Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/27/34352e382e3134382e302f32342d3234203d3e2037383537.roa
File:                     34352e382e3134382e302f32342d3234203d3e2037383537.roa (raw, json)
Hash identifier:          +YC6vNZTE4pDY70NxUk4kmIBWGYiOkDS2nnVY9G0EA8=
Subject key identifier:   29:10:DC:DB:D9:F2:30:4B:25:BB:40:BF:04:05:A1:52:30:2A:04:A2
Certificate issuer:       /CN=00de5a79794df58205a4c7ab118447e34a5d743c
Certificate serial:       55A3D4647EB4EC7EAD92B03E44AC262FE9BDBB73
Authority key identifier: 00:DE:5A:79:79:4D:F5:82:05:A4:C7:AB:11:84:47:E3:4A:5D:74:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AN5aeXlN9YIFpMerEYRH40pddDw.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/27/34352e382e3134382e302f32342d3234203d3e2037383537.roa
Signing time:             Mon 30 Nov 2020 19:11:37 +0000
ROA not before:           Mon 30 Nov 2020 19:06:37 +0000
ROA not after:            Mon 29 Nov 2021 19:11:37 +0000
asID:                     7857
IP address blocks:        45.8.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a3:d4:64:7e:b4:ec:7e:ad:92:b0:3e:44:ac:26:2f:e9:bd:bb:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00de5a79794df58205a4c7ab118447e34a5d743c
        Validity
            Not Before: Nov 30 19:06:37 2020 GMT
            Not After : Nov 29 19:11:37 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a0:bf:37:35:69:9e:1f:41:df:ea:3f:29:79:
                    c2:c0:f7:22:96:95:c2:46:df:42:5a:56:21:03:6a:
                    55:30:90:bb:a3:e5:0c:08:2e:89:65:71:65:4e:3f:
                    b0:a8:81:37:73:a9:13:c4:24:ab:ae:40:a9:c1:42:
                    8c:84:61:44:3b:a6:80:c1:4c:2e:ba:5d:c1:7a:07:
                    f2:0b:b7:3b:28:26:84:77:3d:77:b5:c5:ea:69:de:
                    b6:a6:65:df:d1:d5:00:d3:7a:5d:5f:2d:79:75:f3:
                    37:75:99:75:49:f8:df:af:d6:2a:82:40:42:3c:de:
                    50:ed:f3:ef:a2:40:ba:f1:29:87:89:86:92:af:3c:
                    2a:11:db:ea:86:30:1b:a8:7c:24:8e:53:d9:95:92:
                    d7:98:ed:c5:68:1c:09:87:16:97:2e:ae:7e:e5:a9:
                    00:f1:bf:74:02:11:37:67:dd:45:ff:fb:ed:b0:ce:
                    7b:4c:04:b1:48:44:e7:cd:a5:f2:c4:67:56:1a:da:
                    cd:30:bb:e9:d7:00:81:53:ab:6b:d0:b9:13:1a:63:
                    c8:e2:b1:ba:5b:bd:32:89:78:15:6f:b1:2a:41:fb:
                    2e:0f:85:de:dc:30:58:6e:50:51:e7:5d:4f:3f:f5:
                    d4:6b:93:8f:4a:33:86:7d:ed:46:77:f2:be:bc:35:
                    21:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:10:DC:DB:D9:F2:30:4B:25:BB:40:BF:04:05:A1:52:30:2A:04:A2
            X509v3 Authority Key Identifier:
                keyid:00:DE:5A:79:79:4D:F5:82:05:A4:C7:AB:11:84:47:E3:4A:5D:74:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/27/00DE5A79794DF58205A4C7AB118447E34A5D743C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AN5aeXlN9YIFpMerEYRH40pddDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/27/34352e382e3134382e302f32342d3234203d3e2037383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:96:28:e8:bc:52:39:32:f0:30:d1:85:c3:42:72:c3:32:9d:
         27:d2:7d:30:9d:ae:2e:c7:cf:a8:56:41:85:b0:d4:eb:2b:3b:
         fc:4d:81:89:db:e8:8d:b2:0d:d6:11:61:95:c9:5b:35:fb:51:
         47:e7:f9:ed:01:6a:a6:ff:dd:f6:07:5b:24:95:b3:2f:49:07:
         c2:fc:83:c3:eb:d8:5c:96:a8:85:30:65:58:28:a3:d3:79:8f:
         ad:ea:88:68:91:c9:59:1b:cb:61:81:72:ed:e9:95:49:ce:8a:
         8f:3c:3e:bc:e0:d6:b5:71:f6:01:67:61:3c:17:36:19:50:90:
         ec:c0:1e:4c:a4:1b:47:bf:6e:1d:e9:a4:9b:3f:d1:11:cc:09:
         34:a1:b8:9b:4c:2b:1a:f7:15:75:a9:a9:60:a7:b2:24:da:49:
         2a:1d:9b:1b:ce:45:bb:d2:38:a9:ca:cb:f2:f7:53:81:f1:bc:
         f9:ef:79:84:c9:05:e0:96:10:f3:be:98:6d:99:9f:52:d5:30:
         08:8f:fa:7b:ad:8d:68:72:15:5a:e1:4c:8d:de:8e:0f:49:d1:
         68:c2:8d:f1:96:0d:3c:66:88:fc:f0:ee:d3:bd:56:1e:d2:bd:
         a5:4d:6b:2b:bc:c5:dd:f6:25:35:09:0d:e0:5a:4c:9b:aa:13:
         36:65:3d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----