Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/27/34352e382e3134392e302f32342d3234203d3e2037383537.roa
File:                     34352e382e3134392e302f32342d3234203d3e2037383537.roa (raw, json)
Hash identifier:          n8unrrFWB9+KKUJaSekQB+aCM5iCLNRSWvTtRCz5itE=
Subject key identifier:   48:36:04:EA:29:93:FC:FF:08:1A:BC:54:7C:A4:FB:68:8F:0B:5A:36
Certificate issuer:       /CN=00de5a79794df58205a4c7ab118447e34a5d743c
Certificate serial:       4CC2B6A09910DC8F782E7899F68666A8DE9D5A93
Authority key identifier: 00:DE:5A:79:79:4D:F5:82:05:A4:C7:AB:11:84:47:E3:4A:5D:74:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AN5aeXlN9YIFpMerEYRH40pddDw.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/27/34352e382e3134392e302f32342d3234203d3e2037383537.roa
Signing time:             Mon 30 Nov 2020 19:11:37 +0000
ROA not before:           Mon 30 Nov 2020 19:06:37 +0000
ROA not after:            Mon 29 Nov 2021 19:11:37 +0000
asID:                     7857
IP address blocks:        45.8.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:c2:b6:a0:99:10:dc:8f:78:2e:78:99:f6:86:66:a8:de:9d:5a:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00de5a79794df58205a4c7ab118447e34a5d743c
        Validity
            Not Before: Nov 30 19:06:37 2020 GMT
            Not After : Nov 29 19:11:37 2021 GMT
        Subject: CN=3082010A0282010100E483FB0136627D82AF478E11BBB67548C9452997F6DC6F4FBF0EF11AC91E421D1919955F1E9E9158A9CBF11B3491EEDCA66AB52EABC2B281E360F8B3A5880A6F43EAC2E2B2E036CD8C13898F18C3ABE8EFBEFBC8184A9990F7ADD6ED68497C9E8C76B1CD3B79A8325B9F62CBB71C43047811DD2EBC4D28C52FF6C4B575AA714B440BB598D8F9339D301311EC85DFAF004B9D71FA07F1F62AD90569CF9BCA402DDC9DAF9BF90F1BEE994952C53208B4A7A089449ECADEA0BA353285E18D98D7F799FBFC0EAB5946229DF2D612B3E6180069E832CDE16DC33416690781F20EA982DD8FC973A7DC863BEDFB81CED6951F685D883D7D898D5E8AA91F4318D2482B0D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:83:fb:01:36:62:7d:82:af:47:8e:11:bb:b6:
                    75:48:c9:45:29:97:f6:dc:6f:4f:bf:0e:f1:1a:c9:
                    1e:42:1d:19:19:95:5f:1e:9e:91:58:a9:cb:f1:1b:
                    34:91:ee:dc:a6:6a:b5:2e:ab:c2:b2:81:e3:60:f8:
                    b3:a5:88:0a:6f:43:ea:c2:e2:b2:e0:36:cd:8c:13:
                    89:8f:18:c3:ab:e8:ef:be:fb:c8:18:4a:99:90:f7:
                    ad:d6:ed:68:49:7c:9e:8c:76:b1:cd:3b:79:a8:32:
                    5b:9f:62:cb:b7:1c:43:04:78:11:dd:2e:bc:4d:28:
                    c5:2f:f6:c4:b5:75:aa:71:4b:44:0b:b5:98:d8:f9:
                    33:9d:30:13:11:ec:85:df:af:00:4b:9d:71:fa:07:
                    f1:f6:2a:d9:05:69:cf:9b:ca:40:2d:dc:9d:af:9b:
                    f9:0f:1b:ee:99:49:52:c5:32:08:b4:a7:a0:89:44:
                    9e:ca:de:a0:ba:35:32:85:e1:8d:98:d7:f7:99:fb:
                    fc:0e:ab:59:46:22:9d:f2:d6:12:b3:e6:18:00:69:
                    e8:32:cd:e1:6d:c3:34:16:69:07:81:f2:0e:a9:82:
                    dd:8f:c9:73:a7:dc:86:3b:ed:fb:81:ce:d6:95:1f:
                    68:5d:88:3d:7d:89:8d:5e:8a:a9:1f:43:18:d2:48:
                    2b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:36:04:EA:29:93:FC:FF:08:1A:BC:54:7C:A4:FB:68:8F:0B:5A:36
            X509v3 Authority Key Identifier:
                keyid:00:DE:5A:79:79:4D:F5:82:05:A4:C7:AB:11:84:47:E3:4A:5D:74:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/27/00DE5A79794DF58205A4C7AB118447E34A5D743C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AN5aeXlN9YIFpMerEYRH40pddDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/27/34352e382e3134392e302f32342d3234203d3e2037383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:06:75:98:41:5d:89:9e:83:5a:eb:48:8e:a5:09:31:ae:99:
         1b:5a:38:fa:49:d8:0a:64:7a:4d:19:2d:ef:06:5a:7d:2f:50:
         34:be:c6:80:36:12:0c:fb:fd:58:27:6d:1b:9f:95:4d:f6:da:
         e0:25:78:36:09:5f:03:9f:a7:c4:6e:f2:57:21:70:7e:36:50:
         25:c1:21:62:fd:a1:ed:35:ac:7b:3e:58:58:e3:7b:6b:0e:83:
         e4:36:d7:ec:ad:7d:1d:aa:d7:d4:86:00:7e:74:e2:dc:81:63:
         48:71:11:00:0a:f1:e7:2b:1c:9a:fd:5a:77:10:ff:97:d0:30:
         07:b2:e5:32:ca:70:04:23:de:66:37:0f:cf:d8:d5:06:13:23:
         7c:d5:50:d5:ed:14:22:f0:32:4a:db:dc:9b:ed:b1:ea:28:f4:
         f5:a6:bf:14:2c:3b:25:75:86:b0:fc:c1:4d:0f:34:f3:d9:8b:
         9c:14:ed:08:14:b0:ae:f6:8a:72:94:45:2e:d9:30:c8:fc:d9:
         66:42:da:51:16:4d:16:6e:e4:40:55:32:f2:57:33:d3:56:90:
         4a:d6:ea:3f:8b:83:de:32:db:0c:e1:e9:76:2a:97:05:7d:58:
         18:a2:8a:a2:c7:20:b2:f1:62:be:7f:ce:46:36:c0:78:b9:0c:
         13:5a:cd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----