Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/29/352e3138322e31362e302f32332d3234203d3e203631333137.roa
File:                     352e3138322e31362e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          j3rIAcqDKHq2mVcuiArUnz6BmSOF5fH//A71S8dxQZ4=
Subject key identifier:   5A:B1:5B:75:D4:22:38:A9:E3:42:3B:77:66:B3:B0:63:88:7B:A4:76
Certificate issuer:       /CN=bc745611f3e07d863eabdd6e11b69d47161c74d0
Certificate serial:       3964ACB293119B2FAAFF56DC1C3184B52EF79332
Authority key identifier: BC:74:56:11:F3:E0:7D:86:3E:AB:DD:6E:11:B6:9D:47:16:1C:74:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vHRWEfPgfYY-q91uEbadRxYcdNA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/29/352e3138322e31362e302f32332d3234203d3e203631333137.roa
Signing time:             Mon 30 Nov 2020 19:11:10 +0000
ROA not before:           Mon 30 Nov 2020 19:06:10 +0000
ROA not after:            Mon 29 Nov 2021 19:11:10 +0000
asID:                     61317
IP address blocks:        5.182.16.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:64:ac:b2:93:11:9b:2f:aa:ff:56:dc:1c:31:84:b5:2e:f7:93:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc745611f3e07d863eabdd6e11b69d47161c74d0
        Validity
            Not Before: Nov 30 19:06:10 2020 GMT
            Not After : Nov 29 19:11:10 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3b:64:4a:48:9e:5a:c6:12:6c:9d:21:93:4f:
                    04:fa:a7:29:d4:19:e9:16:98:2c:f9:6c:67:19:41:
                    6d:9e:52:be:1a:08:83:85:71:88:1d:27:47:19:da:
                    64:9b:3e:b7:a8:15:9f:04:b9:fd:b6:a3:12:d6:7d:
                    2e:04:ca:19:45:f6:6d:cb:f6:1e:eb:1b:cd:8f:36:
                    f0:26:8c:a0:3c:cf:9b:7c:d6:95:c1:2c:79:f1:e3:
                    2d:a5:4e:cc:c2:7b:06:23:e4:62:70:dd:a0:99:15:
                    c1:2b:93:50:39:00:3f:48:d8:6b:20:e6:ef:c7:1f:
                    40:75:f1:d0:57:ff:bb:1a:a5:0b:34:11:54:57:02:
                    8a:4e:ee:6c:53:dc:88:b9:d8:a4:6b:48:19:70:0a:
                    35:cb:da:f5:84:d1:a6:8e:81:88:1e:28:8e:87:d1:
                    08:58:f1:43:25:8b:d6:e9:fe:74:ea:55:b0:dc:19:
                    98:64:b1:e0:40:fb:ea:6e:5d:bf:b4:e5:7c:d7:2f:
                    96:f8:8b:72:77:e9:62:d3:2f:dd:1f:6b:a9:46:e2:
                    53:c1:f4:90:1f:bc:13:9b:80:d5:af:0e:45:5b:ca:
                    4e:a7:70:cb:ca:1e:f6:3f:7f:e4:2b:b1:ff:d0:e1:
                    49:0d:93:86:d2:75:e8:ba:18:8b:3f:b1:b3:58:91:
                    ac:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B1:5B:75:D4:22:38:A9:E3:42:3B:77:66:B3:B0:63:88:7B:A4:76
            X509v3 Authority Key Identifier:
                keyid:BC:74:56:11:F3:E0:7D:86:3E:AB:DD:6E:11:B6:9D:47:16:1C:74:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/29/BC745611F3E07D863EABDD6E11B69D47161C74D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHRWEfPgfYY-q91uEbadRxYcdNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/29/352e3138322e31362e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:0a:a0:73:1a:e1:e3:f6:ef:57:85:5e:0d:5c:07:0e:41:81:
         ad:de:ef:55:6e:d0:90:1a:85:e8:0b:18:78:5d:fe:a2:81:7f:
         87:60:cf:23:6d:b8:db:51:96:5e:d6:06:74:d7:5a:11:49:14:
         7c:f7:c3:3e:85:36:2c:d1:c4:53:69:f2:c4:14:45:4c:74:30:
         ba:f7:1b:d7:c6:ef:96:a9:b7:4e:00:74:84:82:3d:a4:05:3b:
         fd:18:cf:41:a2:b2:73:ae:94:1d:d0:9a:c8:88:de:f8:27:e5:
         74:b1:12:c0:87:e9:9a:d0:5e:af:e1:17:8e:60:87:eb:ea:68:
         20:8b:4c:19:63:d9:5b:a5:35:b6:c6:93:b8:c4:8a:57:24:45:
         ce:b9:2e:10:d8:b9:77:eb:a2:22:06:ba:41:45:26:46:21:03:
         e5:a4:e8:23:4b:18:15:36:1c:88:e3:3a:f6:de:1e:02:be:45:
         9e:ba:53:b3:ec:13:5f:af:d4:70:ff:22:38:e3:7a:79:0a:af:
         88:43:c0:be:0b:8c:0e:2a:11:79:fe:3d:0a:18:e2:68:2f:a2:
         5e:92:ea:af:b9:90:a5:bf:7a:77:8e:52:d2:52:9f:f9:90:b5:
         b0:bb:55:ab:35:91:87:d3:9d:bc:6c:e6:6e:82:4d:23:f3:5d:
         ea:1e:3d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----