Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/10/34352e31302e3135382e302f32332d3234203d3e203631333137.roa
File:                     34352e31302e3135382e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          2Ny56qxRKVxU/CzINtWNRJf8NgfN1Heen1wg4cscEMQ=
Subject key identifier:   0D:F4:15:62:60:19:DC:77:72:42:1B:A1:17:C4:16:39:63:CB:5C:32
Certificate issuer:       /CN=a321f40755ab3c3944e2788b7c264e780d77cbea
Certificate serial:       17A97758884EE519DAB2CFE33CB125E956098254
Authority key identifier: A3:21:F4:07:55:AB:3C:39:44:E2:78:8B:7C:26:4E:78:0D:77:CB:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oyH0B1WrPDlE4niLfCZOeA13y-o.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/10/34352e31302e3135382e302f32332d3234203d3e203631333137.roa
Signing time:             Fri 27 Nov 2020 15:10:25 +0000
ROA not before:           Fri 27 Nov 2020 15:05:25 +0000
ROA not after:            Fri 26 Nov 2021 15:10:25 +0000
asID:                     61317
IP address blocks:        45.10.158.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a9:77:58:88:4e:e5:19:da:b2:cf:e3:3c:b1:25:e9:56:09:82:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a321f40755ab3c3944e2788b7c264e780d77cbea
        Validity
            Not Before: Nov 27 15:05:25 2020 GMT
            Not After : Nov 26 15:10:25 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7a:cc:a9:40:4e:8b:8a:0f:1c:84:6c:42:ee:
                    e3:50:71:61:06:f1:51:a5:a1:bf:21:16:2f:e6:38:
                    4d:8f:95:90:c5:62:84:4b:ec:1b:24:7d:7b:94:07:
                    ac:0e:4b:18:b0:69:0d:d4:02:06:53:a4:09:8b:78:
                    51:f3:5d:ae:18:47:4a:12:24:83:8b:13:26:d8:05:
                    d8:18:14:74:69:32:b3:cf:56:fd:07:74:bd:d4:4b:
                    03:7d:69:64:3f:d0:48:fb:ce:0a:ae:94:ba:7e:c9:
                    e6:4d:70:06:fd:ea:ad:50:b2:69:45:5b:72:bb:52:
                    ce:42:f7:16:fe:62:e3:1e:d4:3b:21:de:c4:52:70:
                    21:82:90:24:ae:3d:58:e2:8d:6f:a6:27:1e:ee:0a:
                    b1:e3:37:7e:04:05:e8:f5:d3:d4:a8:e2:38:63:13:
                    7e:8a:2e:dc:bc:56:6a:a8:90:c5:16:6f:4b:1c:c8:
                    74:d1:fa:c8:c8:cb:14:c5:99:7c:81:11:ea:77:f4:
                    5b:b4:39:4a:aa:8c:7f:15:9a:47:2e:26:de:1e:9a:
                    51:97:7e:2e:41:60:33:28:2a:1f:f7:02:1f:49:cd:
                    42:bb:38:98:8f:fa:77:04:ec:68:86:98:4b:5b:09:
                    75:04:c2:5c:31:f0:68:09:38:ce:cf:d6:63:02:2d:
                    0c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F4:15:62:60:19:DC:77:72:42:1B:A1:17:C4:16:39:63:CB:5C:32
            X509v3 Authority Key Identifier:
                keyid:A3:21:F4:07:55:AB:3C:39:44:E2:78:8B:7C:26:4E:78:0D:77:CB:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/10/A321F40755AB3C3944E2788B7C264E780D77CBEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyH0B1WrPDlE4niLfCZOeA13y-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/10/34352e31302e3135382e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:41:66:26:6c:5f:64:2a:66:72:c3:08:c0:f0:82:c4:c8:25:
         d0:33:3a:29:35:63:88:22:81:15:3c:fa:86:63:ce:6b:a7:30:
         d4:c0:88:b3:f5:fc:b9:b9:99:0a:37:e3:91:51:91:b8:76:b1:
         cd:98:21:ad:a3:b2:cc:69:7b:fd:31:66:32:78:8a:9b:6c:a5:
         f9:7d:b2:ad:c1:66:62:23:92:60:0c:ef:b9:86:e9:91:7f:12:
         82:57:be:48:62:50:f1:cc:ea:e9:c5:90:2a:fa:0c:8e:eb:10:
         7b:9c:2f:2c:a2:70:30:f8:ab:0c:7d:3f:66:b4:63:6e:ef:b1:
         8f:8b:3e:03:cd:19:16:1a:6a:77:b2:05:37:60:ec:7a:57:5f:
         3e:fa:47:44:c7:5c:79:15:2f:18:ec:f7:a5:c0:f2:8d:db:9f:
         ec:cd:91:93:93:20:0c:8d:b6:fb:56:18:a8:66:6b:14:5e:5e:
         af:9e:dd:35:a1:f8:ce:72:d5:7c:df:e9:34:4c:66:90:a1:99:
         2b:1e:9c:f6:35:db:74:8b:bc:00:30:22:10:3d:bc:8a:c5:7e:
         5c:97:e9:d2:40:61:dc:94:1a:c9:93:96:dc:7f:25:ff:d5:0f:
         76:d6:2c:e5:0d:36:4d:e9:ad:bd:62:5e:31:a0:dc:9e:01:c1:
         56:c1:e3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----