Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/15/352e3138302e3135312e302f32342d3234203d3e203235303938.roa
File:                     352e3138302e3135312e302f32342d3234203d3e203235303938.roa (raw, json)
Hash identifier:          IJZzDROEyGCjlwXLk34YSLKPzWpdjbIfuLb5qq8a93g=
Subject key identifier:   C4:20:44:B0:41:1D:47:13:54:0B:EB:51:99:5C:1C:1D:C8:78:73:47
Certificate issuer:       /CN=077015f3f016b7d62b8733579a7ca46841f5ab65
Certificate serial:       33FA0B8F9126069745ED757AECFEC97FF39A042D
Authority key identifier: 07:70:15:F3:F0:16:B7:D6:2B:87:33:57:9A:7C:A4:68:41:F5:AB:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3AV8_AWt9YrhzNXmnykaEH1q2U.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/15/352e3138302e3135312e302f32342d3234203d3e203235303938.roa
Signing time:             Mon 30 Nov 2020 16:03:53 +0000
ROA not before:           Mon 30 Nov 2020 15:58:53 +0000
ROA not after:            Mon 29 Nov 2021 16:03:53 +0000
asID:                     25098
IP address blocks:        5.180.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:fa:0b:8f:91:26:06:97:45:ed:75:7a:ec:fe:c9:7f:f3:9a:04:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=077015f3f016b7d62b8733579a7ca46841f5ab65
        Validity
            Not Before: Nov 30 15:58:53 2020 GMT
            Not After : Nov 29 16:03:53 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4e:33:85:be:b5:69:0d:a6:7e:8f:b9:4e:40:
                    db:56:df:87:b7:cf:02:b5:6a:9b:79:ef:b0:2a:13:
                    5e:bf:45:26:99:d1:e3:83:cb:e5:54:06:9d:cb:2f:
                    1d:e4:31:99:df:36:dc:88:05:50:ac:6a:51:99:2c:
                    98:45:8f:b6:7b:23:11:36:ba:7f:e7:d8:3a:b5:e1:
                    fa:52:c4:05:0c:5b:55:2b:31:5c:2e:45:14:b4:99:
                    ea:aa:42:fb:42:29:ff:90:8c:66:6f:ef:85:fe:ec:
                    9e:90:95:db:93:ff:55:b8:c0:1f:e4:07:1d:39:c4:
                    28:99:14:47:b2:12:56:af:7f:6d:60:f0:c1:7d:0b:
                    18:58:43:ef:f6:35:ef:d8:2a:1f:ab:cf:3e:c9:41:
                    b1:9a:da:0f:1f:c7:89:8a:cc:4c:1d:87:2a:dc:59:
                    3f:69:1e:25:54:f4:88:79:51:fc:d1:5f:4a:7b:ef:
                    65:40:d1:06:b0:94:3f:d1:4b:1b:9f:3a:32:32:50:
                    a9:66:54:c6:49:bf:e2:79:b5:b9:9f:2e:66:bb:24:
                    29:6a:71:d9:18:21:bc:6a:b6:ef:8b:a4:c9:4d:b5:
                    40:1a:81:77:72:ab:f7:8a:b9:75:d5:f8:48:11:3f:
                    bc:4c:ec:9f:69:90:d3:9b:f2:a8:4e:fe:a7:d0:bc:
                    9b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:20:44:B0:41:1D:47:13:54:0B:EB:51:99:5C:1C:1D:C8:78:73:47
            X509v3 Authority Key Identifier:
                keyid:07:70:15:F3:F0:16:B7:D6:2B:87:33:57:9A:7C:A4:68:41:F5:AB:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/15/077015F3F016B7D62B8733579A7CA46841F5AB65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3AV8_AWt9YrhzNXmnykaEH1q2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/15/352e3138302e3135312e302f32342d3234203d3e203235303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:3c:3d:9a:29:40:15:00:21:aa:c3:9d:a9:37:8a:fe:26:56:
         1e:c8:eb:76:e1:82:13:7a:53:a0:f5:44:4b:58:42:91:91:15:
         15:1e:fd:56:8a:53:84:96:64:6c:80:b0:cd:f1:ef:5f:06:d2:
         ba:6b:7d:b7:2a:a6:ac:ef:ee:80:63:00:16:21:12:51:27:9e:
         16:13:03:ca:b6:e3:65:ea:88:22:55:c6:75:b5:e3:b4:00:92:
         66:ea:7f:b5:08:6a:0c:d1:1d:cd:af:eb:bb:e3:cc:8a:8d:c9:
         46:6e:35:c2:5c:ae:47:c4:c3:d4:ac:5a:c0:4e:f0:b7:8f:71:
         df:4f:67:29:15:d5:79:17:ff:62:f9:f7:ac:29:7a:0b:8b:e4:
         8d:73:a2:d3:ec:2b:08:b8:e9:f0:1c:e5:0a:b4:76:b0:41:f0:
         e8:27:93:42:8f:98:e6:26:99:18:ff:83:e3:b0:4f:e7:72:1e:
         2d:69:64:31:6b:d2:b1:b0:20:c0:9c:c8:e7:18:74:7f:e7:73:
         bc:0c:6a:06:3b:17:72:e2:a3:c3:54:5a:c0:2e:e8:da:23:b1:
         3d:32:23:fd:bc:dc:68:bc:a4:16:13:92:bd:76:c3:db:c9:c9:
         6c:b0:4f:7f:7e:6a:51:69:bb:f6:1b:19:44:7b:5f:57:93:97:
         2b:4e:12:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----