Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/10/34352e31302e3135362e302f32342d3234203d3e20323132383738.roa
File:                     34352e31302e3135362e302f32342d3234203d3e20323132383738.roa (raw, json)
Hash identifier:          +01Cl7Ad+GSjLf9kzhIU+6VvX+1yXttIJiidpexMY7Q=
Subject key identifier:   56:14:D5:4F:36:82:5E:76:39:F0:10:15:46:F0:35:9D:75:16:6C:75
Certificate issuer:       /CN=a321f40755ab3c3944e2788b7c264e780d77cbea
Certificate serial:       218D0D2E82914F488F0B8D4DD51C87AD120B5CB5
Authority key identifier: A3:21:F4:07:55:AB:3C:39:44:E2:78:8B:7C:26:4E:78:0D:77:CB:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oyH0B1WrPDlE4niLfCZOeA13y-o.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/10/34352e31302e3135362e302f32342d3234203d3e20323132383738.roa
Signing time:             Fri 27 Nov 2020 15:10:25 +0000
ROA not before:           Fri 27 Nov 2020 15:05:25 +0000
ROA not after:            Fri 26 Nov 2021 15:10:25 +0000
asID:                     212878
IP address blocks:        45.10.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:8d:0d:2e:82:91:4f:48:8f:0b:8d:4d:d5:1c:87:ad:12:0b:5c:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a321f40755ab3c3944e2788b7c264e780d77cbea
        Validity
            Not Before: Nov 27 15:05:25 2020 GMT
            Not After : Nov 26 15:10:25 2021 GMT
        Subject: CN=3082010A0282010100E3D498D18E195BCC1AEA247147D0FA4157E533F0D65D072057BE2836D7944640B3082B103ECF2D3A6E7A0D236ADD52D94CD76C9612BACE9234F3F07F3B67A2EE5EBF57BC0A20EABA87C90AFCCF92A2AB217536BBFD737D44CBE154578EF695C82520457B6A3A7FCAAD9C4FB10B8812482C98C634E636DA0350F7D747D851CDD9CC94DD0E829C47538C0EDC580465E77CA6F4573E50525067DDAF584166C3EE7B23FF829FBD71EA24999AEC8C3E4FBBBE82AC4209BD90D0FBB857703B8D0D5E5EE05FA4442364094CB86A36F6D1A2877B484E3E65DD568CCDD399DBC41E736DD019379E9291F791C10013F0B902FB44F94956835850522632747887F7C2E0F9950203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d4:98:d1:8e:19:5b:cc:1a:ea:24:71:47:d0:
                    fa:41:57:e5:33:f0:d6:5d:07:20:57:be:28:36:d7:
                    94:46:40:b3:08:2b:10:3e:cf:2d:3a:6e:7a:0d:23:
                    6a:dd:52:d9:4c:d7:6c:96:12:ba:ce:92:34:f3:f0:
                    7f:3b:67:a2:ee:5e:bf:57:bc:0a:20:ea:ba:87:c9:
                    0a:fc:cf:92:a2:ab:21:75:36:bb:fd:73:7d:44:cb:
                    e1:54:57:8e:f6:95:c8:25:20:45:7b:6a:3a:7f:ca:
                    ad:9c:4f:b1:0b:88:12:48:2c:98:c6:34:e6:36:da:
                    03:50:f7:d7:47:d8:51:cd:d9:cc:94:dd:0e:82:9c:
                    47:53:8c:0e:dc:58:04:65:e7:7c:a6:f4:57:3e:50:
                    52:50:67:dd:af:58:41:66:c3:ee:7b:23:ff:82:9f:
                    bd:71:ea:24:99:9a:ec:8c:3e:4f:bb:be:82:ac:42:
                    09:bd:90:d0:fb:b8:57:70:3b:8d:0d:5e:5e:e0:5f:
                    a4:44:23:64:09:4c:b8:6a:36:f6:d1:a2:87:7b:48:
                    4e:3e:65:dd:56:8c:cd:d3:99:db:c4:1e:73:6d:d0:
                    19:37:9e:92:91:f7:91:c1:00:13:f0:b9:02:fb:44:
                    f9:49:56:83:58:50:52:26:32:74:78:87:f7:c2:e0:
                    f9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:14:D5:4F:36:82:5E:76:39:F0:10:15:46:F0:35:9D:75:16:6C:75
            X509v3 Authority Key Identifier:
                keyid:A3:21:F4:07:55:AB:3C:39:44:E2:78:8B:7C:26:4E:78:0D:77:CB:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/10/A321F40755AB3C3944E2788B7C264E780D77CBEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyH0B1WrPDlE4niLfCZOeA13y-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/10/34352e31302e3135362e302f32342d3234203d3e20323132383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:ca:74:5b:cb:8a:15:8a:b3:93:a9:ff:8d:1f:7a:af:37:1a:
         d7:28:0e:a2:35:ee:e8:a0:81:29:d9:86:24:ca:4c:d1:5d:1c:
         e6:1b:90:e0:87:04:fd:7a:af:99:82:84:12:a4:66:a9:85:ff:
         e7:60:ec:66:4d:7c:05:da:70:83:86:8e:2c:c9:f4:88:ea:ed:
         f8:e9:60:69:cb:fa:ad:a3:4a:ab:b6:a8:d2:dc:25:0e:7a:ea:
         1c:c8:12:2a:9c:49:c8:09:bb:6e:55:70:3e:7c:58:3e:16:1a:
         6a:ab:a5:dd:f4:1f:29:7f:7e:34:f6:d7:5f:4d:3d:13:cd:b5:
         f9:67:69:65:6d:01:c5:b4:d5:6a:d2:87:f5:6c:d3:c9:c4:d0:
         e0:8b:13:e1:07:89:db:5c:8e:ff:20:27:4f:72:9a:0d:3c:3b:
         d7:ba:38:fb:1d:b2:a0:de:7e:8d:79:f7:59:2c:09:1a:a8:b4:
         f9:b2:cd:23:33:0d:6e:36:42:cf:13:da:48:38:55:5b:8a:34:
         f2:1d:91:78:5d:b5:be:63:7e:a6:e9:6e:f9:fd:e9:30:d3:61:
         2a:79:5d:51:09:92:13:05:d6:9a:29:7c:fb:03:b3:bd:23:6d:
         53:ac:c9:21:0a:63:ad:f1:08:32:6f:d6:b7:51:44:c0:32:2a:
         0b:fd:31:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----