Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/10/34352e31302e3135362e302f32342d3234203d3e20323132303737.roa
File:                     34352e31302e3135362e302f32342d3234203d3e20323132303737.roa (raw, json)
Hash identifier:          trwul+0w1Vhk07VOKwVeXCjVecBJd13yedGCZIeM4wU=
Subject key identifier:   4D:35:32:C6:79:C9:D7:82:71:B9:D9:A7:FE:AC:C2:54:C3:8E:5E:6B
Certificate issuer:       /CN=a321f40755ab3c3944e2788b7c264e780d77cbea
Certificate serial:       7AB8DC3DC87B085B004A7CDCEC1F665C9BD572B5
Authority key identifier: A3:21:F4:07:55:AB:3C:39:44:E2:78:8B:7C:26:4E:78:0D:77:CB:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oyH0B1WrPDlE4niLfCZOeA13y-o.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/10/34352e31302e3135362e302f32342d3234203d3e20323132303737.roa
Signing time:             Thu 31 Dec 2020 18:51:37 +0000
ROA not before:           Thu 31 Dec 2020 18:46:37 +0000
ROA not after:            Thu 30 Dec 2021 18:51:37 +0000
asID:                     212077
IP address blocks:        45.10.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b8:dc:3d:c8:7b:08:5b:00:4a:7c:dc:ec:1f:66:5c:9b:d5:72:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a321f40755ab3c3944e2788b7c264e780d77cbea
        Validity
            Not Before: Dec 31 18:46:37 2020 GMT
            Not After : Dec 30 18:51:37 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4a:80:d8:28:5c:4c:a0:dd:81:4c:d9:f8:b4:
                    a1:bd:d1:fd:84:0b:65:6c:49:09:92:5d:2a:9c:2c:
                    a8:34:69:07:d5:dc:30:49:62:7b:4c:12:38:63:9d:
                    94:64:6d:0e:7a:40:92:9b:4d:4f:4d:c4:43:de:28:
                    2d:74:9b:00:fe:0e:71:a1:bc:fb:5d:a8:62:c2:44:
                    84:0c:b2:0b:ab:66:72:44:56:be:8b:ed:ed:23:15:
                    3a:14:25:a0:55:b5:77:6d:10:c5:55:68:5c:ee:28:
                    d1:88:e5:bb:79:7d:94:f7:02:38:7a:f0:84:89:4a:
                    92:21:cd:c1:43:5f:a9:0e:c2:f5:dc:aa:44:66:ff:
                    29:ec:5e:c9:87:01:52:82:dd:2b:2a:dc:67:9a:0e:
                    a1:0e:96:7f:73:5f:59:c3:f1:79:93:51:d7:ce:c5:
                    34:1f:73:2e:d1:ba:76:fc:ab:ac:7d:e9:38:4b:f0:
                    59:9c:11:dd:f7:1e:97:2e:16:67:c0:04:1d:89:20:
                    91:15:e1:15:c8:5f:b6:49:a0:63:51:77:dc:97:00:
                    3f:38:3a:b3:9b:95:bb:b7:d4:5d:86:43:af:35:3a:
                    14:ed:cb:53:df:53:d2:d6:28:6e:7b:29:02:1f:1c:
                    65:64:56:84:d0:12:53:1c:0b:ce:7d:ac:aa:57:65:
                    71:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:35:32:C6:79:C9:D7:82:71:B9:D9:A7:FE:AC:C2:54:C3:8E:5E:6B
            X509v3 Authority Key Identifier:
                keyid:A3:21:F4:07:55:AB:3C:39:44:E2:78:8B:7C:26:4E:78:0D:77:CB:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/10/A321F40755AB3C3944E2788B7C264E780D77CBEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyH0B1WrPDlE4niLfCZOeA13y-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/10/34352e31302e3135362e302f32342d3234203d3e20323132303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:20:cd:50:fb:d8:cf:9a:35:53:05:a0:75:6e:b2:64:94:57:
         f8:9e:3d:b2:74:3a:8a:9d:0b:1e:71:0c:2e:f6:6a:0e:ae:be:
         06:78:82:7b:d9:1e:9c:6c:48:f9:f5:a5:ba:ed:e2:5e:a3:8f:
         0c:c4:a5:ae:40:76:bd:79:28:2d:4b:67:37:d6:cc:11:7d:fa:
         e5:c8:93:88:16:a1:6b:c3:9f:82:93:cf:63:c0:c0:b2:b0:ae:
         29:9e:5d:84:18:db:5e:1f:75:78:45:da:fa:4f:8a:36:a8:d8:
         53:8b:b5:35:78:b2:1c:ac:e9:d5:61:d5:92:6d:3e:e4:02:82:
         34:dd:95:43:c0:86:ce:d0:60:ab:6d:4c:32:74:7b:c5:4e:a6:
         36:f2:88:2a:ed:30:ac:d2:25:e8:93:fe:30:f4:6f:6c:66:dd:
         96:28:c0:42:ef:9b:67:7f:3b:c6:cd:97:04:20:a0:b4:fb:9a:
         22:db:4c:5c:94:b4:cc:40:e0:a5:f3:b9:25:96:f0:ff:32:7e:
         9d:17:af:80:56:e3:f0:18:9c:dc:a9:c9:df:c4:f8:2a:6e:10:
         56:1f:20:22:2c:64:bb:fb:55:e9:f4:96:99:10:19:b5:6b:9a:
         21:d3:60:e6:bb:c8:8c:ea:d8:89:50:ff:45:62:f5:5a:cd:7c:
         7b:6e:7a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----