Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e3133322e3135362e302f32342d3234203d3e203630313137.roa
File:                     34352e3133322e3135362e302f32342d3234203d3e203630313137.roa (raw, json)
Hash identifier:          wdruAqf9bTR4gbdDo3+aRAjJPKCyuexNaPZoa4D7ftU=
Subject key identifier:   52:D7:9E:C7:00:83:12:6B:D3:52:30:3E:15:B0:0C:13:79:DC:93:FD
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       741DC9B9C618FB104235616F1FB4250E71FF6567
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3133322e3135362e302f32342d3234203d3e203630313137.roa
Signing time:             Wed 17 Nov 2021 18:57:03 +0000
ROA not before:           Wed 17 Nov 2021 18:52:03 +0000
ROA not after:            Wed 16 Nov 2022 18:57:03 +0000
asID:                     60117
IP address blocks:        45.132.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:1d:c9:b9:c6:18:fb:10:42:35:61:6f:1f:b4:25:0e:71:ff:65:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Nov 17 18:52:03 2021 GMT
            Not After : Nov 16 18:57:03 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c3:17:bc:85:0d:c7:99:12:ba:f5:30:81:5e:
                    0c:7e:3d:47:60:d1:e1:9f:91:71:7d:b6:e9:8a:63:
                    28:24:6a:38:9a:fd:9e:f2:da:6b:91:77:57:cf:1a:
                    60:ce:49:5e:88:25:34:a7:2e:ed:ed:a0:b1:8c:cd:
                    70:b2:c0:07:b9:f7:36:1e:bd:05:d9:ef:7d:eb:d9:
                    2f:99:f8:05:80:5d:71:6f:a9:9c:bd:c4:aa:38:50:
                    66:fb:8b:10:fa:56:fe:89:6b:36:65:46:b1:b1:d1:
                    d9:75:0a:bc:c2:da:3f:66:4b:88:f4:4d:90:43:09:
                    b9:22:82:a7:08:83:5b:e8:01:1a:83:f6:92:f1:f3:
                    53:23:1e:6d:23:c3:32:8f:15:0b:69:da:e1:4a:27:
                    00:91:bc:f5:8e:5e:2c:a8:f0:a4:60:88:8e:d8:56:
                    09:97:80:71:4c:18:71:da:5c:bf:11:27:32:e0:2a:
                    ad:55:16:4e:6b:82:7d:97:24:7c:30:84:6e:88:14:
                    5e:29:dd:5b:22:74:19:11:0a:f6:10:e2:13:41:23:
                    5b:8d:31:9c:03:c6:ae:44:ce:ee:5d:0c:ff:f5:a4:
                    88:b4:00:9d:f3:55:cf:0c:e1:5d:25:9e:a5:43:ab:
                    e0:c7:37:45:d2:6a:fb:4b:ed:89:6c:00:db:57:48:
                    7b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D7:9E:C7:00:83:12:6B:D3:52:30:3E:15:B0:0C:13:79:DC:93:FD
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3133322e3135362e302f32342d3234203d3e203630313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:da:8c:40:23:99:a7:5c:fc:a8:92:69:52:dc:9a:28:a2:bf:
         60:97:98:b3:9c:85:7e:3e:9d:3b:95:da:0a:d6:43:fe:b8:b1:
         fe:5c:38:e2:ab:06:7d:d5:0d:cc:e3:f5:f7:f8:59:e7:4b:f0:
         84:0c:25:3a:47:98:eb:eb:0b:87:9b:67:94:ed:9d:8b:0b:cf:
         3c:05:6f:1d:6b:f0:57:2e:d4:79:bb:d3:0c:08:93:55:21:79:
         64:3c:53:ef:0a:34:29:04:fc:05:b9:95:a1:b9:b1:35:72:b2:
         64:f8:96:f0:28:2c:8e:56:eb:a8:7f:c1:02:fb:bf:be:29:9a:
         2b:0f:c7:4e:9c:43:c5:2d:2b:86:54:76:7a:00:f2:5c:2c:fa:
         12:71:70:8b:9f:1b:29:96:b4:68:a6:c3:1c:3f:5b:e3:53:63:
         3c:a1:52:8d:db:84:38:0c:1f:a6:39:64:2c:18:1f:67:a3:4b:
         34:fb:3b:3b:0d:56:df:42:b1:d0:11:78:5d:e3:6c:8d:7b:f8:
         ed:de:d9:8e:ac:29:23:22:f8:b9:57:8e:d9:6a:ae:8d:4f:c0:
         99:2a:f7:09:22:70:73:12:79:70:eb:0b:83:f0:fa:47:cb:b9:
         0b:8c:bc:c9:1b:29:dd:f9:b1:d5:6f:71:e4:7a:90:dc:f6:48:
         09:77:0f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----