Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/27/34352e382e3135312e302f32342d3234203d3e203131383738.roa
File:                     34352e382e3135312e302f32342d3234203d3e203131383738.roa (raw, json)
Hash identifier:          bR2imi99QcSosk5MEVQkP+ZIqkTeWAMxCyS5ixYlVBk=
Subject key identifier:   B5:1E:11:65:7D:E9:6C:52:38:88:DB:24:EA:4E:4D:5B:03:B7:01:56
Certificate issuer:       /CN=00de5a79794df58205a4c7ab118447e34a5d743c
Certificate serial:       0D23A53DE80E080B2AEE69A5B927F03634DEB00E
Authority key identifier: 00:DE:5A:79:79:4D:F5:82:05:A4:C7:AB:11:84:47:E3:4A:5D:74:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AN5aeXlN9YIFpMerEYRH40pddDw.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/27/34352e382e3135312e302f32342d3234203d3e203131383738.roa
Signing time:             Mon 30 Nov 2020 19:11:38 +0000
ROA not before:           Mon 30 Nov 2020 19:06:38 +0000
ROA not after:            Mon 29 Nov 2021 19:11:38 +0000
asID:                     11878
IP address blocks:        45.8.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:23:a5:3d:e8:0e:08:0b:2a:ee:69:a5:b9:27:f0:36:34:de:b0:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00de5a79794df58205a4c7ab118447e34a5d743c
        Validity
            Not Before: Nov 30 19:06:38 2020 GMT
            Not After : Nov 29 19:11:38 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:46:e6:0b:58:17:fb:3f:5d:4a:67:eb:d5:79:
                    f5:c8:fc:94:57:1f:df:e9:2f:cd:a1:a7:a1:11:04:
                    4a:62:c2:63:aa:89:b6:cc:85:e5:40:2c:a9:db:35:
                    67:0a:25:21:58:0b:75:dc:a0:a6:3a:da:aa:25:1e:
                    5f:a2:7f:44:cb:0e:ce:c0:31:b4:aa:78:5f:ec:30:
                    c6:21:96:f6:46:e9:51:af:fc:04:9e:dc:0b:65:db:
                    99:23:74:58:30:47:f9:84:ff:39:36:1f:09:55:fd:
                    6a:2b:e8:f9:46:ab:3c:43:00:a9:83:5d:28:a1:86:
                    fc:8a:e5:79:12:8f:dc:e5:09:5b:a0:16:25:92:5e:
                    d5:79:8f:64:10:68:2e:49:b6:e8:fd:97:ff:97:ef:
                    0a:76:fe:46:f7:17:0c:1f:56:e6:3b:09:c7:38:27:
                    5d:e1:e4:79:00:9e:50:7f:40:ed:f7:a3:8c:bb:04:
                    06:fb:5a:04:eb:24:f2:6e:ec:fd:22:ad:d4:fb:1b:
                    ad:be:e7:04:cd:a2:74:bf:44:ea:82:74:20:ec:a2:
                    01:09:d1:f8:19:12:71:4d:46:1d:9d:fa:47:0d:6a:
                    2b:fe:6e:0b:28:47:ae:ee:86:c0:eb:55:97:ca:5c:
                    6f:01:4d:e5:1b:1b:32:d1:4b:16:23:ab:98:86:25:
                    db:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:1E:11:65:7D:E9:6C:52:38:88:DB:24:EA:4E:4D:5B:03:B7:01:56
            X509v3 Authority Key Identifier:
                keyid:00:DE:5A:79:79:4D:F5:82:05:A4:C7:AB:11:84:47:E3:4A:5D:74:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/27/00DE5A79794DF58205A4C7AB118447E34A5D743C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AN5aeXlN9YIFpMerEYRH40pddDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/27/34352e382e3135312e302f32342d3234203d3e203131383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:9d:c0:85:14:44:0b:5d:a5:a0:97:a1:8a:7c:b9:6a:d1:04:
         ba:7e:cf:f6:a8:c0:6d:ed:fb:dd:61:44:24:d7:60:22:ab:06:
         b3:35:c1:b1:b4:41:98:eb:f0:d1:ba:45:57:08:d2:c0:5c:4c:
         7f:95:84:db:6a:cb:1d:1f:c5:6f:d5:24:c9:5b:58:3b:6e:f4:
         e9:03:f1:e3:f4:a6:b5:1c:ef:b0:bc:a9:62:b3:21:2b:26:65:
         75:7d:d9:44:b2:32:ae:44:7b:06:ed:b3:cb:49:09:b1:82:ab:
         c5:47:cb:f9:bf:0e:1b:be:e3:f3:15:ae:2b:30:a4:d0:87:7e:
         22:fc:93:0a:cf:26:f7:6f:ae:ae:cc:85:bb:4e:cf:8d:67:f5:
         6b:dc:cc:54:18:0e:94:72:e8:e0:78:b5:23:23:69:95:f1:19:
         12:19:84:6f:a3:00:7a:be:c1:d1:df:9a:c7:e4:09:21:de:4b:
         33:d9:46:78:57:70:fa:fd:0b:79:06:d4:95:7c:f9:ad:87:4d:
         29:54:18:a3:a0:e6:05:9b:20:dd:3b:f6:17:0c:07:3c:54:27:
         a3:17:5b:fe:47:aa:f1:77:ba:a0:f3:07:4f:98:a8:b5:54:2a:
         76:e8:54:27:7d:74:75:d8:d9:69:f5:da:f6:4c:35:84:27:e3:
         84:cd:2b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----