Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/11/34352e3134312e32302e302f32332d3234203d3e20323132333832.roa
File:                     34352e3134312e32302e302f32332d3234203d3e20323132333832.roa (raw, json)
Hash identifier:          imj8wDcj0Rbnzn9MRzcOiJHqR3Or/F64BCS0repE1V8=
Subject key identifier:   23:02:7F:DD:E8:CF:6D:0E:7C:BB:5C:6B:9A:45:E7:87:DF:23:1C:E2
Certificate issuer:       /CN=54ed4605385d5edb0dd5c3ea049c52a5159b7cf2
Certificate serial:       21A88F8BBB5B2EA4654796995C4D13084D240371
Authority key identifier: 54:ED:46:05:38:5D:5E:DB:0D:D5:C3:EA:04:9C:52:A5:15:9B:7C:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VO1GBThdXtsN1cPqBJxSpRWbfPI.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/11/34352e3134312e32302e302f32332d3234203d3e20323132333832.roa
Signing time:             Fri 27 Nov 2020 15:10:09 +0000
ROA not before:           Fri 27 Nov 2020 15:05:09 +0000
ROA not after:            Fri 26 Nov 2021 15:10:09 +0000
asID:                     212382
IP address blocks:        45.141.20.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:a8:8f:8b:bb:5b:2e:a4:65:47:96:99:5c:4d:13:08:4d:24:03:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54ed4605385d5edb0dd5c3ea049c52a5159b7cf2
        Validity
            Not Before: Nov 27 15:05:09 2020 GMT
            Not After : Nov 26 15:10:09 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:39:7b:45:db:95:71:9a:43:3c:4e:c1:4e:96:
                    7d:2f:90:8d:c8:13:67:09:75:c8:8d:6c:df:df:91:
                    55:f8:43:64:07:8a:c3:1e:21:0d:c6:6b:ba:4b:27:
                    9b:70:e2:77:de:6c:fa:12:34:14:7f:1a:bb:27:c1:
                    1e:1e:49:35:c1:b5:7f:75:29:02:dc:78:25:19:9b:
                    6d:23:82:fb:ba:e7:93:2e:1d:12:39:44:00:a0:b5:
                    37:a3:5f:dd:4a:fe:87:bb:8f:4c:95:bc:6a:fa:70:
                    73:cf:86:88:2f:af:9e:79:74:81:d0:79:03:a8:cd:
                    d9:7f:72:71:ac:4c:d4:11:72:ca:9d:ce:c6:66:0c:
                    ab:78:2e:ad:ea:14:62:66:e5:49:1d:20:8c:37:14:
                    27:db:f4:06:41:9b:3d:c3:42:23:2a:c2:57:a0:16:
                    90:e9:67:b1:bb:37:06:08:7f:e7:ae:01:da:50:54:
                    b2:22:50:b6:69:a3:63:3e:94:f1:70:7e:2e:69:f3:
                    3e:cd:02:21:80:18:8f:11:d6:0e:61:54:4e:45:35:
                    2b:00:b4:be:8b:a4:94:c5:d9:93:f6:3d:e8:eb:2d:
                    8a:a5:7a:0b:2c:c1:0a:c7:c9:11:c9:02:dc:10:97:
                    0a:6d:cc:40:e6:7b:91:1e:d5:b9:88:39:e1:5f:48:
                    a0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:02:7F:DD:E8:CF:6D:0E:7C:BB:5C:6B:9A:45:E7:87:DF:23:1C:E2
            X509v3 Authority Key Identifier:
                keyid:54:ED:46:05:38:5D:5E:DB:0D:D5:C3:EA:04:9C:52:A5:15:9B:7C:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/11/54ED4605385D5EDB0DD5C3EA049C52A5159B7CF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VO1GBThdXtsN1cPqBJxSpRWbfPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/11/34352e3134312e32302e302f32332d3234203d3e20323132333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.141.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:5d:37:08:66:79:9b:0b:68:3c:60:28:bb:32:77:48:a0:d7:
         7a:de:69:46:a3:04:e8:54:4c:36:82:69:c3:93:fe:fd:33:37:
         e8:f9:44:cc:06:c4:b8:ea:aa:e1:e2:fe:ea:51:b0:10:e9:b6:
         70:62:c8:b5:46:76:98:22:38:01:ed:7e:e7:ab:47:92:b0:cc:
         24:58:2b:55:6f:98:81:89:7c:88:f5:40:d8:ca:bd:36:2e:74:
         23:6b:79:e5:75:61:e0:54:da:21:79:97:7d:df:a2:70:d2:13:
         61:f3:a5:ed:d6:59:8f:1b:41:3c:1e:b2:71:07:1f:2e:6e:d5:
         7a:1b:86:f3:94:61:fa:d6:e3:bc:f7:04:83:cc:83:0e:bb:5b:
         76:15:f5:a9:9b:6e:7b:66:62:7a:aa:65:99:cf:cb:63:cc:0e:
         4f:3f:bb:2e:4f:7a:2f:5f:77:54:23:fc:06:71:de:cb:1d:60:
         e3:bf:b1:36:95:9b:f5:f2:f3:e2:74:72:64:1e:fb:15:b3:14:
         b1:07:a8:43:bf:a7:30:78:33:1a:15:29:cf:96:70:18:fb:0a:
         f7:ad:fd:4e:2b:71:1b:08:a8:63:99:33:8c:70:6f:f3:04:28:
         8e:60:f7:10:97:ce:94:c8:a9:ee:f4:74:47:fa:16:db:b1:70:
         f2:3d:be:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----