Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/10/34352e31302e3135362e302f32342d3234203d3e20323037373837.roa
File:                     34352e31302e3135362e302f32342d3234203d3e20323037373837.roa (raw, json)
Hash identifier:          x72EhyztcXQMENad5nIV6D3gBhu/6mOGIiLkHauU5iA=
Subject key identifier:   2C:AB:B9:44:74:E8:78:05:DF:6A:6C:54:CE:53:35:91:07:F3:AA:B6
Certificate issuer:       /CN=a321f40755ab3c3944e2788b7c264e780d77cbea
Certificate serial:       3F1A28D792ADDA9F4105A7763AC01B683AEBFF12
Authority key identifier: A3:21:F4:07:55:AB:3C:39:44:E2:78:8B:7C:26:4E:78:0D:77:CB:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oyH0B1WrPDlE4niLfCZOeA13y-o.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/10/34352e31302e3135362e302f32342d3234203d3e20323037373837.roa
Signing time:             Tue 23 Feb 2021 09:40:54 +0000
ROA not before:           Tue 23 Feb 2021 09:35:54 +0000
ROA not after:            Tue 22 Feb 2022 09:40:54 +0000
asID:                     207787
IP address blocks:        45.10.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:1a:28:d7:92:ad:da:9f:41:05:a7:76:3a:c0:1b:68:3a:eb:ff:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a321f40755ab3c3944e2788b7c264e780d77cbea
        Validity
            Not Before: Feb 23 09:35:54 2021 GMT
            Not After : Feb 22 09:40:54 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:25:82:c3:ee:72:a7:6e:c6:a4:45:f8:5b:6e:
                    da:92:ed:dc:26:e3:2c:30:87:dd:64:de:45:f2:c8:
                    be:3b:12:14:6d:c0:32:f8:c5:1b:b6:dd:4e:c0:b0:
                    b8:4f:b9:b4:82:47:46:fc:94:91:3e:ff:ba:14:b8:
                    20:b9:c1:1d:4c:a8:7c:92:1e:4a:3f:63:7c:f9:33:
                    f2:09:0e:35:61:38:a9:2b:06:a2:2d:ed:c5:6b:b2:
                    58:21:f0:00:d6:8e:65:9b:d6:4a:2a:77:34:a1:2e:
                    ed:69:d3:26:4c:0b:d8:ac:5f:e3:b7:37:a9:1b:ed:
                    05:17:68:dd:b2:53:4c:73:44:cc:f1:1e:6d:d6:03:
                    d3:e9:71:88:f2:b5:e4:5d:37:b5:44:cb:fa:cb:ca:
                    57:83:83:cb:bb:0c:7a:34:c1:23:5a:4d:7a:c1:28:
                    96:9f:00:67:29:c2:dc:f6:f1:67:93:9d:d2:44:b8:
                    0f:10:04:28:07:7a:6a:66:92:75:7b:1b:5f:48:3b:
                    5c:78:dd:9f:2b:78:cf:b0:de:71:25:49:31:46:be:
                    ea:15:b3:02:89:19:ef:68:7d:13:8c:52:4a:8f:34:
                    25:bd:be:7d:f8:55:4b:b6:83:40:fd:6d:41:3b:bd:
                    70:61:88:e8:28:6c:28:f0:93:b9:d3:39:26:7c:03:
                    51:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:AB:B9:44:74:E8:78:05:DF:6A:6C:54:CE:53:35:91:07:F3:AA:B6
            X509v3 Authority Key Identifier:
                keyid:A3:21:F4:07:55:AB:3C:39:44:E2:78:8B:7C:26:4E:78:0D:77:CB:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/10/A321F40755AB3C3944E2788B7C264E780D77CBEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyH0B1WrPDlE4niLfCZOeA13y-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/10/34352e31302e3135362e302f32342d3234203d3e20323037373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:ec:05:14:70:77:ba:ac:91:a9:4c:61:38:c1:fa:52:9b:ef:
         1e:69:7f:52:d0:dd:16:fd:56:89:b1:82:9a:1f:95:45:65:af:
         9e:b9:3c:68:d7:fc:da:3a:7a:07:cc:aa:a7:6a:a9:c6:f8:75:
         90:9d:f5:bc:48:46:ec:60:4f:73:81:11:b2:92:cc:8f:3a:a9:
         87:34:64:61:e9:5f:f9:24:02:a2:1f:45:61:6d:be:08:e0:d1:
         18:4b:2c:f1:54:e4:25:3e:0b:2d:7b:db:46:1a:b6:dd:70:4f:
         4d:a8:06:6e:a3:74:da:43:86:27:e9:d2:e2:4e:65:75:0b:11:
         e5:1c:58:91:9c:51:7e:3c:07:dc:b7:8d:ad:ec:4d:46:6a:86:
         86:92:d9:72:bf:56:2f:bc:eb:2e:0b:6c:24:5b:36:16:39:3a:
         46:38:50:45:27:43:8a:38:e1:c7:b0:e9:a7:8e:d3:89:16:19:
         ab:28:6a:f5:79:65:00:bd:31:24:9e:ee:09:cd:bf:01:af:3a:
         19:46:2b:51:31:06:c6:14:cd:c6:81:f7:9e:71:1b:04:4a:fa:
         02:a9:1b:df:a7:dd:89:73:3b:3d:fd:86:40:bd:63:d3:f9:5f:
         44:37:c3:fd:d0:44:d2:f3:f5:03:8e:fc:5a:1b:62:11:64:5f:
         7c:ee:f6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----