Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/130/34352e3135322e34352e302f32342d3234203d3e20313334303934.roa
File:                     34352e3135322e34352e302f32342d3234203d3e20313334303934.roa (raw, json)
Hash identifier:          9wGy+ncd+C76pFCbB7NBe8vhzPt3eMs1daX3iwg4HUg=
Subject key identifier:   B5:97:BB:85:00:A3:8C:2D:4D:D1:CA:1F:34:22:C8:15:96:91:D1:3D
Certificate issuer:       /CN=4ca71a2c584e7f45e94dab910e5010135085e9d7
Certificate serial:       10D566B0DC5CF751288747776CF19F80E5A5AF92
Authority key identifier: 4C:A7:1A:2C:58:4E:7F:45:E9:4D:AB:91:0E:50:10:13:50:85:E9:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TKcaLFhOf0XpTauRDlAQE1CF6dc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/130/34352e3135322e34352e302f32342d3234203d3e20313334303934.roa
Signing time:             Tue 01 Dec 2020 23:27:53 +0000
ROA not before:           Tue 01 Dec 2020 23:22:53 +0000
ROA not after:            Tue 30 Nov 2021 23:27:53 +0000
asID:                     134094
IP address blocks:        45.152.45.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:d5:66:b0:dc:5c:f7:51:28:87:47:77:6c:f1:9f:80:e5:a5:af:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ca71a2c584e7f45e94dab910e5010135085e9d7
        Validity
            Not Before: Dec  1 23:22:53 2020 GMT
            Not After : Nov 30 23:27:53 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7b:b5:bd:58:29:83:00:e0:02:fd:0a:5d:a5:
                    b3:10:17:fb:8c:cf:99:1c:ce:2d:62:6e:fb:04:73:
                    35:4d:83:bd:d7:9d:21:ba:d5:61:e4:05:62:98:ca:
                    36:8a:18:75:b2:a4:18:b3:46:d3:c1:5f:51:06:ba:
                    fd:11:dc:f1:47:e7:7a:3b:da:d7:25:0f:03:b0:b1:
                    31:1c:f2:d2:3a:61:c8:2d:81:1c:ec:e1:1c:2f:c2:
                    a2:3a:ae:62:19:27:e5:8b:45:c4:29:ed:6f:ec:63:
                    50:15:d6:16:f6:fa:d6:11:dc:b1:e5:ac:69:0c:84:
                    41:7e:19:a4:b6:83:c1:65:80:69:58:6e:00:ad:64:
                    4d:3f:f3:26:5f:80:6e:9f:e3:20:da:ec:38:ae:35:
                    88:7b:3c:59:ae:3d:da:bf:c4:a7:c6:d2:38:2f:e0:
                    63:fd:1d:7b:ac:8a:b8:3f:db:55:8c:37:d9:d1:61:
                    c9:f3:67:ba:4f:97:4b:4e:34:39:57:ec:e4:cb:5b:
                    a2:36:ac:42:de:90:98:e6:37:e4:af:60:e5:2f:20:
                    ca:ec:ae:87:86:9d:a0:79:56:f0:5f:d0:33:48:d8:
                    3e:c9:c4:06:f1:fe:e5:04:02:cb:15:b5:a8:e5:59:
                    9e:06:b6:1c:07:1d:1c:6f:4c:a3:aa:4b:23:a1:c9:
                    85:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:97:BB:85:00:A3:8C:2D:4D:D1:CA:1F:34:22:C8:15:96:91:D1:3D
            X509v3 Authority Key Identifier:
                keyid:4C:A7:1A:2C:58:4E:7F:45:E9:4D:AB:91:0E:50:10:13:50:85:E9:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/130/4CA71A2C584E7F45E94DAB910E5010135085E9D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKcaLFhOf0XpTauRDlAQE1CF6dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/130/34352e3135322e34352e302f32342d3234203d3e20313334303934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.152.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:42:9d:f9:04:53:ec:51:1d:8a:16:38:6b:e9:68:49:31:04:
         66:e6:85:75:c1:54:38:f3:d5:2f:80:1a:1e:0b:97:04:18:ee:
         b2:8d:8e:1d:fd:80:ee:f8:f2:53:29:d1:ce:70:03:0e:2d:36:
         14:03:5b:0b:ad:70:fb:e6:85:de:77:46:fb:48:a1:64:93:fc:
         ba:de:05:ed:80:0e:ad:c1:72:b2:2f:17:9a:ea:4f:c9:f3:4c:
         11:28:29:a0:1f:58:e0:56:5a:21:2f:a5:3c:fb:9d:f2:3d:09:
         37:c4:1d:3e:dc:41:90:7c:a9:48:9f:0b:0f:fb:5b:c1:b0:26:
         29:4a:e7:7a:d9:8b:a2:03:59:ec:31:71:77:66:eb:fb:b8:be:
         d9:e6:a1:a2:82:e8:7a:3c:03:b9:21:d7:97:7e:e0:9a:a5:9a:
         10:c5:93:4a:16:41:9a:44:9e:eb:76:84:8e:98:c7:9d:54:9a:
         5f:47:7f:62:b4:5f:0b:e4:b1:cc:0d:95:ff:c2:07:e2:63:b8:
         b0:95:c6:d9:80:5e:86:75:3f:4a:21:00:d9:f7:b1:c6:85:31:
         3f:5a:cd:3d:c0:53:b0:a3:d2:66:f6:a7:b7:a7:5c:81:63:3b:
         1a:0a:29:8a:36:02:1d:5d:54:11:77:1b:75:f9:29:d6:2e:02:
         84:36:4b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----