Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/10/34352e31302e3135362e302f32342d3234203d3e20323131383330.roa
File:                     34352e31302e3135362e302f32342d3234203d3e20323131383330.roa (raw, json)
Hash identifier:          nq0lqWDYl7a4YHb7+uDuTP27y++t7m8zQIleJT/4u1M=
Subject key identifier:   DA:F1:86:79:FE:AC:0F:FC:54:53:B3:1B:D0:BF:9D:86:0F:AC:3E:34
Certificate issuer:       /CN=a321f40755ab3c3944e2788b7c264e780d77cbea
Certificate serial:       3879CE3612F7B0541C62C77D499B383D74EF5E0D
Authority key identifier: A3:21:F4:07:55:AB:3C:39:44:E2:78:8B:7C:26:4E:78:0D:77:CB:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oyH0B1WrPDlE4niLfCZOeA13y-o.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/10/34352e31302e3135362e302f32342d3234203d3e20323131383330.roa
Signing time:             Sat 13 Feb 2021 18:27:29 +0000
ROA not before:           Sat 13 Feb 2021 18:22:29 +0000
ROA not after:            Sat 12 Feb 2022 18:27:29 +0000
asID:                     211830
IP address blocks:        45.10.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:79:ce:36:12:f7:b0:54:1c:62:c7:7d:49:9b:38:3d:74:ef:5e:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a321f40755ab3c3944e2788b7c264e780d77cbea
        Validity
            Not Before: Feb 13 18:22:29 2021 GMT
            Not After : Feb 12 18:27:29 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:46:99:d8:6b:b5:c6:71:0b:97:2a:d2:cb:8f:
                    d3:4d:eb:8d:6e:e2:c9:84:ec:a1:fc:06:bb:4c:4b:
                    5e:a8:1f:30:36:fc:d6:aa:68:75:e8:ba:d3:5c:8d:
                    89:3a:02:11:83:44:bd:10:3e:78:6e:e0:e6:37:84:
                    20:37:94:6d:cf:b2:5d:37:b0:03:a3:a5:68:4a:6b:
                    fe:a6:d1:4c:c2:a5:17:07:eb:d8:32:07:28:45:66:
                    29:47:09:43:80:56:2e:dd:03:de:4a:80:75:95:57:
                    69:53:9e:09:c0:e8:35:4b:f5:f5:a0:10:f2:db:a8:
                    ef:b8:4f:f7:9c:3b:8a:c8:d5:96:4e:35:db:cd:7c:
                    62:69:0a:b7:a2:fd:7e:44:17:22:39:a7:62:13:63:
                    86:58:d2:ed:fc:57:31:c7:a9:f7:d2:64:29:c4:8a:
                    13:cc:15:01:b9:a9:03:9b:66:3d:bc:34:c5:c4:2e:
                    c6:21:53:4e:a7:1c:cd:9d:cd:a7:59:65:03:5e:96:
                    5d:a0:dd:d9:16:54:17:98:6d:93:fa:00:ac:d2:a6:
                    7d:bd:55:37:81:4e:f1:84:dc:83:40:12:c3:46:76:
                    fd:d5:19:17:c5:e7:ca:cb:80:65:86:c9:1f:12:4f:
                    11:a3:ca:49:83:d2:c7:48:44:ed:51:21:d4:54:a4:
                    d2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F1:86:79:FE:AC:0F:FC:54:53:B3:1B:D0:BF:9D:86:0F:AC:3E:34
            X509v3 Authority Key Identifier:
                keyid:A3:21:F4:07:55:AB:3C:39:44:E2:78:8B:7C:26:4E:78:0D:77:CB:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/10/A321F40755AB3C3944E2788B7C264E780D77CBEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyH0B1WrPDlE4niLfCZOeA13y-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/10/34352e31302e3135362e302f32342d3234203d3e20323131383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:9c:f9:5e:f3:59:78:df:18:9f:2e:7b:cd:85:b4:d1:70:d3:
         c8:f2:db:9e:93:d6:ab:8c:0b:39:89:39:20:31:92:11:4f:bf:
         83:7c:35:88:d5:43:eb:1c:0e:29:ba:e1:64:2e:8e:37:2f:a3:
         0c:e6:35:d1:0c:4a:8f:f4:64:24:68:dc:75:11:df:4d:53:d0:
         75:67:fc:51:12:e8:97:b9:8e:c3:de:85:ee:10:2b:7f:8a:5a:
         85:b7:fc:66:75:8f:ce:ca:8c:74:65:74:0b:df:a4:cf:99:f5:
         05:42:60:14:a2:ad:55:57:9f:e8:b3:61:66:63:61:b9:84:58:
         38:e5:37:36:51:3c:b6:ed:f8:72:43:98:49:86:4b:b8:3e:d0:
         4d:43:e0:51:42:64:51:bb:59:42:1f:36:8d:23:fc:22:bd:21:
         8e:49:eb:7d:13:d4:89:95:d8:1f:ae:85:b3:7f:47:7c:b6:2f:
         94:a3:61:b3:ac:c8:ab:98:af:11:5f:5d:91:0a:8a:87:ae:8b:
         66:e5:b2:2b:ca:79:91:dd:bd:97:c2:ff:7a:79:a4:52:5e:1a:
         c1:9d:c0:fa:a9:42:b9:02:3e:6f:1e:97:c2:db:c4:ed:30:b7:
         14:70:20:7c:8b:51:8e:44:2e:37:c4:c2:14:e9:e9:c5:6f:1b:
         29:aa:4b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----