Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/10/34352e31302e3135362e302f32342d3234203d3e20323132323938.roa
File:                     34352e31302e3135362e302f32342d3234203d3e20323132323938.roa (raw, json)
Hash identifier:          uXw0iceACxsyphtDiTnsbIoBTiHbmBTql6lOOh9ena4=
Subject key identifier:   FE:36:7A:C1:D1:28:42:3F:D0:BB:4D:52:BB:1A:C2:58:09:C7:AB:C1
Certificate issuer:       /CN=a321f40755ab3c3944e2788b7c264e780d77cbea
Certificate serial:       034700E0581C0AF42420195EFA4FF77E1EEEF53E
Authority key identifier: A3:21:F4:07:55:AB:3C:39:44:E2:78:8B:7C:26:4E:78:0D:77:CB:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oyH0B1WrPDlE4niLfCZOeA13y-o.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/10/34352e31302e3135362e302f32342d3234203d3e20323132323938.roa
Signing time:             Fri 27 Nov 2020 15:10:25 +0000
ROA not before:           Fri 27 Nov 2020 15:05:25 +0000
ROA not after:            Fri 26 Nov 2021 15:10:25 +0000
asID:                     212298
IP address blocks:        45.10.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:47:00:e0:58:1c:0a:f4:24:20:19:5e:fa:4f:f7:7e:1e:ee:f5:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a321f40755ab3c3944e2788b7c264e780d77cbea
        Validity
            Not Before: Nov 27 15:05:25 2020 GMT
            Not After : Nov 26 15:10:25 2021 GMT
        Subject: CN=3082010A0282010100B48773A8D2E4AC41687C643B688AFE73CD6C1EB5D1C37C731866E4CB0F75656504971E2073319EDC60CBAFB135313BCABFCD6345967E1D9BCF3F631EA65D402C3BBAA3B4D08F9315DF55A0B383AF01E13325C82BBC9A32DDBD6FC7EFD4D95B80216F4E412389156E968F85E385ABC89F747AA37B0C226F1CF94A244B2863173915F04452224899314E8C773C132EFAD78FB55C7E656B0BF6A87283DF449C3ECC46DB963370341039F00BECD5D72878C3F14C5D3E3E9C2FFBC8E4D9068D345F17A244F0C5B2B921C4707D39E18CA26C8F95004B5BDDFA397F53283B62FF818586666EF27EEB3FEF6C7829E1FF03BCB301A9B09F13AFAB9A024938CE7598B2C86F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:87:73:a8:d2:e4:ac:41:68:7c:64:3b:68:8a:
                    fe:73:cd:6c:1e:b5:d1:c3:7c:73:18:66:e4:cb:0f:
                    75:65:65:04:97:1e:20:73:31:9e:dc:60:cb:af:b1:
                    35:31:3b:ca:bf:cd:63:45:96:7e:1d:9b:cf:3f:63:
                    1e:a6:5d:40:2c:3b:ba:a3:b4:d0:8f:93:15:df:55:
                    a0:b3:83:af:01:e1:33:25:c8:2b:bc:9a:32:dd:bd:
                    6f:c7:ef:d4:d9:5b:80:21:6f:4e:41:23:89:15:6e:
                    96:8f:85:e3:85:ab:c8:9f:74:7a:a3:7b:0c:22:6f:
                    1c:f9:4a:24:4b:28:63:17:39:15:f0:44:52:22:48:
                    99:31:4e:8c:77:3c:13:2e:fa:d7:8f:b5:5c:7e:65:
                    6b:0b:f6:a8:72:83:df:44:9c:3e:cc:46:db:96:33:
                    70:34:10:39:f0:0b:ec:d5:d7:28:78:c3:f1:4c:5d:
                    3e:3e:9c:2f:fb:c8:e4:d9:06:8d:34:5f:17:a2:44:
                    f0:c5:b2:b9:21:c4:70:7d:39:e1:8c:a2:6c:8f:95:
                    00:4b:5b:dd:fa:39:7f:53:28:3b:62:ff:81:85:86:
                    66:6e:f2:7e:eb:3f:ef:6c:78:29:e1:ff:03:bc:b3:
                    01:a9:b0:9f:13:af:ab:9a:02:49:38:ce:75:98:b2:
                    c8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:36:7A:C1:D1:28:42:3F:D0:BB:4D:52:BB:1A:C2:58:09:C7:AB:C1
            X509v3 Authority Key Identifier:
                keyid:A3:21:F4:07:55:AB:3C:39:44:E2:78:8B:7C:26:4E:78:0D:77:CB:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/10/A321F40755AB3C3944E2788B7C264E780D77CBEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyH0B1WrPDlE4niLfCZOeA13y-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/10/34352e31302e3135362e302f32342d3234203d3e20323132323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:ff:b2:73:89:03:15:b0:2e:60:22:0d:a3:4f:ca:ac:0b:5c:
         b5:c5:d0:e9:de:77:b2:49:a6:b6:19:7b:ba:da:d7:2e:82:ae:
         84:25:ce:54:f5:cc:c1:db:62:2d:7f:a5:21:f8:21:5e:84:9d:
         5d:d5:88:2e:63:46:c4:02:32:3c:f9:45:65:07:2f:1a:ee:ea:
         c7:7d:1a:10:3d:04:c8:86:11:b7:de:c4:1a:0f:1b:ee:bd:cb:
         7c:0f:10:9a:62:1b:41:0e:39:0d:bd:c3:53:84:89:74:d8:a0:
         84:9e:d1:54:1c:ff:38:78:89:88:08:94:2c:72:eb:52:14:98:
         42:f1:f8:81:5f:4e:85:2c:fa:6b:14:fd:97:ed:5a:62:8f:cb:
         f5:33:3a:ca:aa:75:c8:03:d4:b5:78:f4:58:75:0c:92:43:6d:
         76:76:07:66:fa:82:9e:84:b7:f5:f1:fc:38:80:f5:b8:f4:7a:
         22:7a:92:a9:22:e2:a6:e5:f3:4d:b8:10:e7:a1:73:c2:db:31:
         f4:00:45:a0:e7:b7:55:7b:f6:2b:f0:d4:93:79:dd:25:62:32:
         7b:41:1c:d4:43:73:74:ae:d3:eb:13:a8:04:42:d6:e2:48:12:
         65:5a:36:37:cd:f4:20:13:a7:a0:88:0d:de:fe:8a:af:3f:4b:
         65:65:13:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----