Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/25/34352e36372e3232312e302f32342d3234203d3e203232343138.roa
File:                     34352e36372e3232312e302f32342d3234203d3e203232343138.roa (raw, json)
Hash identifier:          N43Li3HsI86t00mVuNR557ZiMaSg6BJ/+/FykWHmiJY=
Subject key identifier:   37:85:72:23:21:59:00:30:F1:36:27:12:29:C5:B1:02:94:70:52:76
Certificate issuer:       /CN=852a307c4e0a2a4e7e38aa5164d4bc5cdb7cca49
Certificate serial:       677C0AB7F3E4B7A7A74058E53B4EE5A96F501DE8
Authority key identifier: 85:2A:30:7C:4E:0A:2A:4E:7E:38:AA:51:64:D4:BC:5C:DB:7C:CA:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hSowfE4KKk5-OKpRZNS8XNt8ykk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/25/34352e36372e3232312e302f32342d3234203d3e203232343138.roa
Signing time:             Mon 30 Nov 2020 18:20:02 +0000
ROA not before:           Mon 30 Nov 2020 18:15:02 +0000
ROA not after:            Mon 29 Nov 2021 18:20:02 +0000
asID:                     22418
IP address blocks:        45.67.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:7c:0a:b7:f3:e4:b7:a7:a7:40:58:e5:3b:4e:e5:a9:6f:50:1d:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=852a307c4e0a2a4e7e38aa5164d4bc5cdb7cca49
        Validity
            Not Before: Nov 30 18:15:02 2020 GMT
            Not After : Nov 29 18:20:02 2021 GMT
        Subject: CN=3082010A0282010100AF90234B3886A83A4A710C9ED23005E475C71F7D9EB04EED954DF2C32B5E89FA0C8CE5D7A0D03833697F3F0CC2E3AA43A3F2C074F7DA413F0B4FDADF1ADB25944D04E2E8B949F03BF3A4F98819D2EE92E029410B449527581AA7F59A5AAAAC79E041146A3EEC3B5294F48A8154BA0EFF4762FB6AF2252A0A080CF12ED8251745002C0AD26195C71537EA2CB3BA4F43604DB67DDCDC21BE6EF50AE48E3FA2E8D09B18ACE8DDFB48FE1204E107863D6D9B80EA35E17BF649E3A53EB0A2DC672B41F9F96555D6DE52A87E84E3ACF4E6A9C4F3A29C82EECEE53970816AD1546EE56D25CF7CF394C5868B853AEEB7993D2FD327CFAECEE62E8D0F6B1B7FAA354E29330203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:90:23:4b:38:86:a8:3a:4a:71:0c:9e:d2:30:
                    05:e4:75:c7:1f:7d:9e:b0:4e:ed:95:4d:f2:c3:2b:
                    5e:89:fa:0c:8c:e5:d7:a0:d0:38:33:69:7f:3f:0c:
                    c2:e3:aa:43:a3:f2:c0:74:f7:da:41:3f:0b:4f:da:
                    df:1a:db:25:94:4d:04:e2:e8:b9:49:f0:3b:f3:a4:
                    f9:88:19:d2:ee:92:e0:29:41:0b:44:95:27:58:1a:
                    a7:f5:9a:5a:aa:ac:79:e0:41:14:6a:3e:ec:3b:52:
                    94:f4:8a:81:54:ba:0e:ff:47:62:fb:6a:f2:25:2a:
                    0a:08:0c:f1:2e:d8:25:17:45:00:2c:0a:d2:61:95:
                    c7:15:37:ea:2c:b3:ba:4f:43:60:4d:b6:7d:dc:dc:
                    21:be:6e:f5:0a:e4:8e:3f:a2:e8:d0:9b:18:ac:e8:
                    dd:fb:48:fe:12:04:e1:07:86:3d:6d:9b:80:ea:35:
                    e1:7b:f6:49:e3:a5:3e:b0:a2:dc:67:2b:41:f9:f9:
                    65:55:d6:de:52:a8:7e:84:e3:ac:f4:e6:a9:c4:f3:
                    a2:9c:82:ee:ce:e5:39:70:81:6a:d1:54:6e:e5:6d:
                    25:cf:7c:f3:94:c5:86:8b:85:3a:ee:b7:99:3d:2f:
                    d3:27:cf:ae:ce:e6:2e:8d:0f:6b:1b:7f:aa:35:4e:
                    29:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:85:72:23:21:59:00:30:F1:36:27:12:29:C5:B1:02:94:70:52:76
            X509v3 Authority Key Identifier:
                keyid:85:2A:30:7C:4E:0A:2A:4E:7E:38:AA:51:64:D4:BC:5C:DB:7C:CA:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/25/852A307C4E0A2A4E7E38AA5164D4BC5CDB7CCA49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSowfE4KKk5-OKpRZNS8XNt8ykk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/25/34352e36372e3232312e302f32342d3234203d3e203232343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.67.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:46:cf:23:d8:1a:77:c4:3e:7c:2b:c0:ff:1c:62:79:c1:7a:
         69:7f:ef:46:54:5e:03:c3:16:93:87:78:bc:5a:76:32:4e:32:
         75:2d:99:ef:fa:f3:a5:2e:1a:c8:7d:a9:b0:f0:cb:d6:f1:67:
         a3:48:21:63:6a:c2:36:06:74:1f:73:0c:84:59:55:3b:46:28:
         85:6b:0a:4a:f4:f9:6f:b5:13:c8:5a:8f:33:2b:b3:db:16:3a:
         94:1e:ae:e7:3c:ec:17:66:ba:9f:5c:89:e5:40:4b:4b:13:c6:
         11:9f:d6:67:ba:34:a8:7a:28:c0:57:42:55:3e:30:85:9b:0c:
         33:13:5b:2e:45:99:dc:8a:70:f0:48:a3:d9:dd:30:07:a0:04:
         79:fe:58:a8:d7:b8:4b:92:01:c1:dd:b5:b2:0f:81:bc:cf:c1:
         80:79:02:19:07:e6:f5:f4:c2:cb:5b:68:06:9e:e5:8d:ad:8e:
         12:5b:81:0c:80:dd:b0:fc:42:d7:5a:3b:7f:ec:8d:b1:c3:ff:
         cd:ee:d8:f7:b3:79:62:86:e3:cb:db:ca:98:9c:19:36:1a:05:
         37:68:18:6f:64:e7:16:d6:35:42:96:30:8a:7f:8a:ab:7b:e2:
         fa:54:c9:1a:cd:31:71:69:aa:45:c0:4d:ba:49:e8:e8:f4:45:
         0b:75:e0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----