Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/25/34352e36372e3232302e302f32342d3234203d3e20323132373335.roa
File:                     34352e36372e3232302e302f32342d3234203d3e20323132373335.roa (raw, json)
Hash identifier:          YJ2KeTYFQsUI5apaSfsZn2krRHPi9sogyhHDGrkPB/8=
Subject key identifier:   4D:95:E1:2A:63:4A:1F:98:BB:A3:15:7E:89:AB:EF:9B:9B:31:1B:50
Certificate issuer:       /CN=852a307c4e0a2a4e7e38aa5164d4bc5cdb7cca49
Certificate serial:       043360D00EF616D97D6FC5EB319D140E008F51FB
Authority key identifier: 85:2A:30:7C:4E:0A:2A:4E:7E:38:AA:51:64:D4:BC:5C:DB:7C:CA:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hSowfE4KKk5-OKpRZNS8XNt8ykk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/25/34352e36372e3232302e302f32342d3234203d3e20323132373335.roa
Signing time:             Mon 30 Nov 2020 18:20:02 +0000
ROA not before:           Mon 30 Nov 2020 18:15:02 +0000
ROA not after:            Mon 29 Nov 2021 18:20:02 +0000
asID:                     212735
IP address blocks:        45.67.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:33:60:d0:0e:f6:16:d9:7d:6f:c5:eb:31:9d:14:0e:00:8f:51:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=852a307c4e0a2a4e7e38aa5164d4bc5cdb7cca49
        Validity
            Not Before: Nov 30 18:15:02 2020 GMT
            Not After : Nov 29 18:20:02 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a3:37:f7:52:8c:9e:d9:61:77:83:0c:53:05:
                    e2:47:af:9d:85:a1:6d:ad:59:d2:1f:32:cb:58:30:
                    d7:15:cc:0f:6e:12:38:61:b1:95:a3:ba:43:ee:1f:
                    b5:93:5e:27:de:d7:18:03:94:6e:03:b0:64:51:80:
                    78:d1:73:d7:2e:4f:6a:b2:36:15:b2:e6:b0:28:c0:
                    08:7e:42:ff:15:a1:8c:7f:cf:8d:61:49:ef:54:34:
                    01:a4:d5:ad:92:3e:12:b5:10:60:5b:b4:94:51:5f:
                    fb:85:19:71:be:90:9d:00:16:b3:0d:17:35:50:3e:
                    b4:3c:31:7d:9e:e3:76:6d:a6:78:6e:b9:a6:7b:de:
                    c0:90:da:f7:3d:95:e4:90:7e:33:24:28:b6:79:dc:
                    58:1b:7b:fc:26:0e:74:e2:34:16:e7:47:43:f2:8d:
                    92:43:90:52:32:91:60:27:e1:6a:67:c9:f6:91:26:
                    36:22:41:18:ec:e5:2d:2b:a5:9b:ea:46:1c:1f:a1:
                    a4:e0:dd:c2:42:92:36:32:57:b8:1c:5d:8e:44:00:
                    c5:31:75:d0:30:5d:30:93:71:d3:4e:ec:dc:f2:15:
                    7b:20:aa:5a:8f:0a:e4:2b:58:fd:09:e9:49:31:03:
                    fa:68:7a:e7:8c:dc:cd:a6:ce:77:30:99:d7:b6:84:
                    3a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:95:E1:2A:63:4A:1F:98:BB:A3:15:7E:89:AB:EF:9B:9B:31:1B:50
            X509v3 Authority Key Identifier:
                keyid:85:2A:30:7C:4E:0A:2A:4E:7E:38:AA:51:64:D4:BC:5C:DB:7C:CA:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/25/852A307C4E0A2A4E7E38AA5164D4BC5CDB7CCA49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSowfE4KKk5-OKpRZNS8XNt8ykk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/25/34352e36372e3232302e302f32342d3234203d3e20323132373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.67.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:7a:b0:13:bb:3c:a3:de:44:ac:4d:28:a0:a8:56:d9:ac:6c:
         ce:c8:15:fb:85:f2:7c:63:65:bb:78:79:be:4b:fe:47:c6:2e:
         d1:73:01:db:46:e7:14:0c:0e:31:b8:74:f1:63:fc:46:90:80:
         f7:99:fd:0c:0f:fd:a0:22:54:9e:d8:bb:78:2d:4c:66:67:dc:
         88:81:ef:42:3d:49:5c:57:00:39:b4:77:be:be:88:29:bd:25:
         28:46:8d:94:61:41:bf:a2:67:7b:88:2c:85:34:a6:c4:41:d0:
         76:c4:bd:43:9c:49:e3:8c:f2:e6:2b:87:35:e6:21:81:1e:93:
         8b:36:16:51:27:0b:6a:0d:24:17:6d:99:c6:6b:92:2d:0f:a1:
         76:e7:b2:f5:ce:2b:66:70:00:25:da:aa:fa:96:ed:98:ca:50:
         e2:f2:5f:b3:b7:cb:d6:0d:71:f8:80:6e:aa:9e:2a:ea:0b:a3:
         80:5c:03:b7:a6:2d:ce:f4:23:a7:65:44:db:0e:e9:c8:6e:ab:
         e1:e9:3b:d6:ae:5d:d4:74:b0:5d:cb:da:22:f2:33:f4:99:23:
         27:f3:4e:91:22:cb:6b:11:42:83:5f:90:f3:7e:a0:05:7d:45:
         2f:61:ca:2b:59:b6:ff:e6:e8:5d:55:67:5f:50:34:9f:02:1b:
         4e:bc:81:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----