Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/127/34352e31342e39302e302f32342d3234203d3e20323131383331.roa
File:                     34352e31342e39302e302f32342d3234203d3e20323131383331.roa (raw, json)
Hash identifier:          sw0hdAmYL+8huE5vBl4/LBRn1wkhDZwM7CE3BXrLqSg=
Subject key identifier:   A3:B9:06:E2:8B:7F:61:8F:A4:A6:E5:70:5A:7B:DD:2A:86:2F:7C:B0
Certificate issuer:       /CN=4d4a5c071e3c7b47733e1a5a926ffc945fa67e26
Certificate serial:       0EBDC24874F7070A5245BDF312F1D1EE4463C76F
Authority key identifier: 4D:4A:5C:07:1E:3C:7B:47:73:3E:1A:5A:92:6F:FC:94:5F:A6:7E:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TUpcBx48e0dzPhpakm_8lF-mfiY.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/127/34352e31342e39302e302f32342d3234203d3e20323131383331.roa
Signing time:             Sat 13 Feb 2021 18:30:12 +0000
ROA not before:           Sat 13 Feb 2021 18:25:12 +0000
ROA not after:            Sat 12 Feb 2022 18:30:12 +0000
asID:                     211831
IP address blocks:        45.14.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:bd:c2:48:74:f7:07:0a:52:45:bd:f3:12:f1:d1:ee:44:63:c7:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d4a5c071e3c7b47733e1a5a926ffc945fa67e26
        Validity
            Not Before: Feb 13 18:25:12 2021 GMT
            Not After : Feb 12 18:30:12 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:99:ab:2f:22:cc:bc:62:3e:07:08:72:5c:ee:
                    b8:0e:05:5b:c1:b1:a4:cb:ab:5d:cc:4f:c9:62:de:
                    60:ca:a3:8b:85:c2:e3:73:83:08:6a:93:6e:7e:16:
                    03:a0:db:af:9f:dc:f5:09:6c:85:7b:f5:d9:56:b2:
                    41:be:50:e4:e5:1a:04:10:55:36:47:63:1f:18:c5:
                    8d:0f:b3:3e:ab:b0:5e:0b:70:98:06:2e:72:09:2a:
                    b3:3f:b3:bc:3a:6b:a6:b9:76:c2:5a:cf:b8:ee:71:
                    97:56:49:e5:59:7a:29:1e:09:dd:b1:1f:4a:29:fe:
                    79:20:2a:85:6c:a8:28:d4:54:df:4b:b7:09:4d:33:
                    df:b4:f3:87:f2:40:b9:a0:a8:f9:45:50:33:01:ea:
                    9c:e8:c4:95:41:8a:54:b0:54:69:da:05:64:b1:74:
                    d2:2c:3e:65:bf:46:3a:62:b3:4c:f3:34:0e:bd:82:
                    17:be:57:18:eb:fe:38:3f:68:20:36:48:0a:59:85:
                    4d:20:55:db:32:04:99:09:8f:65:f8:23:2f:b8:15:
                    22:4b:08:a6:ca:9b:66:94:5e:b9:19:3e:cb:08:e2:
                    fb:ff:a7:56:41:c2:12:1c:fd:c9:94:d5:d7:b5:b4:
                    b5:6a:9b:83:ad:59:3a:3a:90:a9:0b:99:be:4a:52:
                    e8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B9:06:E2:8B:7F:61:8F:A4:A6:E5:70:5A:7B:DD:2A:86:2F:7C:B0
            X509v3 Authority Key Identifier:
                keyid:4D:4A:5C:07:1E:3C:7B:47:73:3E:1A:5A:92:6F:FC:94:5F:A6:7E:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/127/4D4A5C071E3C7B47733E1A5A926FFC945FA67E26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TUpcBx48e0dzPhpakm_8lF-mfiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/127/34352e31342e39302e302f32342d3234203d3e20323131383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.14.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:ac:10:9e:46:50:a4:5f:76:f6:f5:f0:7d:89:c9:3d:df:3a:
         5f:a7:cf:a5:c0:ad:1a:ab:2f:55:f3:95:4f:84:ef:7a:ba:1c:
         c3:48:8d:2e:6c:8a:6a:c2:43:65:77:f5:f0:da:aa:8d:c4:bb:
         37:ef:93:33:68:33:9d:84:ac:14:d4:23:b4:ef:d3:97:19:22:
         2a:93:83:c8:e7:4c:7d:cd:cd:12:ad:84:18:ae:5d:7f:31:f9:
         70:24:7f:91:48:d5:42:01:dc:c3:18:da:9b:4a:ac:0f:6a:b9:
         7a:5d:15:65:b8:f0:5a:85:d5:a5:54:a7:85:62:95:3a:97:97:
         19:fb:3e:c7:54:ae:f2:5b:6d:b5:98:1f:4c:e0:b0:44:8d:f3:
         2e:b7:83:e9:ee:79:03:ba:80:30:dc:6e:be:e0:d8:30:35:df:
         f9:1c:07:a9:23:63:6a:3f:24:e5:d1:66:ba:cb:53:a5:ef:c5:
         32:73:35:68:8b:11:ba:79:da:39:fb:bb:1a:47:9c:a3:1c:80:
         59:25:b3:4e:b2:a6:95:e6:2c:9b:06:f3:d3:7c:e5:e4:56:a3:
         6f:7f:5c:8a:71:9d:e2:be:48:8a:b1:3c:55:ec:bb:c6:72:4f:
         bf:8c:fb:dd:db:47:bd:ab:89:86:51:6f:32:50:51:2a:2e:c4:
         af:a0:d5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----