Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/10/34352e31302e3135362e302f32332d3234203d3e203631333137.roa
File:                     34352e31302e3135362e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          2/+Aav0hKCAO8d3lRnABUmvf5NQpFlrWW0CMP//TEZA=
Subject key identifier:   6B:FA:72:54:CD:8B:72:80:E2:30:B8:63:63:9F:FE:34:11:10:E9:71
Certificate issuer:       /CN=a321f40755ab3c3944e2788b7c264e780d77cbea
Certificate serial:       3A42B9CD4C2DF1E0EA03E8CFA491B5F43922D0E7
Authority key identifier: A3:21:F4:07:55:AB:3C:39:44:E2:78:8B:7C:26:4E:78:0D:77:CB:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oyH0B1WrPDlE4niLfCZOeA13y-o.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/10/34352e31302e3135362e302f32332d3234203d3e203631333137.roa
Signing time:             Fri 27 Nov 2020 15:10:25 +0000
ROA not before:           Fri 27 Nov 2020 15:05:25 +0000
ROA not after:            Fri 26 Nov 2021 15:10:25 +0000
asID:                     61317
IP address blocks:        45.10.156.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:42:b9:cd:4c:2d:f1:e0:ea:03:e8:cf:a4:91:b5:f4:39:22:d0:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a321f40755ab3c3944e2788b7c264e780d77cbea
        Validity
            Not Before: Nov 27 15:05:25 2020 GMT
            Not After : Nov 26 15:10:25 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cd:c9:31:73:01:d7:6f:51:59:71:26:6b:d5:
                    9e:7f:26:68:df:38:4c:49:b0:de:be:a5:59:2c:ea:
                    b1:94:b6:f9:b9:20:70:b3:a2:7c:c9:f9:17:f4:f2:
                    56:19:9c:52:2c:93:c1:8b:4c:7e:2d:01:5c:06:fc:
                    71:65:8f:d2:55:84:e0:32:c0:17:e7:72:66:bc:e2:
                    67:8f:f6:32:74:58:5c:a5:23:55:ae:a0:11:78:92:
                    c6:a6:21:54:7d:9d:fb:47:a0:8c:db:6c:97:44:a3:
                    7d:80:c1:64:64:a3:57:59:a6:a8:48:ee:70:2a:a1:
                    c3:40:d4:1d:9c:e3:b5:db:c5:b8:99:60:4a:9f:ea:
                    bf:45:52:47:c7:c0:8f:eb:55:a1:16:f6:02:b3:2c:
                    0f:c8:a2:62:d1:55:c6:07:db:a5:63:f9:ad:eb:ab:
                    47:30:72:6a:5b:4a:67:eb:87:0f:b9:48:88:6c:3e:
                    9b:41:6f:92:1d:78:90:35:c0:b5:38:39:56:ef:38:
                    77:78:fa:72:87:f3:1f:33:52:b1:a1:cc:cd:a7:b0:
                    fe:b7:17:ea:dd:df:ed:e8:93:fc:5d:19:f8:70:09:
                    ec:e7:6c:db:21:0e:e7:f1:a9:f4:98:e1:8d:2f:c7:
                    db:ed:bd:b1:33:fb:00:f3:41:20:16:e4:3c:4b:ea:
                    4d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:FA:72:54:CD:8B:72:80:E2:30:B8:63:63:9F:FE:34:11:10:E9:71
            X509v3 Authority Key Identifier:
                keyid:A3:21:F4:07:55:AB:3C:39:44:E2:78:8B:7C:26:4E:78:0D:77:CB:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/10/A321F40755AB3C3944E2788B7C264E780D77CBEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyH0B1WrPDlE4niLfCZOeA13y-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/10/34352e31302e3135362e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:21:c3:ba:92:7a:48:f8:73:66:ae:f6:4c:0d:0d:c5:40:ac:
         10:db:19:9f:dc:ec:a9:51:7f:a8:f1:08:cc:6b:9b:79:74:7b:
