Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/110/34352e38352e3235302e302f32342d3234203d3e20313431313538.roa
File:                     34352e38352e3235302e302f32342d3234203d3e20313431313538.roa (raw, json)
Hash identifier:          c9uvXanXE2kKrnzAlVe2e4JDAfdrI2izEy/X8T0mCMY=
Subject key identifier:   D8:33:10:65:8B:F8:33:42:A4:36:F7:E2:DD:BC:9D:87:B0:13:B3:33
Certificate issuer:       /CN=ec0ff27c66f3730ecc006c25e94d0a070b8707df
Certificate serial:       21FE925AE6DEFCA3B7CD292F4442B0E575375159
Authority key identifier: EC:0F:F2:7C:66:F3:73:0E:CC:00:6C:25:E9:4D:0A:07:0B:87:07:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7A_yfGbzcw7MAGwl6U0KBwuHB98.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/110/34352e38352e3235302e302f32342d3234203d3e20313431313538.roa
Signing time:             Fri 19 Feb 2021 12:46:31 +0000
ROA not before:           Fri 19 Feb 2021 12:41:31 +0000
ROA not after:            Fri 18 Feb 2022 12:46:31 +0000
asID:                     141158
IP address blocks:        45.85.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:fe:92:5a:e6:de:fc:a3:b7:cd:29:2f:44:42:b0:e5:75:37:51:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec0ff27c66f3730ecc006c25e94d0a070b8707df
        Validity
            Not Before: Feb 19 12:41:31 2021 GMT
            Not After : Feb 18 12:46:31 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:24:66:ac:82:9e:ba:6c:85:9c:f3:ce:33:db:
                    53:81:8f:c3:54:c3:a1:e8:44:87:c9:58:bd:b2:a7:
                    c4:59:98:4e:24:54:63:75:95:bc:ad:17:a0:bd:4a:
                    e0:47:1d:16:40:f6:92:33:b0:4d:0f:2f:43:d4:09:
                    7b:3d:f4:a2:46:44:4e:94:32:25:ee:57:52:57:4a:
                    db:8a:41:f3:ca:ae:54:f2:49:32:40:f9:ed:c1:d9:
                    bf:c2:0d:2e:0b:44:fd:e0:e4:be:5f:08:9d:1e:42:
                    cc:6d:d8:ef:60:68:e9:60:33:1f:b6:d3:97:1e:33:
                    4a:bb:e3:ea:a2:0b:7e:f8:9e:b1:c5:16:ae:41:78:
                    1f:b0:64:8f:ee:7d:0f:f1:bf:99:03:39:9d:3f:a0:
                    ca:1d:9d:95:8c:ad:94:36:2c:e8:e3:b0:92:01:70:
                    d7:c3:9d:14:6e:e8:f3:f3:50:a8:c1:bf:e8:1a:b6:
                    3b:79:46:8c:0d:12:9b:88:fd:c7:42:24:28:24:12:
                    e6:6b:83:78:bc:a1:3d:0b:d6:3c:f2:f6:e2:1c:4d:
                    ac:50:2e:c8:72:89:7e:32:70:2f:7b:98:1f:cb:92:
                    64:c4:a7:e2:f2:65:07:9c:a4:e7:89:ec:79:d2:5c:
                    41:3b:a2:72:6d:91:16:cd:b2:6f:97:2b:d1:66:7c:
                    5e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:33:10:65:8B:F8:33:42:A4:36:F7:E2:DD:BC:9D:87:B0:13:B3:33
            X509v3 Authority Key Identifier:
                keyid:EC:0F:F2:7C:66:F3:73:0E:CC:00:6C:25:E9:4D:0A:07:0B:87:07:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/110/EC0FF27C66F3730ECC006C25E94D0A070B8707DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7A_yfGbzcw7MAGwl6U0KBwuHB98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/110/34352e38352e3235302e302f32342d3234203d3e20313431313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.85.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:d3:33:e7:19:34:ac:b5:57:34:e9:5e:aa:ff:36:92:70:98:
         7a:ad:34:fb:5d:88:3a:5e:76:56:be:d9:0b:33:44:02:46:9d:
         6d:6a:ed:1a:95:d0:32:8b:2c:f9:80:06:e7:6b:4f:ce:ac:00:
         4b:f7:d5:b1:85:87:8f:5b:b3:b9:25:08:fa:e3:01:36:1f:92:
         a4:3e:e4:b5:b4:55:d4:c7:d3:4e:63:55:5b:c1:7c:14:de:25:
         c7:95:6a:b6:36:27:43:4f:06:85:b6:f0:d9:1a:0b:fc:31:12:
         e2:98:13:4a:23:fe:8a:24:86:54:66:de:cf:0b:2b:0c:8d:fe:
         38:5d:c1:df:cf:1b:70:8b:b5:b9:73:ec:4e:97:6f:db:71:1f:
         d5:e4:81:a8:da:58:60:e3:6f:e4:82:af:2e:2b:10:db:88:7c:
         a5:c4:78:2e:fd:81:63:03:d0:6f:d5:f5:26:7a:32:89:2e:58:
         49:ce:39:7a:bc:c0:19:3d:06:98:33:46:92:fe:94:5d:eb:dc:
         a9:43:be:eb:dc:8d:9b:61:e8:f4:fa:f6:82:c6:9b:b0:0e:68:
         0e:55:91:4c:b5:70:35:8d:c6:ee:9c:99:47:37:2b:13:f8:34:
         d1:4e:83:13:04:7a:c4:2d:2d:00:24:13:e5:85:27:f4:ae:70:
         00:6e:17:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----