Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/25/34352e36372e3232312e302f32342d3234203d3e20323037373837.roa
File:                     34352e36372e3232312e302f32342d3234203d3e20323037373837.roa (raw, json)
Hash identifier:          KlFmQN16bna8NHCegrrUbod9UFsyMdNLrzR2A08ey0c=
Subject key identifier:   57:72:91:ED:0F:16:11:4A:05:03:D5:F3:E1:50:0A:3F:AB:C3:B5:7E
Certificate issuer:       /CN=852a307c4e0a2a4e7e38aa5164d4bc5cdb7cca49
Certificate serial:       1BA2F89C0E3F168AE7C0B455E2F9D7EA8B31E1E9
Authority key identifier: 85:2A:30:7C:4E:0A:2A:4E:7E:38:AA:51:64:D4:BC:5C:DB:7C:CA:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hSowfE4KKk5-OKpRZNS8XNt8ykk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/25/34352e36372e3232312e302f32342d3234203d3e20323037373837.roa
Signing time:             Sat 13 Feb 2021 18:30:33 +0000
ROA not before:           Sat 13 Feb 2021 18:25:33 +0000
ROA not after:            Sat 12 Feb 2022 18:30:33 +0000
asID:                     207787
IP address blocks:        45.67.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:a2:f8:9c:0e:3f:16:8a:e7:c0:b4:55:e2:f9:d7:ea:8b:31:e1:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=852a307c4e0a2a4e7e38aa5164d4bc5cdb7cca49
        Validity
            Not Before: Feb 13 18:25:33 2021 GMT
            Not After : Feb 12 18:30:33 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:04:40:03:2c:81:eb:02:a4:8a:ed:56:72:94:
                    28:85:49:77:be:15:88:40:e0:76:c6:5d:b0:dd:88:
                    91:26:ce:80:f7:a5:48:6e:82:b1:d7:8f:39:b6:37:
                    89:f4:95:d3:fa:20:68:20:0a:f9:55:ea:2f:db:87:
                    0b:00:56:0a:5b:83:52:db:32:39:e3:36:ec:71:b9:
                    cb:02:fb:c9:3f:8e:b0:53:5b:7e:2d:b9:a8:6c:71:
                    c8:dc:32:43:6e:77:5e:c4:2d:fd:d6:cc:03:28:8c:
                    67:46:30:9e:d3:26:5b:27:aa:88:9d:19:c9:15:d4:
                    31:30:de:f3:db:48:53:5a:b5:3e:35:10:0d:fa:b3:
                    61:45:1e:95:9c:88:75:7a:ff:6a:3e:99:22:74:7c:
                    9f:f1:7f:52:ff:a1:2a:17:c2:4b:54:91:3a:b2:24:
                    6a:dd:b0:ab:3c:1b:02:82:83:b5:64:f4:7d:f4:af:
                    c5:59:73:c1:46:da:3e:f7:e9:24:39:14:95:04:d6:
                    b8:c6:72:14:aa:28:4a:0e:bd:97:b7:e6:5e:60:69:
                    6d:8d:6d:0b:6e:55:ad:4f:6a:d8:42:f8:43:71:66:
                    07:c4:f4:c3:30:aa:60:7c:fe:0b:e3:88:02:42:6f:
                    02:a4:79:ce:a1:fd:65:1f:cc:95:9b:05:2c:7d:92:
                    8e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:72:91:ED:0F:16:11:4A:05:03:D5:F3:E1:50:0A:3F:AB:C3:B5:7E
            X509v3 Authority Key Identifier:
                keyid:85:2A:30:7C:4E:0A:2A:4E:7E:38:AA:51:64:D4:BC:5C:DB:7C:CA:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/25/852A307C4E0A2A4E7E38AA5164D4BC5CDB7CCA49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSowfE4KKk5-OKpRZNS8XNt8ykk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/25/34352e36372e3232312e302f32342d3234203d3e20323037373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.67.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:ec:63:f5:10:2e:29:d1:8d:0b:89:6b:df:62:21:3c:9c:b1:
         ad:7f:72:21:52:90:6a:a5:d5:da:f9:9e:3d:73:21:8b:4a:6b:
         b5:11:84:94:2d:18:9a:3b:e5:42:38:7f:f8:ff:45:32:50:36:
         5e:22:32:8c:67:bf:11:b0:f7:95:f1:ee:7a:b4:f7:1d:89:a0:
         a9:03:36:c6:e0:61:aa:a8:a4:28:fb:73:33:73:d0:5f:78:af:
         01:f6:d7:89:49:89:94:9b:65:f2:09:36:e6:55:b5:bf:3d:65:
         2d:15:8a:cc:af:8f:d5:23:68:c6:83:aa:e1:55:3d:02:dc:ad:
         45:cf:f3:c6:30:80:37:d2:0f:9f:09:00:d2:19:8a:27:40:01:
         1f:58:8a:eb:3c:1e:94:1e:88:b8:51:da:25:cb:13:1b:76:e9:
         a5:93:a2:7e:97:2d:8a:26:f2:83:19:3d:18:50:92:62:5b:4d:
         7a:dc:4c:04:0c:dc:06:c7:7a:7c:73:f1:e6:4d:b8:04:0d:15:
         79:ba:43:53:17:3b:94:19:8b:56:53:b6:72:00:d7:9b:b5:46:
         62:d5:55:19:3e:1f:b0:a4:18:c3:88:27:6c:54:75:66:fa:24:
         90:26:a2:8e:72:5c:98:a9:c8:c5:bb:b5:d5:a0:ef:a9:41:7c:
         7d:6c:69:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----