Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/10/34352e31302e3135372e302f32342d3234203d3e20323131383330.roa
File:                     34352e31302e3135372e302f32342d3234203d3e20323131383330.roa (raw, json)
Hash identifier:          Ws11XbPXa1LJDBBYp+p/0QfWQ4hDqvkez70AiR2sikQ=
Subject key identifier:   88:D2:6D:86:D0:66:2C:B9:BE:8B:60:ED:10:6D:F5:86:4F:CC:DD:B6
Certificate issuer:       /CN=a321f40755ab3c3944e2788b7c264e780d77cbea
Certificate serial:       32A2A9DF473773E84DD8D333F5C9B8AB4ACB1107
Authority key identifier: A3:21:F4:07:55:AB:3C:39:44:E2:78:8B:7C:26:4E:78:0D:77:CB:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oyH0B1WrPDlE4niLfCZOeA13y-o.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/10/34352e31302e3135372e302f32342d3234203d3e20323131383330.roa
Signing time:             Sat 13 Feb 2021 18:27:28 +0000
ROA not before:           Sat 13 Feb 2021 18:22:28 +0000
ROA not after:            Sat 12 Feb 2022 18:27:28 +0000
asID:                     211830
IP address blocks:        45.10.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a2:a9:df:47:37:73:e8:4d:d8:d3:33:f5:c9:b8:ab:4a:cb:11:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a321f40755ab3c3944e2788b7c264e780d77cbea
        Validity
            Not Before: Feb 13 18:22:28 2021 GMT
            Not After : Feb 12 18:27:28 2022 GMT
        Subject: CN=3082010A0282010100DBE3439C3CD2B49DE6ACA8122C4BEDC753B8DDCDE004AB17F9E468BFCB2990E2721254C2FB442D41580AD8F9D2F36BDABD26C5AAE22C918131506DD12B2542E61592CCA5320C00A636F0693BC2BFB24076493680EECABB7A0272D094161153B554D473D1500A8D3118B4E4073EF03385724317F07A59952A182761754BDC39FEEF41406C5B739B100ABB44254501D854F62FDA8E4F32859E984D7E41BF44EBB50FD806C4614427D83E8ADD48200129205DDB1287FF2DE3298D5993B023515A4BE620F12ED3B02B9C5ADA0DF923E9F960C307A28548FF5DE020F3C7C9AE8A4CDE41DE049CB44C9238E80115D3DC209CC05EEBD9C78F93D500765722792E9DB4030203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e3:43:9c:3c:d2:b4:9d:e6:ac:a8:12:2c:4b:
                    ed:c7:53:b8:dd:cd:e0:04:ab:17:f9:e4:68:bf:cb:
                    29:90:e2:72:12:54:c2:fb:44:2d:41:58:0a:d8:f9:
                    d2:f3:6b:da:bd:26:c5:aa:e2:2c:91:81:31:50:6d:
                    d1:2b:25:42:e6:15:92:cc:a5:32:0c:00:a6:36:f0:
                    69:3b:c2:bf:b2:40:76:49:36:80:ee:ca:bb:7a:02:
                    72:d0:94:16:11:53:b5:54:d4:73:d1:50:0a:8d:31:
                    18:b4:e4:07:3e:f0:33:85:72:43:17:f0:7a:59:95:
                    2a:18:27:61:75:4b:dc:39:fe:ef:41:40:6c:5b:73:
                    9b:10:0a:bb:44:25:45:01:d8:54:f6:2f:da:8e:4f:
                    32:85:9e:98:4d:7e:41:bf:44:eb:b5:0f:d8:06:c4:
                    61:44:27:d8:3e:8a:dd:48:20:01:29:20:5d:db:12:
                    87:ff:2d:e3:29:8d:59:93:b0:23:51:5a:4b:e6:20:
                    f1:2e:d3:b0:2b:9c:5a:da:0d:f9:23:e9:f9:60:c3:
                    07:a2:85:48:ff:5d:e0:20:f3:c7:c9:ae:8a:4c:de:
                    41:de:04:9c:b4:4c:92:38:e8:01:15:d3:dc:20:9c:
                    c0:5e:eb:d9:c7:8f:93:d5:00:76:57:22:79:2e:9d:
                    b4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D2:6D:86:D0:66:2C:B9:BE:8B:60:ED:10:6D:F5:86:4F:CC:DD:B6
            X509v3 Authority Key Identifier:
                keyid:A3:21:F4:07:55:AB:3C:39:44:E2:78:8B:7C:26:4E:78:0D:77:CB:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/10/A321F40755AB3C3944E2788B7C264E780D77CBEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyH0B1WrPDlE4niLfCZOeA13y-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/10/34352e31302e3135372e302f32342d3234203d3e20323131383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:4f:cf:ed:7f:d0:b8:07:6d:e2:1c:2f:22:da:b4:72:cb:64:
