Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/25/34352e36372e3232302e302f32342d3234203d3e20323132333430.roa
File:                     34352e36372e3232302e302f32342d3234203d3e20323132333430.roa (raw, json)
Hash identifier:          H9lfLTaoxPc3ACoqVNcwNd3risne6D1bWAJXL/rwAg8=
Subject key identifier:   2E:4D:42:68:10:D2:46:E7:ED:8D:B3:7F:69:B9:E9:6A:74:D7:18:32
Certificate issuer:       /CN=852a307c4e0a2a4e7e38aa5164d4bc5cdb7cca49
Certificate serial:       1202E2A7A1C8422326C2422E35E2BAD02B4EF36A
Authority key identifier: 85:2A:30:7C:4E:0A:2A:4E:7E:38:AA:51:64:D4:BC:5C:DB:7C:CA:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hSowfE4KKk5-OKpRZNS8XNt8ykk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/25/34352e36372e3232302e302f32342d3234203d3e20323132333430.roa
Signing time:             Mon 30 Nov 2020 18:20:01 +0000
ROA not before:           Mon 30 Nov 2020 18:15:01 +0000
ROA not after:            Mon 29 Nov 2021 18:20:01 +0000
asID:                     212340
IP address blocks:        45.67.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:02:e2:a7:a1:c8:42:23:26:c2:42:2e:35:e2:ba:d0:2b:4e:f3:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=852a307c4e0a2a4e7e38aa5164d4bc5cdb7cca49
        Validity
            Not Before: Nov 30 18:15:01 2020 GMT
            Not After : Nov 29 18:20:01 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d2:8d:1d:b6:4b:05:63:36:a2:18:fa:a9:ce:
                    ae:51:38:a8:54:50:0c:af:18:ed:a7:33:55:77:7a:
                    ec:50:97:26:e2:22:e7:33:4a:e7:7e:56:49:7e:3b:
                    8e:6d:f4:61:bf:93:b6:92:a4:3f:0f:f5:a4:55:ec:
                    21:65:0f:64:55:bd:9d:d0:55:d6:19:77:57:36:2f:
                    8c:a4:e7:ed:d0:9c:8c:bc:1e:55:4a:52:df:bf:6b:
                    dd:c5:a4:dd:36:17:c3:69:e1:ef:05:62:58:d1:4c:
                    cc:25:f1:54:b5:e4:4f:90:b9:5c:3e:20:4e:8b:f8:
                    9a:8c:68:10:3e:20:15:39:32:4e:99:ab:eb:13:5f:
                    0a:0f:15:46:d8:7f:09:6a:9f:4d:38:8d:b1:d9:f9:
                    1e:05:7e:f0:43:9c:c2:99:52:2e:95:a1:f2:ae:3c:
                    d4:d8:7d:b3:22:fe:a8:8d:88:76:6b:30:78:ff:ee:
                    f4:3f:66:0a:cb:3c:63:04:7e:f7:40:2e:1a:2d:93:
                    30:37:48:2a:a3:69:c4:47:a1:3d:3f:54:9c:70:94:
                    52:ce:7a:d6:f3:eb:c0:53:9b:55:03:39:54:27:ef:
                    1a:17:dd:09:93:29:2e:8c:7b:ab:ad:f4:a0:f0:af:
                    69:01:bf:5a:ef:d0:93:4d:32:5d:b4:9c:49:62:1e:
                    c5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4D:42:68:10:D2:46:E7:ED:8D:B3:7F:69:B9:E9:6A:74:D7:18:32
            X509v3 Authority Key Identifier:
                keyid:85:2A:30:7C:4E:0A:2A:4E:7E:38:AA:51:64:D4:BC:5C:DB:7C:CA:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/25/852A307C4E0A2A4E7E38AA5164D4BC5CDB7CCA49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSowfE4KKk5-OKpRZNS8XNt8ykk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/25/34352e36372e3232302e302f32342d3234203d3e20323132333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.67.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:6c:16:ca:c2:6b:12:b6:4d:5e:59:0f:6c:ec:e6:89:42:37:
         34:5f:a7:bc:d5:7f:57:1a:79:59:ef:43:78:60:c9:42:59:b9:
         29:7d:cb:2e:02:79:7f:6f:e1:27:3a:90:91:d3:cb:cc:10:98:
         2e:0a:17:14:df:31:36:45:c6:76:0e:75:53:5b:d2:4d:ff:b8:
         9d:83:51:4a:59:a3:9d:60:e7:fa:89:f9:53:92:90:60:af:08:
         20:d0:9e:14:7d:a5:af:15:ce:51:38:38:04:9d:8b:63:ee:a5:
         ce:22:94:e6:a2:ee:4c:a1:a0:39:cb:70:0c:bb:31:16:f7:5c:
         54:f7:a3:a4:04:ee:24:9b:b2:25:97:06:11:ea:c8:12:b5:51:
         36:bd:60:7b:fc:65:d5:ae:53:a8:c6:c4:46:21:a9:01:02:4f:
         9c:af:39:1f:39:6d:14:b4:1c:b6:fd:39:73:26:90:cf:19:b6:
         c5:3f:f9:52:b9:9b:ae:4f:23:4d:06:0f:a3:39:b2:80:ee:04:
         27:0b:79:f7:ec:53:ee:fe:da:29:ae:3b:6c:d3:e4:0f:01:4b:
         e5:e8:c5:9b:16:29:c3:55:ca:cb:82:7f:1a:52:3a:f9:99:cf:
         d8:37:4e:41:fb:51:7d:e5:7e:81:ca:74:22:3e:bd:b7:77:2f:
         c3:ad:e6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----