Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/10/34352e31302e3135382e302f32342d3234203d3e20323038323538.roa
File:                     34352e31302e3135382e302f32342d3234203d3e20323038323538.roa (raw, json)
Hash identifier:          wq2p3Sz41VWw+UNJAFgj7d9eJqvTrjLecN+EwHMfW0E=
Subject key identifier:   18:C0:22:64:D8:CD:81:0E:6B:2F:40:FB:DB:19:9E:A8:AD:ED:5B:B4
Certificate issuer:       /CN=a321f40755ab3c3944e2788b7c264e780d77cbea
Certificate serial:       4C420D50D7C65F838C79AF5590CF1E69C75A35D9
Authority key identifier: A3:21:F4:07:55:AB:3C:39:44:E2:78:8B:7C:26:4E:78:0D:77:CB:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oyH0B1WrPDlE4niLfCZOeA13y-o.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/10/34352e31302e3135382e302f32342d3234203d3e20323038323538.roa
Signing time:             Fri 27 Nov 2020 15:10:25 +0000
ROA not before:           Fri 27 Nov 2020 15:05:25 +0000
ROA not after:            Fri 26 Nov 2021 15:10:25 +0000
asID:                     208258
IP address blocks:        45.10.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:42:0d:50:d7:c6:5f:83:8c:79:af:55:90:cf:1e:69:c7:5a:35:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a321f40755ab3c3944e2788b7c264e780d77cbea
        Validity
            Not Before: Nov 27 15:05:25 2020 GMT
            Not After : Nov 26 15:10:25 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:30:6b:b3:f1:85:e0:c9:97:53:17:78:c9:36:
                    57:c2:d5:36:59:c4:b2:17:6f:dc:5d:bf:24:41:df:
                    77:0a:71:1e:6c:a6:d8:1f:91:9e:a9:3a:02:5b:ff:
                    c6:59:0a:b8:54:2a:89:dd:61:fc:ca:49:3a:fe:b4:
                    db:df:72:13:ba:13:80:40:64:d4:60:f3:ed:e4:3a:
                    ba:84:a4:ba:3a:5f:fb:a2:21:c9:a5:1f:99:8b:ae:
                    af:15:e3:f8:5b:38:e1:9f:82:3d:bb:07:7c:c4:0d:
                    4e:35:84:57:68:03:00:9d:4c:0e:62:e2:31:8e:5e:
                    11:4e:8a:b2:df:2a:21:2f:35:7d:15:9a:0b:b1:5a:
                    e7:0f:6a:cb:1b:ea:fe:b6:ed:7f:0c:98:00:f1:3d:
                    48:d8:4f:f2:61:ce:7d:5b:ab:67:c1:ef:e3:27:1f:
                    6c:0c:04:a7:6a:ee:47:a3:a6:b4:d0:f1:e3:63:e3:
                    d7:cf:24:0c:d8:f9:f3:b2:0b:be:6b:97:18:69:4a:
                    fb:0b:b2:8c:fe:f3:c8:e4:e6:e7:ba:0c:1a:e7:db:
                    38:9b:23:4b:0d:83:b9:c5:7b:d0:7d:66:9a:17:c7:
                    9f:2d:3d:ec:46:7f:8d:f9:34:08:8e:27:da:fe:d9:
                    f9:1c:c1:0f:7c:82:c5:24:8f:3e:4a:85:8b:77:07:
                    03:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C0:22:64:D8:CD:81:0E:6B:2F:40:FB:DB:19:9E:A8:AD:ED:5B:B4
            X509v3 Authority Key Identifier:
                keyid:A3:21:F4:07:55:AB:3C:39:44:E2:78:8B:7C:26:4E:78:0D:77:CB:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/10/A321F40755AB3C3944E2788B7C264E780D77CBEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyH0B1WrPDlE4niLfCZOeA13y-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/10/34352e31302e3135382e302f32342d3234203d3e20323038323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:57:bd:97:e0:2e:60:d4:2e:36:dd:9c:74:94:b7:86:ac:3f:
         71:77:4d:9e:47:4f:4d:19:d0:93:e1:1e:51:a5:ea:7c:2c:24:
         57:e3:1b:3b:bb:3c:98:c5:25:3b:27:55:df:cf:c9:53:15:4a:
         67:72:2d:46:6c:89:ca:62:4c:55:68:dd:db:89:2d:53:41:f2:
         17:d5:3a:b5:8e:68:e8:7f:d8:b0:c3:9e:d2:4e:5a:93:71:82:
         72:fa:03:99:c0:f1:23:42:a7:89:cc:9c:01:de:14:e3:62:31:
         55:16:e3:82:fc:74:1b:e9:16:ab:42:35:5e:0b:78:09:5f:c3:
         f9:01:d8:d6:f9:4c:9c:d0:b5:a2:2a:8c:8c:0d:7d:2d:2c:06:
         31:65:8f:c2:9e:9a:2a:06:2c:80:fc:3a:96:14:bb:d0:17:77:
         b5:2c:3f:39:a0:05:69:f9:43:b8:4c:3b:8e:d6:76:25:2f:0a:
         c2:bf:80:97:ba:44:af:8f:2f:94:45:55:e9:22:48:ef:a6:6f:
         86:6c:f3:b8:c9:13:ba:c4:87:82:82:28:8e:b2:f9:fc:cc:fe:
         6c:e1:cd:ab:62:5d:7e:1c:6c:97:68:83:ae:dc:61:b9:98:86:
         bb:da:64:47:52:4f:0c:cb:be:df:3f:4a:76:47:91:09:f8:db:
         bf:bc:1d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----