Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/30/34352e38382e3139302e302f32342d3234203d3e20323037373837.roa
File:                     34352e38382e3139302e302f32342d3234203d3e20323037373837.roa (raw, json)
Hash identifier:          mUjub3gBXopGh7vO17PckRaNCaYYvPT6UwlKoEOretw=
Subject key identifier:   E1:91:97:CC:7C:5E:EF:DC:7E:F7:F5:B1:5F:22:2A:7D:36:10:CB:79
Certificate issuer:       /CN=26c157349beeb72d0815cfbb33fcabc27fad9fc8
Certificate serial:       704D79E5B772C4CF3A5EBF19A0D21C098183BE86
Authority key identifier: 26:C1:57:34:9B:EE:B7:2D:08:15:CF:BB:33:FC:AB:C2:7F:AD:9F:C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JsFXNJvuty0IFc-7M_yrwn-tn8g.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/30/34352e38382e3139302e302f32342d3234203d3e20323037373837.roa
Signing time:             Mon 30 Nov 2020 19:12:06 +0000
ROA not before:           Mon 30 Nov 2020 19:07:06 +0000
ROA not after:            Mon 29 Nov 2021 19:12:06 +0000
asID:                     207787
IP address blocks:        45.88.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:4d:79:e5:b7:72:c4:cf:3a:5e:bf:19:a0:d2:1c:09:81:83:be:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26c157349beeb72d0815cfbb33fcabc27fad9fc8
        Validity
            Not Before: Nov 30 19:07:06 2020 GMT
            Not After : Nov 29 19:12:06 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:82:8a:bf:e5:5f:a8:b1:cf:cb:37:f0:49:de:
                    d9:d5:57:c4:4e:ed:f6:5e:d9:84:37:6f:5e:e8:6b:
                    88:5a:84:9a:9e:08:a1:ad:42:5e:81:33:5a:15:7a:
                    6c:e4:71:96:bc:31:39:56:28:07:6a:3d:c3:a9:83:
                    48:8f:71:2e:1d:30:ca:61:ad:98:53:5c:83:18:0a:
                    1e:fc:91:24:16:e8:ec:c6:2e:0a:01:2b:43:e5:0c:
                    e3:4c:68:c6:14:39:5f:53:43:59:b3:ec:3b:a5:5a:
                    d9:58:87:df:bf:2d:de:b5:99:44:8a:e9:40:d3:b0:
                    b9:11:25:34:4e:69:41:be:9e:29:60:a0:df:03:fa:
                    1e:c2:c4:ba:69:52:3d:b3:43:2f:0f:df:63:3f:5e:
                    46:fd:41:d2:7b:2d:50:0f:56:fb:fd:b7:90:0d:0c:
                    7e:91:e8:0f:24:d5:b9:44:27:4c:71:e0:1c:89:7c:
                    cb:65:3b:7a:68:63:31:0b:1c:d4:56:56:7e:70:04:
                    15:ce:7f:94:88:11:41:7b:51:60:bf:c5:ec:35:1e:
                    70:6b:39:2d:b5:22:20:36:cd:f5:90:6a:6f:fe:5f:
                    fc:75:f5:0f:86:6d:f1:bf:9e:b6:04:6a:40:df:da:
                    7f:bc:25:7b:f0:96:aa:6d:d3:c2:19:1a:83:4b:46:
                    6f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:91:97:CC:7C:5E:EF:DC:7E:F7:F5:B1:5F:22:2A:7D:36:10:CB:79
            X509v3 Authority Key Identifier:
                keyid:26:C1:57:34:9B:EE:B7:2D:08:15:CF:BB:33:FC:AB:C2:7F:AD:9F:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/30/26C157349BEEB72D0815CFBB33FCABC27FAD9FC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsFXNJvuty0IFc-7M_yrwn-tn8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/30/34352e38382e3139302e302f32342d3234203d3e20323037373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:eb:e3:ad:ae:6c:55:82:8f:85:0e:7d:1b:87:b6:73:38:b3:
         5a:f2:37:d4:5f:0e:c8:5d:10:54:13:31:4f:26:56:1c:8b:d2:
         fd:27:17:7b:99:03:e9:a1:bf:80:14:d5:88:19:d4:8c:01:0f:
         2b:9b:2a:b3:61:08:ee:14:0e:fe:a3:ac:e0:d4:7f:08:1e:67:
         3b:33:04:22:b3:17:28:27:77:8c:0a:83:b2:6c:ad:f7:f0:49:
         5b:68:8a:67:ee:18:97:49:44:11:69:94:e2:83:14:d9:3e:d7:
         14:62:cc:d4:58:bf:1c:83:78:28:88:84:e7:9e:30:cb:6b:d1:
         34:f5:42:64:21:e3:0c:e0:3f:32:df:3b:e7:74:1f:83:2f:bf:
         1d:ea:a2:93:41:ea:8c:a3:12:ee:e6:6f:89:9e:65:65:cb:46:
         2b:d9:94:e1:0a:39:53:b8:6c:e2:27:89:8b:10:ba:6f:61:cb:
         55:c1:8c:a3:70:cf:98:ea:20:a1:c5:50:4b:ed:83:05:cf:c3:
         0d:e8:58:35:8e:fe:ad:56:c1:16:da:ef:5c:5c:3b:5a:c9:be:
         90:d1:d6:98:a1:18:53:25:aa:7f:6a:d1:25:f7:58:f3:a7:61:
         4b:53:1e:49:10:55:76:67:5c:3e:b8:4e:a4:5e:fe:b5:20:e9:
         2e:b9:69:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----