Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/29/352e3138322e31382e302f32332d3234203d3e203631333137.roa
File:                     352e3138322e31382e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          r/fD31FZVEZqEo6maQ9AkxqUdAWn5WnWATy5EWKCfsg=
Subject key identifier:   B1:5F:D5:36:FC:EF:8D:06:8B:C3:C6:60:15:4B:95:8A:F0:0C:90:6E
Certificate issuer:       /CN=bc745611f3e07d863eabdd6e11b69d47161c74d0
Certificate serial:       3A70F0CEB5FF0C30CBC67AB7673DACB0380018EB
Authority key identifier: BC:74:56:11:F3:E0:7D:86:3E:AB:DD:6E:11:B6:9D:47:16:1C:74:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vHRWEfPgfYY-q91uEbadRxYcdNA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/29/352e3138322e31382e302f32332d3234203d3e203631333137.roa
Signing time:             Mon 30 Nov 2020 19:11:11 +0000
ROA not before:           Mon 30 Nov 2020 19:06:11 +0000
ROA not after:            Mon 29 Nov 2021 19:11:11 +0000
asID:                     61317
IP address blocks:        5.182.18.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:70:f0:ce:b5:ff:0c:30:cb:c6:7a:b7:67:3d:ac:b0:38:00:18:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc745611f3e07d863eabdd6e11b69d47161c74d0
        Validity
            Not Before: Nov 30 19:06:11 2020 GMT
            Not After : Nov 29 19:11:11 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:88:7b:17:02:ed:17:54:b6:1f:c5:f4:94:5d:
                    e2:0f:ca:ed:fc:67:92:78:fb:06:ea:93:63:cb:d5:
                    cb:c6:de:79:85:df:81:3e:fb:21:56:b8:11:3a:69:
                    e3:43:9d:39:db:16:2d:25:3a:11:a2:7c:69:13:c6:
                    9c:c8:53:3e:80:51:fb:46:a4:cb:56:c1:9b:58:6a:
                    25:b7:72:fe:25:a7:83:b2:a8:c0:8e:43:63:65:4b:
                    d4:2f:01:5e:af:ef:77:9d:2b:bb:bb:0a:29:4f:2b:
                    1b:00:e2:5e:b0:18:97:d6:30:76:92:3d:3b:a0:7f:
                    2a:fb:cd:72:33:fc:17:8f:38:93:9c:fe:96:f5:cf:
                    b8:9b:74:35:2e:1d:41:b0:cd:32:ee:a2:67:43:e1:
                    cb:2d:a5:cd:a1:a2:02:ab:64:ab:1e:80:f4:8f:b4:
                    ae:a1:17:8b:31:70:44:ae:5e:e5:40:7f:af:a3:37:
                    86:39:b3:97:f0:3d:22:4d:99:5a:26:e9:6f:80:cb:
                    e3:e8:cf:9f:5c:65:cb:8a:42:64:dc:79:23:88:8b:
                    0f:b3:2c:fc:d1:16:33:87:40:8c:eb:bb:48:9e:40:
                    cb:f3:4f:2e:0d:72:a4:dd:10:4d:b2:56:6b:fd:96:
                    c5:ba:bc:43:60:4e:8f:43:4b:ee:11:48:ab:a8:2a:
                    a7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:5F:D5:36:FC:EF:8D:06:8B:C3:C6:60:15:4B:95:8A:F0:0C:90:6E
            X509v3 Authority Key Identifier:
                keyid:BC:74:56:11:F3:E0:7D:86:3E:AB:DD:6E:11:B6:9D:47:16:1C:74:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/29/BC745611F3E07D863EABDD6E11B69D47161C74D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHRWEfPgfYY-q91uEbadRxYcdNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/29/352e3138322e31382e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:ff:f0:a6:c5:71:70:65:78:30:da:2a:8a:f3:c6:f7:2d:3d:
         44:d8:59:84:85:a4:4e:a5:48:f5:49:79:86:0c:bd:93:96:57:
         7c:43:94:a8:fd:aa:fa:b0:57:4f:ef:0c:5f:70:e2:2b:af:0d:
         65:a4:f6:bf:86:bc:0a:78:5f:02:8a:2e:df:50:82:9e:76:ce:
         ee:bf:12:b4:c2:f2:0c:ef:d1:c1:1b:0a:3d:ce:32:fe:d8:43:
         83:40:4a:2f:50:46:0b:5b:0e:64:53:fc:5c:6d:b8:bc:e5:97:
         83:78:53:83:a0:a0:91:12:a8:47:5b:7e:a6:d7:a6:80:bd:3e:
         a4:67:00:8e:c2:f9:a4:ac:e3:fa:a6:fa:83:d5:ce:f9:02:53:
         21:29:39:c5:ca:2f:aa:bd:9d:32:1d:9b:b6:c3:b5:0d:c3:02:
         d2:0c:be:65:93:13:90:95:03:03:42:b3:6e:34:c4:4c:81:fa:
         91:87:40:a9:d2:78:42:b0:7f:14:c8:5f:6b:e0:cd:27:2a:4a:
         0d:5c:77:9b:cf:f9:e3:fc:78:9d:77:98:ce:11:a6:9b:6e:c2:
         b3:9f:c7:15:ba:e3:fe:81:18:3e:b7:b4:55:6d:f3:a8:ab:83:
         cf:37:87:dc:4c:f5:54:b6:31:03:3c:2f:5a:01:da:96:c8:ce:
         31:c5:e0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----