Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/10/34352e31302e3135372e302f32342d3234203d3e20323132383532.roa
File:                     34352e31302e3135372e302f32342d3234203d3e20323132383532.roa (raw, json)
Hash identifier:          29RVs37ThUB4pmjSdZ0ItMypVp6j7FIsdctI3YToiEU=
Subject key identifier:   2D:EE:EC:B1:A3:9C:6E:41:4F:5B:70:29:D2:91:0B:E5:3E:32:8A:11
Certificate issuer:       /CN=a321f40755ab3c3944e2788b7c264e780d77cbea
Certificate serial:       4C74E87F534074C4933012E7F999136D4B14F738
Authority key identifier: A3:21:F4:07:55:AB:3C:39:44:E2:78:8B:7C:26:4E:78:0D:77:CB:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oyH0B1WrPDlE4niLfCZOeA13y-o.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/10/34352e31302e3135372e302f32342d3234203d3e20323132383532.roa
Signing time:             Fri 27 Nov 2020 15:10:25 +0000
ROA not before:           Fri 27 Nov 2020 15:05:25 +0000
ROA not after:            Fri 26 Nov 2021 15:10:25 +0000
asID:                     212852
IP address blocks:        45.10.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:74:e8:7f:53:40:74:c4:93:30:12:e7:f9:99:13:6d:4b:14:f7:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a321f40755ab3c3944e2788b7c264e780d77cbea
        Validity
            Not Before: Nov 27 15:05:25 2020 GMT
            Not After : Nov 26 15:10:25 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f5:f4:44:fc:f2:3e:5e:65:a4:7f:e2:7a:1e:
                    ed:10:18:34:8d:2a:24:1b:67:88:75:4e:e5:21:e4:
                    4f:9e:05:b9:f4:ec:9e:1d:7a:4c:1e:7e:c5:a2:a6:
                    44:7d:7b:6e:1d:57:13:2c:73:59:33:1b:35:4b:a8:
                    8c:28:05:52:c8:6d:3b:f9:c0:f5:42:57:c1:e2:a7:
                    64:10:92:68:7b:ba:b4:f8:59:f9:4c:bc:d4:40:c5:
                    d4:9e:22:78:c1:9f:67:54:80:c4:e4:9b:5e:42:2a:
                    59:20:11:15:28:06:67:36:ed:a8:0d:5d:7b:dc:0c:
                    a2:76:a3:77:09:dd:b3:a4:8c:24:fc:32:8c:70:ae:
                    40:08:26:cc:c8:c8:d3:1a:b4:a2:94:ad:92:a6:56:
                    f5:27:4e:f1:4e:53:a5:cc:51:f2:01:d7:d6:b2:3f:
                    31:34:23:21:2d:33:1c:2d:0e:db:fa:a1:1c:41:81:
                    1a:98:a0:a8:69:a7:a4:6f:82:b1:7f:32:3d:8a:31:
                    d1:13:d1:04:8e:91:e3:fe:c4:79:98:3e:9f:29:6f:
                    a4:bb:1a:07:a1:e3:7e:4d:3f:2e:eb:9d:6a:a6:ea:
                    0d:35:b9:5c:24:ef:c1:bd:c8:86:fa:81:0d:42:f5:
                    d4:19:f8:09:db:be:c5:72:5f:3e:f5:cb:03:6a:b8:
                    ff:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:EE:EC:B1:A3:9C:6E:41:4F:5B:70:29:D2:91:0B:E5:3E:32:8A:11
            X509v3 Authority Key Identifier:
                keyid:A3:21:F4:07:55:AB:3C:39:44:E2:78:8B:7C:26:4E:78:0D:77:CB:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/10/A321F40755AB3C3944E2788B7C264E780D77CBEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyH0B1WrPDlE4niLfCZOeA13y-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/10/34352e31302e3135372e302f32342d3234203d3e20323132383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:2d:17:aa:c8:28:a8:74:22:5a:58:8d:4a:39:29:2d:1f:cd:
         c4:e4:41:46:8e:b9:a0:7a:b0:2e:8c:9e:09:26:8d:35:8b:6e:
         f9:c9:00:b2:49:c5:4d:7a:b9:83:59:1d:b1:ec:1a:fa:f3:c2:
         a8:1a:1b:d5:d2:4a:df:09:f2:41:d0:d3:7a:d4:3d:3d:4e:2e:
         b2:d0:f4:ba:5b:91:73:db:36:15:22:56:d3:de:0f:4d:c4:12:
         95:03:df:f6:26:65:42:9e:ce:be:3d:ab:8e:04:c3:a7:bf:0a:
         ae:74:12:07:3e:5b:6d:9a:b8:c7:70:ed:88:44:7c:93:b0:f1:
         26:80:1a:26:37:87:e8:26:22:59:39:4f:62:7a:7a:79:b9:61:
         6a:59:47:3a:47:7e:53:92:87:7c:6a:55:4a:c7:57:88:bd:6d:
         43:a8:16:d4:a4:b0:3a:bc:f3:7d:ec:c2:56:65:91:27:be:05:
         91:95:27:54:4c:49:63:cd:12:8c:63:fc:fd:d5:b5:f0:2d:12:
         af:42:a4:61:93:51:a0:01:20:cf:6a:12:f4:12:9e:c1:c7:18:
         84:e9:dc:40:07:c9:a3:12:92:c3:42:9c:28:15:ce:59:d9:bb:
         e1:01:6f:15:58:21:97:d9:3a:95:be:6e:44:5b:fe:b7:0b:50:
         cc:89:6b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----