Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/29/352e3138322e31382e302f32342d3234203d3e203233343730.roa
File:                     352e3138322e31382e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          MBjcblULpJmEip7s6R6ndoyfAACgq/0/8eKN/CIADhA=
Subject key identifier:   73:77:16:22:1D:60:1E:B1:98:0C:6E:5C:28:AD:F6:76:9B:63:07:59
Certificate issuer:       /CN=bc745611f3e07d863eabdd6e11b69d47161c74d0
Certificate serial:       60CE440299145FA3AD268B06D58E258E28A88E14
Authority key identifier: BC:74:56:11:F3:E0:7D:86:3E:AB:DD:6E:11:B6:9D:47:16:1C:74:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vHRWEfPgfYY-q91uEbadRxYcdNA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/29/352e3138322e31382e302f32342d3234203d3e203233343730.roa
Signing time:             Thu 31 Dec 2020 18:43:11 +0000
ROA not before:           Thu 31 Dec 2020 18:38:11 +0000
ROA not after:            Thu 30 Dec 2021 18:43:11 +0000
asID:                     23470
IP address blocks:        5.182.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ce:44:02:99:14:5f:a3:ad:26:8b:06:d5:8e:25:8e:28:a8:8e:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc745611f3e07d863eabdd6e11b69d47161c74d0
        Validity
            Not Before: Dec 31 18:38:11 2020 GMT
            Not After : Dec 30 18:43:11 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3e:9d:c3:ac:34:ef:53:79:34:66:28:dd:b8:
                    44:bb:6c:88:3b:64:02:9c:48:16:9e:48:b3:c2:b7:
                    b0:82:78:9d:7c:70:d6:22:43:ec:a9:d0:34:84:4e:
                    64:bb:7c:64:89:02:7e:f8:45:db:92:a6:ec:e0:22:
                    28:08:a4:0e:95:b7:b2:fa:45:1f:a0:8d:b2:99:5d:
                    8f:da:b2:8a:d2:d2:40:1e:ff:72:13:15:f5:1a:b9:
                    97:1b:02:14:52:52:f8:0d:ca:ce:94:09:1b:06:3f:
                    26:bd:c9:76:08:89:67:7a:72:a4:ec:f2:2b:da:ee:
                    b5:87:d2:70:de:4e:d3:dd:9d:ae:db:4a:ce:14:df:
                    13:2d:95:6a:04:70:05:43:dc:f5:a2:1a:fa:b5:49:
                    bc:92:2c:aa:3e:f2:c1:6f:b4:5b:33:d3:1f:1f:95:
                    77:8d:5b:06:aa:80:c7:50:b3:c5:45:a1:f9:04:8f:
                    47:d3:72:47:ae:99:bf:b1:41:c1:7b:a3:bd:d3:d8:
                    73:05:8d:ed:57:dd:87:11:64:4b:ce:de:6c:0e:a7:
                    0c:52:97:0d:94:e4:7f:3f:f2:ae:bf:7d:2f:e5:75:
                    2c:a9:9d:a0:32:6d:ee:cb:29:5e:d5:36:8e:2d:c0:
                    ee:d1:b7:20:91:43:1b:03:ae:98:57:61:b1:4c:c9:
                    b1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:77:16:22:1D:60:1E:B1:98:0C:6E:5C:28:AD:F6:76:9B:63:07:59
            X509v3 Authority Key Identifier:
                keyid:BC:74:56:11:F3:E0:7D:86:3E:AB:DD:6E:11:B6:9D:47:16:1C:74:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/29/BC745611F3E07D863EABDD6E11B69D47161C74D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHRWEfPgfYY-q91uEbadRxYcdNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/29/352e3138322e31382e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:75:1c:e4:fc:72:57:20:0d:43:cf:3a:7b:fb:c5:3a:f8:03:
         90:b6:26:44:b1:22:19:54:78:f0:27:f2:c5:69:ef:ca:9f:87:
         bc:28:43:17:8c:07:fc:1e:63:9b:64:18:e5:f2:16:3b:56:d7:
         86:55:cc:ce:21:01:3d:fb:27:16:5c:61:0b:9f:67:29:40:0d:
         b2:fd:0f:d6:83:83:82:fd:f4:35:5e:75:ee:44:97:70:c1:97:
         1a:34:a4:68:4e:02:ae:7b:f1:e0:2a:58:ed:e0:98:54:88:44:
         3a:be:35:61:54:a2:49:15:86:1a:7b:45:cb:30:8d:3e:82:7c:
         2a:43:95:a2:4f:ad:ef:4f:67:5e:ce:b1:44:9f:2c:0c:e4:e7:
         60:5c:57:7f:c9:ed:9b:3d:8b:32:12:12:2b:77:27:db:ad:8a:
         ad:33:b8:77:f0:ef:62:30:b5:5a:ba:97:42:bd:36:23:b8:48:
         96:7e:e3:46:ff:d6:f1:83:28:a5:a9:61:f9:70:0b:3c:04:19:
         31:e5:a5:b7:ed:e1:99:9e:0e:b4:e4:9b:47:71:8a:98:1c:07:
         d5:ed:a1:f9:1a:28:57:5d:b5:84:31:76:d2:53:8e:2d:63:b1:
         2b:61:02:bf:18:69:cd:22:00:63:3b:84:49:7a:1a:72:03:c1:
         bb:45:3a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----