Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/27/34352e382e3135302e302f32342d3234203d3e20333938343435.roa
File:                     34352e382e3135302e302f32342d3234203d3e20333938343435.roa (raw, json)
Hash identifier:          +zZ5U1F5Rv2fXNLGyjCrQ0ozAeho+aS/ffstaQ/KEyo=
Subject key identifier:   D8:AB:DB:4B:5D:C1:D2:0E:46:E7:F3:15:09:1A:03:C3:0A:46:0D:60
Certificate issuer:       /CN=00de5a79794df58205a4c7ab118447e34a5d743c
Certificate serial:       7CE16A82D24F12034ED856B1C7D82D82AF99DB83
Authority key identifier: 00:DE:5A:79:79:4D:F5:82:05:A4:C7:AB:11:84:47:E3:4A:5D:74:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AN5aeXlN9YIFpMerEYRH40pddDw.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/27/34352e382e3135302e302f32342d3234203d3e20333938343435.roa
Signing time:             Mon 30 Nov 2020 19:11:37 +0000
ROA not before:           Mon 30 Nov 2020 19:06:37 +0000
ROA not after:            Mon 29 Nov 2021 19:11:37 +0000
asID:                     398445
IP address blocks:        45.8.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:e1:6a:82:d2:4f:12:03:4e:d8:56:b1:c7:d8:2d:82:af:99:db:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00de5a79794df58205a4c7ab118447e34a5d743c
        Validity
            Not Before: Nov 30 19:06:37 2020 GMT
            Not After : Nov 29 19:11:37 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6c:4a:d9:c2:77:ae:9b:3f:e5:84:2b:72:8b:
                    0e:5d:58:a3:89:1d:38:0b:13:83:c1:26:ae:f0:9f:
                    4f:2b:d0:5a:a3:e8:5d:28:7d:63:31:c2:75:f3:77:
                    7a:82:5b:6f:85:35:3c:cc:90:3d:bd:75:67:ed:72:
                    ce:17:6e:50:f3:14:3b:bb:a8:78:20:f8:df:17:1e:
                    5c:fd:7b:d9:ce:7a:dd:ff:1f:e0:56:9b:7b:a9:d6:
                    5f:2d:fe:80:a4:1f:a3:0f:37:3f:2f:43:da:ed:35:
                    96:d6:f9:a5:a7:98:08:60:5e:66:8c:fa:71:c7:df:
                    00:db:e2:1e:6c:ba:af:46:3e:85:99:41:24:a8:3d:
                    04:06:76:b0:11:92:7b:47:5e:63:cb:5c:6f:b5:e7:
                    68:15:e8:43:b4:82:86:c6:ff:97:c5:50:33:d6:d4:
                    86:77:fa:98:d8:6b:b4:d7:17:8b:a0:c2:20:c4:65:
                    b3:42:0d:1e:d9:9d:0c:d5:a9:5a:61:5b:2a:37:ac:
                    11:88:05:85:3f:90:de:19:72:7b:60:09:23:0d:e0:
                    11:60:8d:e5:d5:43:aa:c4:d8:30:dd:aa:06:43:3a:
                    2e:43:e1:df:cd:53:f5:1f:fb:ca:35:3e:b6:a6:00:
                    ce:2c:d0:5e:f4:03:1c:47:ca:b7:a1:0f:d3:98:eb:
                    21:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:AB:DB:4B:5D:C1:D2:0E:46:E7:F3:15:09:1A:03:C3:0A:46:0D:60
            X509v3 Authority Key Identifier:
                keyid:00:DE:5A:79:79:4D:F5:82:05:A4:C7:AB:11:84:47:E3:4A:5D:74:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/27/00DE5A79794DF58205A4C7AB118447E34A5D743C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AN5aeXlN9YIFpMerEYRH40pddDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/27/34352e382e3135302e302f32342d3234203d3e20333938343435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:cc:46:42:5e:e2:7d:44:13:92:66:0e:d7:3f:1d:6d:77:ce:
         e8:d6:d9:e5:6d:30:5c:45:44:c6:16:8c:cd:57:84:08:16:44:
         70:e2:90:72:7b:ce:2e:28:b1:45:c0:9d:36:5d:f3:f9:cf:87:
         a7:87:0b:27:74:f0:9b:ff:ad:45:f1:68:47:ba:38:48:d0:eb:
         79:c5:95:9a:ce:a4:61:d0:d9:8b:5c:48:d7:49:91:4f:39:b0:
         12:f0:c5:2c:a3:7c:42:97:6a:e4:ae:02:d5:90:54:6c:a8:48:
         f4:52:a2:63:22:4f:76:dc:e3:36:c5:72:3f:ee:b3:0d:61:b7:
         0b:35:56:f4:8e:70:a6:30:e6:c1:10:98:a5:44:6a:52:16:83:
         a7:5a:49:1b:6e:5f:07:fc:cf:ab:36:20:c8:4b:9a:9b:78:07:
         1f:97:c4:83:c5:9c:f3:66:56:68:5c:9e:c4:19:bd:a9:72:bf:
         55:ee:e3:e6:14:1b:45:2a:d4:3a:20:9f:1b:41:37:58:06:51:
         ea:9d:27:c0:36:2c:49:74:2a:00:56:08:90:ef:7a:df:5a:e5:
         74:27:1f:0b:26:fc:cf:2b:74:bc:c6:a4:7b:4c:39:59:5e:4b:
         6d:83:e4:e5:84:37:b2:0e:c4:ba:e1:4d:8e:c1:c7:25:07:b9:
         cc:90:4f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----