         97:1b:61:dd:2e:42:c0:3d:34:0f:08:91:56:d8:fb:d2:55:8f:
         f5:a8:02:86:1f:2f:cf:78:38:6e:9c:8e:0e:b2:41:6c:9a:6a:
         67:d8:8c:e3:ce:c0:a3:40:2f:b6:22:28:c5:95:49:78:50:ae:
         d1:d0:d4:cb:9e:d9:bd:89:bd:b4:31:bc:bd:73:42:da:63:95:
         7f:b6:52:de:94:99:e8:59:18:e0:24:3d:ac:89:84:dc:ed:91:
         86:19:be:97:7a:15:20:a4:67:1e:54:25:01:1e:ca:09:bf:14:
         4b:cf:a5:9b:0d:e1:68:d2:88:63:65:cb:3f:71:32:e4:ce:6a:
         52:32:64:67:4b:9e:47:02:0f:37:77:ca:7c:7f:5d:90:9e:6e:
         d8:71:e4:f7:49:36:3a:67:7d:3e:7b:d0:fb:09:3d:02:68:96:
         c7:f1:cb:1b:d1:b0:71:4c:ac:26:51:d1:ef:18:39:db:68:77:
         98:fb:08:64:c3:d8:ea:12:bf:77:d0:98:06:85:dd:6a:d6:1c:
         9e:3a:d8:1a:bc:3f:c6:a4:fd:b3:dd:f3:c8:9a:a0:9e:06:19:
         82:cd:ba:ca:3d:56:53:39:91:5b:6b:11:a1:8c:66:37:99:7c:
         91:09:0c:f9
-----BEGIN CERTIFICATE-----
MIIG5TCCBc2gAwIBAgIUMqKp30c3c+hN2NMz9cm4q0rLEQcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTMyMWY0MDc1NWFiM2MzOTQ0ZTI3ODhiN2MyNjRlNzgw
ZDc3Y2JlYTAeFw0yMTAyMTMxODIyMjhaFw0yMjAyMTIxODI3MjhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREJFMzQzOUMzQ0QyQjQ5REU2
QUNBODEyMkM0QkVEQzc1M0I4RERDREUwMDRBQjE3RjlFNDY4QkZDQjI5OTBFMjcy
MTI1NEMyRkI0NDJENDE1ODBBRDhGOUQyRjM2QkRBQkQyNkM1QUFFMjJDOTE4MTMx
NTA2REQxMkIyNTQyRTYxNTkyQ0NBNTMyMEMwMEE2MzZGMDY5M0JDMkJGQjI0MDc2
NDkzNjgwRUVDQUJCN0EwMjcyRDA5NDE2MTE1M0I1NTRENDczRDE1MDBBOEQzMTE4
QjRFNDA3M0VGMDMzODU3MjQzMTdGMDdBNTk5NTJBMTgyNzYxNzU0QkRDMzlGRUVG
NDE0MDZDNUI3MzlCMTAwQUJCNDQyNTQ1MDFEODU0RjYyRkRBOEU0RjMyODU5RTk4
NEQ3RTQxQkY0NEVCQjUwRkQ4MDZDNDYxNDQyN0Q4M0U4QURENDgyMDAxMjkyMDVE
REIxMjg3RkYyREUzMjk4RDU5OTNCMDIzNTE1QTRCRTYyMEYxMkVEM0IwMkI5QzVB
REEwREY5MjNFOUY5NjBDMzA3QTI4NTQ4RkY1REUwMjBGM0M3QzlBRThBNENERTQx
REUwNDlDQjQ0QzkyMzhFODAxMTVEM0RDMjA5Q0MwNUVFQkQ5Qzc4RjkzRDUwMDc2
NTcyMjc5MkU5REI0MDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2+NDnDzStJ3mrKgSLEvtx1O43c3gBKsX+eRov8spkOJyElTC+0Qt
QVgK2PnS82vavSbFquIskYExUG3RKyVC5hWSzKUyDACmNvBpO8K/skB2STaA7sq7
egJy0JQWEVO1VNRz0VAKjTEYtOQHPvAzhXJDF/B6WZUqGCdhdUvcOf7vQUBsW3Ob
EAq7RCVFAdhU9i/ajk8yhZ6YTX5Bv0TrtQ/YBsRhRCfYPordSCABKSBd2xKH/y3j
KY1Zk7AjUVpL5iDxLtOwK5xa2g35I+n5YMMHooVI/13gIPPHya6KTN5B3gSctEyS
OOgBFdPcIJzAXuvZx4+T1QB2VyJ5Lp20AwIDAQABo4IB8zCCAe8wHQYDVR0OBBYE
FIjSbYbQZiy5votg7RBt9YZPzN22MB8GA1UdIwQYMBaAFKMh9AdVqzw5ROJ4i3wm
TngNd8vqMA4GA1UdDwEB/wQEAwIHgDBwBgNVHR8EaTBnMGWgY6Bhhl9yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xMC9BMzIx
RjQwNzU1QUIzQzM5NDRFMjc4OEI3QzI2NEU3ODBENzdDQkVBLmNybDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3lIMEIxV3JQRGxFNG5pTGZDWk9lQTEzeS1vLmNlcjCB
iQYIKwYBBQUHAQsEfTB7MHkGCCsGAQUFBzALhm1yc3luYzovL3Jwa2kxLnRlcnJh
dHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8xMC8zNDM1MmUzMTMwMmUzMTM1
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzEzODMzMzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAAtCp0wDQYJKoZIhvcNAQELBQADggEBACpPz+1/0LgHbeIcLyLatHLLZJcbYd0u
QsA9NA8IkVbY+9JVj/WoAoYfL894OG6cjg6yQWyaamfYjOPOwKNAL7YiKMWVSXhQ
rtHQ1Mue2b2JvbQxvL1zQtpjlX+2Ut6UmehZGOAkPayJhNztkYYZvpd6FSCkZx5U
JQEeygm/FEvPpZsN4WjSiGNlyz9xMuTOalIyZGdLnkcCDzd3ynx/XZCebthx5PdJ
NjpnfT570PsJPQJolsfxyxvRsHFMrCZR0e8YOdtod5j7CGTD2OoSv3fQmAaF3WrW
HJ462Bq8P8ak/bPd88iaoJ4GGYLNuso9VlM5kVtrEaGMZjeZfJEJDPk=
-----END CERTIFICATE-----