:59:cb:ce:b1:ff:
                    f8:c1:68:3b:38:31:ca:99:8a:61:97:b6:86:b8:c5:
                    55:ed:04:a8:b6:ed:32:2d:a2:82:76:ae:b5:8f:c7:
                    24:29:7e:19:2f:a3:f0:cd:6b:77:1a:4c:82:1c:c4:
                    4f:0b:c9:ae:06:50:ea:19:6e:85:58:25:09:8a:2c:
                    9b:64:85:42:8b:7d:89:03:5f:82:17:63:fd:69:b7:
                    ec:dd:cd:9a:20:d3:81:65:ed:a7:26:e6:85:4b:b2:
                    21:7a:ea:03:ba:9d:0e:cf:0c:db:2d:68:ba:a5:36:
                    ff:c2:b3:fb:fa:48:8d:82:62:da:d3:d1:75:a8:3f:
                    3b:73:96:cf:dc:bb:3f:56:7c:6a:1e:a2:f6:ed:c0:
                    06:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:76:4A:9B:EC:E1:94:3C:60:BA:53:6E:5D:A0:20:25:E6:3A:C2:87
            X509v3 Authority Key Identifier:
                keyid:10:1D:22:F5:6E:E5:53:1C:C9:2D:08:61:BE:AE:08:7D:C3:B0:8E:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/39/101D22F56EE5531CC92D0861BEAE087DC3B08EC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EB0i9W7lUxzJLQhhvq4IfcOwjsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/39/34352e3133372e3139332e302f32342d3234203d3e20323131383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:9a:ac:26:39:4b:2f:ec:c1:d8:74:db:57:6e:c4:a3:4f:3f:
         02:dc:cc:68:d4:3c:86:d0:76:0e:1e:2d:89:d3:6e:92:a0:ca:
         3b:c1:6e:32:bf:36:22:88:58:3b:90:d5:b7:b5:90:41:81:83:
         36:af:c6:63:5e:d9:5f:11:21:ac:89:10:63:56:46:11:0d:e9:
         5d:29:83:4e:69:ff:79:86:f1:05:96:a4:5c:31:c4:a0:96:c4:
         96:79:50:3b:46:e6:fe:20:b2:98:85:dc:d0:e3:67:9b:de:3d:
         a3:f4:06:41:12:a0:23:7a:8b:34:6c:4f:e7:d8:55:92:74:3f:
         0b:54:23:5b:a9:c5:2c:1d:ca:bc:2e:a9:d4:9e:09:46:ad:40:
         b6:76:2e:b2:f4:80:32:87:ad:eb:2a:82:88:73:ed:60:02:92:
         18:41:fc:51:ab:9f:47:a3:cb:93:af:ff:be:19:2a:87:26:3e:
         8e:69:45:3f:a0:7d:d1:93:b7:9d:d5:a9:9a:1a:8e:19:7e:88:
         c3:12:e1:7b:8e:df:dd:56:83:43:f6:a6:b2:03:be:e1:35:35:
         63:dd:72:f8:ab:92:68:b7:87:ab:f9:74:ff:ea:fa:14:f3:0c:
         5c:cc:9a:ca:c1:49:72:4b:19:e1:1c:39:8c:d3:24:f8:3f:14:
         b4:0d:8d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----