Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/9/34352e38352e3134342e302f32342d3234203d3e20323131383337.roa
File:                     34352e38352e3134342e302f32342d3234203d3e20323131383337.roa (raw, json)
Hash identifier:          y4TjQ7n0c+Jc3P4JaaISMBxEzLjq2YK1GpY1SEc6iVs=
Subject key identifier:   F2:A8:94:77:2E:F6:89:97:ED:B8:6D:71:20:E3:A1:83:E1:49:A6:E7
Certificate issuer:       /CN=3749575771396070c1eb8ccebffaf75f05dbaf3c
Certificate serial:       70700DC38F3B491F407CF7C259295C65A9741341
Authority key identifier: 37:49:57:57:71:39:60:70:C1:EB:8C:CE:BF:FA:F7:5F:05:DB:AF:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0lXV3E5YHDB64zOv_r3XwXbrzw.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/9/34352e38352e3134342e302f32342d3234203d3e20323131383337.roa
Signing time:             Tue 23 Feb 2021 09:40:27 +0000
ROA not before:           Tue 23 Feb 2021 09:35:27 +0000
ROA not after:            Tue 22 Feb 2022 09:40:27 +0000
asID:                     211837
IP address blocks:        45.85.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:70:0d:c3:8f:3b:49:1f:40:7c:f7:c2:59:29:5c:65:a9:74:13:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3749575771396070c1eb8ccebffaf75f05dbaf3c
        Validity
            Not Before: Feb 23 09:35:27 2021 GMT
            Not After : Feb 22 09:40:27 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5a:54:e0:02:23:ea:a5:67:ba:bd:3f:07:de:
                    8c:a1:32:87:6b:51:39:56:29:6b:2d:a1:53:6f:22:
                    8f:da:ee:0c:42:7d:82:18:3f:b2:c0:d8:ff:b9:6d:
                    3e:da:3c:a5:a2:f6:7f:4a:74:e6:0b:bc:2d:02:16:
                    b6:b8:99:f7:0e:37:02:db:c9:b8:d7:2b:09:b6:7e:
                    80:b3:ff:31:ba:cb:45:a1:54:da:d3:71:b2:f4:00:
                    40:3f:3c:ef:c0:10:7c:1a:2c:28:15:6a:5a:6e:50:
                    d2:e9:f9:ac:13:54:2b:95:5d:9c:0f:a2:19:78:16:
                    c6:1f:5a:d6:ed:e5:17:ed:22:c1:a2:53:a8:2e:b0:
                    26:02:c2:7f:95:57:cb:67:7e:8a:ee:e1:f9:f5:db:
                    ed:b2:0c:24:46:fd:c0:b4:37:c9:d4:d9:7e:18:bf:
                    5c:28:35:c1:3d:f0:55:e3:1f:b1:79:63:2b:2a:d2:
                    64:cb:f7:6d:1d:ea:2d:ab:7d:9a:36:10:16:89:5b:
                    c2:bf:94:3c:6c:10:32:9c:ba:cf:0f:de:89:43:a5:
                    99:ed:3a:e8:53:79:e2:fa:81:3d:55:22:3b:90:9c:
                    80:8a:2b:c2:61:cf:76:6a:64:d5:92:57:80:1e:dc:
                    65:6c:76:98:b4:72:2c:82:d6:ab:ee:a1:81:ed:9d:
                    5f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A8:94:77:2E:F6:89:97:ED:B8:6D:71:20:E3:A1:83:E1:49:A6:E7
            X509v3 Authority Key Identifier:
                keyid:37:49:57:57:71:39:60:70:C1:EB:8C:CE:BF:FA:F7:5F:05:DB:AF:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/9/3749575771396070C1EB8CCEBFFAF75F05DBAF3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0lXV3E5YHDB64zOv_r3XwXbrzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/9/34352e38352e3134342e302f32342d3234203d3e20323131383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.85.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:a0:f8:aa:02:2a:18:19:49:53:f0:07:af:eb:20:b6:00:df:
         0b:14:31:70:22:99:f0:53:82:76:68:78:01:16:7b:53:30:40:
         55:8f:66:28:41:87:d7:2d:e9:bb:e6:37:3a:fd:64:d3:f0:f0:
         a4:9f:33:14:54:31:12:05:9a:d5:a8:28:d7:dd:6c:28:a9:8a:
         9e:ea:de:d6:8c:13:64:f4:ef:16:32:68:02:ed:c7:3e:6b:d9:
         95:49:69:96:8f:16:ca:88:8a:de:91:d3:74:2f:8a:d4:73:78:
         fb:e6:25:6f:a3:3c:45:d5:bf:66:45:85:6c:7f:6c:f2:3d:32:
         01:a4:5d:46:85:26:3d:b3:42:53:19:de:fb:9e:f4:44:40:df:
         dc:2f:0e:38:67:df:18:6e:29:8a:6c:43:24:bd:9f:12:84:9f:
         81:d3:1e:26:45:ea:93:fa:e2:42:31:02:5c:ff:70:ec:1e:a7:
         52:29:7d:ec:25:e2:a6:85:41:cc:47:c2:2c:38:d1:b1:78:f3:
         c8:6c:8b:df:de:28:41:b2:1a:4d:b0:55:5d:28:99:66:f2:7b:
         7c:89:ec:a1:92:b0:20:76:64:41:a7:2e:c7:65:a9:75:60:02:
         58:7d:39:d7:c7:c4:da:82:71:00:17:9a:d6:02:81:c9:61:87:
         76:ec:a7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----