Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/25/34352e36372e3232322e302f32342d3234203d3e20323132333430.roa
File:                     34352e36372e3232322e302f32342d3234203d3e20323132333430.roa (raw, json)
Hash identifier:          0jfXryGRKEJR3t3CNy4tWzhUn9zlTiPf6sNxN/iZ2Fg=
Subject key identifier:   B9:4D:12:95:9E:79:D6:7F:60:2B:24:4C:5F:E3:98:A7:09:B6:83:68
Certificate issuer:       /CN=852a307c4e0a2a4e7e38aa5164d4bc5cdb7cca49
Certificate serial:       4FC12F8B060B1E57C3B687DD0E7842ADA76ECEDF
Authority key identifier: 85:2A:30:7C:4E:0A:2A:4E:7E:38:AA:51:64:D4:BC:5C:DB:7C:CA:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hSowfE4KKk5-OKpRZNS8XNt8ykk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/25/34352e36372e3232322e302f32342d3234203d3e20323132333430.roa
Signing time:             Mon 30 Nov 2020 18:20:03 +0000
ROA not before:           Mon 30 Nov 2020 18:15:03 +0000
ROA not after:            Mon 29 Nov 2021 18:20:03 +0000
asID:                     212340
IP address blocks:        45.67.222.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:c1:2f:8b:06:0b:1e:57:c3:b6:87:dd:0e:78:42:ad:a7:6e:ce:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=852a307c4e0a2a4e7e38aa5164d4bc5cdb7cca49
        Validity
            Not Before: Nov 30 18:15:03 2020 GMT
            Not After : Nov 29 18:20:03 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:77:53:7a:a3:e7:c2:da:f9:09:ac:9d:45:d6:
                    85:55:bb:ca:5f:a0:9f:b8:3b:ac:ef:bf:3f:d4:0b:
                    a9:3e:86:63:77:1d:29:ef:4f:a7:fd:a0:8a:d8:3f:
                    9a:ce:17:06:51:72:b0:ce:a7:ad:62:5d:79:eb:cb:
                    2a:b9:82:ae:2a:95:70:57:5a:36:76:43:03:fb:4c:
                    ee:04:9a:96:13:64:7c:11:0d:5e:b7:a6:c6:6a:73:
                    43:69:96:27:65:de:db:41:3e:51:59:ee:7e:e3:4c:
                    95:4b:ce:51:a9:a1:f6:92:d0:cb:0d:80:75:e6:9f:
                    ac:6f:a7:43:07:06:0e:98:c4:45:af:a6:53:5d:c0:
                    f4:d1:41:ff:20:81:7d:56:96:87:a2:ad:71:ff:4b:
                    55:39:3a:2a:65:76:89:7c:b0:46:01:63:dc:26:51:
                    77:14:99:ad:20:4d:c6:d6:fd:0e:df:3b:f0:b2:e1:
                    8a:28:05:b5:f4:88:73:69:4c:d1:66:7c:60:51:57:
                    21:ed:d9:8f:c3:5c:8f:81:f3:e4:fc:f5:b3:a3:5a:
                    42:17:71:a7:a5:fd:1d:2b:ae:83:a7:66:37:91:3e:
                    a3:7d:8f:66:a5:7f:80:a2:fc:ac:45:e8:df:67:f3:
                    02:ef:76:ef:ca:30:46:4c:25:ca:fe:db:ce:25:d5:
                    68:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4D:12:95:9E:79:D6:7F:60:2B:24:4C:5F:E3:98:A7:09:B6:83:68
            X509v3 Authority Key Identifier:
                keyid:85:2A:30:7C:4E:0A:2A:4E:7E:38:AA:51:64:D4:BC:5C:DB:7C:CA:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/25/852A307C4E0A2A4E7E38AA5164D4BC5CDB7CCA49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSowfE4KKk5-OKpRZNS8XNt8ykk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/25/34352e36372e3232322e302f32342d3234203d3e20323132333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.67.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:06:ec:87:4b:e0:ad:43:e6:54:3f:33:da:86:fa:55:1b:eb:
         f0:10:b9:1b:32:60:d6:38:c1:6c:e1:15:70:5c:d4:eb:2b:ab:
         46:1b:04:08:a3:c7:0e:63:cd:b5:ca:13:39:44:cd:50:a0:78:
         8a:bc:ff:c2:c5:a5:42:90:3e:55:a6:06:34:cf:b8:de:c3:96:
         ed:4e:ca:ab:6a:0d:33:a0:f0:44:28:ec:41:0c:40:8a:42:46:
         33:32:d5:0d:7b:6e:ec:59:a0:7c:38:72:91:3a:7d:fe:e8:5c:
         c1:74:0f:2d:db:dd:d0:6e:0e:3d:2c:e5:44:a6:31:29:36:75:
         e5:a8:34:bb:5f:ca:9d:86:ae:bb:56:c0:89:54:b4:58:14:8f:
         e2:ef:36:98:99:18:d7:f4:9d:d8:c0:e0:0e:35:b8:6b:cf:ec:
         7c:ca:ed:66:1c:d6:04:9a:ea:e1:d3:58:9d:58:3e:32:66:62:
         10:36:1f:90:38:30:8b:46:f5:3b:62:6c:28:50:be:96:6c:b6:
         d4:78:b5:b2:fb:b8:4c:16:a5:f0:34:e8:a6:51:b5:5a:15:d9:
         61:66:71:4a:e0:0f:3c:c9:70:5f:97:56:b9:c4:08:02:a6:2a:
         44:3a:bd:86:10:b0:7d:52:14:9d:e7:aa:65:22:23:73:a8:b1:
         3c:7c:07:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----