         a8:06:48:26:9e:a9:8c:71:29:84:38:16:52:bb:02:f3:a5:f8:
         5d:e5:ee:c0:09:da:b6:1d:60:cf:ce:73:aa:a7:58:ed:0a:e2:
         00:f7:fc:34:24:79:89:50:f4:34:e8:36:ec:ed:a5:99:84:9d:
         11:9d:f3:a4:f5:77:76:7c:30:23:2d:e7:3f:f3:d6:5e:1b:9e:
         5c:6f:21:ca:3a:51:ea:f3:a1:b3:42:8f:69:e3:53:f1:bd:c6:
         19:b4:b9:f1:3e:c9:e9:1e:6f:86:5b:51:94:c6:1a:42:f2:a6:
         e2:42:87:a6:5f:74:dd:fc:44:90:ed:dd:e4:a5:c8:88:11:12:
         b2:75:e4:8a:93:99:0d:d0:be:2c:ed:a9:cb:79:c8:ab:50:64:
         d6:c6:3f:f3:8a:53:4f:91:8f:ee:6f:bf:26:b6:d8:8f:ec:a4:
         09:6b:20:88:bf:42:e9:09:d1:0b:3c:72:71:d1:e3:87:dd:d5:
         8b:62:0f:55:55:dc:f0:e4:2b:f1:c4:a8:33:e3:56:71:d6:13:
         e2:69:90:d1:0b:66:f5:6a:07:3d:55:37:f5:14:b2:9a:5d:e9:
         c0:f5:62:9d
-----BEGIN CERTIFICATE-----
MIIG4zCCBcugAwIBAgIUOkK5zUwt8eDqA+jPpJG19Dki0OcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTMyMWY0MDc1NWFiM2MzOTQ0ZTI3ODhiN2MyNjRlNzgw
ZDc3Y2JlYTAeFw0yMDExMjcxNTA1MjVaFw0yMTExMjYxNTEwMjVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjNDREM5MzE3MzAxRDc2RjUx
NTk3MTI2NkJENTlFN0YyNjY4REYzODRDNDlCMERFQkVBNTU5MkNFQUIxOTRCNkY5
QjkyMDcwQjNBMjdDQzlGOTE3RjRGMjU2MTk5QzUyMkM5M0MxOEI0QzdFMkQwMTVD
MDZGQzcxNjU4RkQyNTU4NEUwMzJDMDE3RTc3MjY2QkNFMjY3OEZGNjMyNzQ1ODVD
QTUyMzU1QUVBMDExNzg5MkM2QTYyMTU0N0Q5REZCNDdBMDhDREI2Qzk3NDRBMzdE
ODBDMTY0NjRBMzU3NTlBNkE4NDhFRTcwMkFBMUMzNDBENDFEOUNFM0I1REJDNUI4
OTk2MDRBOUZFQUJGNDU1MjQ3QzdDMDhGRUI1NUExMTZGNjAyQjMyQzBGQzhBMjYy
RDE1NUM2MDdEQkE1NjNGOUFERUJBQjQ3MzA3MjZBNUI0QTY3RUI4NzBGQjk0ODg4
NkMzRTlCNDE2RjkyMUQ3ODkwMzVDMEI1MzgzOTU2RUYzODc3NzhGQTcyODdGMzFG
MzM1MkIxQTFDQ0NEQTdCMEZFQjcxN0VBRERERkVERTg5M0ZDNUQxOUY4NzAwOUVD
RTc2Q0RCMjEwRUU3RjFBOUY0OThFMThEMkZDN0RCRURCREIxMzNGQjAwRjM0MTIw
MTZFNDNDNEJFQTREMzcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAs83JMXMB129RWXEma9WefyZo3zhMSbDevqVZLOqxlLb5uSBws6J8
yfkX9PJWGZxSLJPBi0x+LQFcBvxxZY/SVYTgMsAX53JmvOJnj/YydFhcpSNVrqAR
eJLGpiFUfZ37R6CM22yXRKN9gMFkZKNXWaaoSO5wKqHDQNQdnOO128W4mWBKn+q/
RVJHx8CP61WhFvYCsywPyKJi0VXGB9ulY/mt66tHMHJqW0pn64cPuUiIbD6bQW+S
HXiQNcC1ODlW7zh3ePpyh/MfM1KxoczNp7D+txfq3d/t6JP8XRn4cAns52zbIQ7n
8an0mOGNL8fb7b2xM/sA80EgFuQ8S+pNNwIDAQABo4IB8TCCAe0wHQYDVR0OBBYE
FGv6clTNi3KA4jC4Y2Of/jQREOlxMB8GA1UdIwQYMBaAFKMh9AdVqzw5ROJ4i3wm
TngNd8vqMA4GA1UdDwEB/wQEAwIHgDBwBgNVHR8EaTBnMGWgY6Bhhl9yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xMC9BMzIx
RjQwNzU1QUIzQzM5NDRFMjc4OEI3QzI2NEU3ODBENzdDQkVBLmNybDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3lIMEIxV3JQRGxFNG5pTGZDWk9lQTEzeS1vLmNlcjCB
hwYIKwYBBQUHAQsEezB5MHcGCCsGAQUFBzALhmtyc3luYzovL3Jwa2kxLnRlcnJh
dHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xMC8zNDM1MmUzMTMwMmUzMTM1
MzYyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNjMxMzMzMTM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
LQqcMA0GCSqGSIb3DQEBCwUAA4IBAQArIcO6knpI+HNmrvZMDQ3FQKwQ2xmf3Oyp
UX+o8QjMa5t5dHuoBkgmnqmMcSmEOBZSuwLzpfhd5e7ACdq2HWDPznOqp1jtCuIA
9/w0JHmJUPQ06Dbs7aWZhJ0RnfOk9Xd2fDAjLec/89ZeG55cbyHKOlHq86GzQo9p
41PxvcYZtLnxPsnpHm+GW1GUxhpC8qbiQoemX3Td/ESQ7d3kpciIERKydeSKk5kN
0L4s7anLecirUGTWxj/zilNPkY/ub78mttiP7KQJayCIv0LpCdELPHJx0eOH3dWL
Yg9VVdzw5CvxxKgz41Zx1hPiaZDRC2b1agc9VTf1FLKaXenA9WKd
-----END CERTIFICATE-----