Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/29/352e3138322e31392e302f32342d3234203d3e203333333837.roa
File:                     352e3138322e31392e302f32342d3234203d3e203333333837.roa (raw, json)
Hash identifier:          US9IPrL6WQL77gwqYaRsY1rdp1eQbQfwVWg7yCz28fU=
Subject key identifier:   AD:B0:27:05:FE:56:E7:1A:44:D5:4D:6A:40:40:55:90:14:CF:74:85
Certificate issuer:       /CN=bc745611f3e07d863eabdd6e11b69d47161c74d0
Certificate serial:       3FBB736DDD481FF0648F226B55D91A31D5620F9E
Authority key identifier: BC:74:56:11:F3:E0:7D:86:3E:AB:DD:6E:11:B6:9D:47:16:1C:74:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vHRWEfPgfYY-q91uEbadRxYcdNA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/29/352e3138322e31392e302f32342d3234203d3e203333333837.roa
Signing time:             Mon 30 Nov 2020 19:11:12 +0000
ROA not before:           Mon 30 Nov 2020 19:06:12 +0000
ROA not after:            Mon 29 Nov 2021 19:11:12 +0000
asID:                     33387
IP address blocks:        5.182.19.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:bb:73:6d:dd:48:1f:f0:64:8f:22:6b:55:d9:1a:31:d5:62:0f:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc745611f3e07d863eabdd6e11b69d47161c74d0
        Validity
            Not Before: Nov 30 19:06:12 2020 GMT
            Not After : Nov 29 19:11:12 2021 GMT
        Subject: CN=3082010A0282010100B6508A8B3148137582F62164DFDAABF4024825396CC12ED190BAB346909AF7C932799F0F17F396A255D0C6D173091CA61BA6A3C09CFD23BC8999F1C65AB0D406C1B4E18035E2676DF3DE63523E497B13A7BCD98037C88B094C68DAE9FB259AEBB507708BC0E2C86BA53113B7BDF596CEA7CF07B75C907419C44312278B42C9BFBFA3296D4B8193E993E49DA384D5FB22F56452A8F8E2A298B0D19187B3D931650C14A90FFF17C55BD83378B5D3753F3FCD830521C0C7DCE1A246B2C61BDDC205D7B06C7835C813B92E377DEE3F471C10BBB00FE900B77B93FE8E353FF0326DC87E4318F966FACDE5A4967217F52592882E8F9FD0A5898DA6EF74E6F89F8CE32D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:50:8a:8b:31:48:13:75:82:f6:21:64:df:da:
                    ab:f4:02:48:25:39:6c:c1:2e:d1:90:ba:b3:46:90:
                    9a:f7:c9:32:79:9f:0f:17:f3:96:a2:55:d0:c6:d1:
                    73:09:1c:a6:1b:a6:a3:c0:9c:fd:23:bc:89:99:f1:
                    c6:5a:b0:d4:06:c1:b4:e1:80:35:e2:67:6d:f3:de:
                    63:52:3e:49:7b:13:a7:bc:d9:80:37:c8:8b:09:4c:
                    68:da:e9:fb:25:9a:eb:b5:07:70:8b:c0:e2:c8:6b:
                    a5:31:13:b7:bd:f5:96:ce:a7:cf:07:b7:5c:90:74:
                    19:c4:43:12:27:8b:42:c9:bf:bf:a3:29:6d:4b:81:
                    93:e9:93:e4:9d:a3:84:d5:fb:22:f5:64:52:a8:f8:
                    e2:a2:98:b0:d1:91:87:b3:d9:31:65:0c:14:a9:0f:
                    ff:17:c5:5b:d8:33:78:b5:d3:75:3f:3f:cd:83:05:
                    21:c0:c7:dc:e1:a2:46:b2:c6:1b:dd:c2:05:d7:b0:
                    6c:78:35:c8:13:b9:2e:37:7d:ee:3f:47:1c:10:bb:
                    b0:0f:e9:00:b7:7b:93:fe:8e:35:3f:f0:32:6d:c8:
                    7e:43:18:f9:66:fa:cd:e5:a4:96:72:17:f5:25:92:
                    88:2e:8f:9f:d0:a5:89:8d:a6:ef:74:e6:f8:9f:8c:
                    e3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B0:27:05:FE:56:E7:1A:44:D5:4D:6A:40:40:55:90:14:CF:74:85
            X509v3 Authority Key Identifier:
                keyid:BC:74:56:11:F3:E0:7D:86:3E:AB:DD:6E:11:B6:9D:47:16:1C:74:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/29/BC745611F3E07D863EABDD6E11B69D47161C74D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHRWEfPgfYY-q91uEbadRxYcdNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/29/352e3138322e31392e302f32342d3234203d3e203333333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:be:21:54:52:c2:f8:a4:bd:69:d6:8a:ac:0e:16:fa:77:3f:
         d6:d1:04:c1:d8:3e:a6:90:ac:e7:58:7b:72:9b:8a:df:96:ce:
         77:e1:a4:f4:b9:77:3c:e1:06:0e:c5:f2:67:7c:92:5e:44:cf:
         97:1e:0b:32:b1:df:bc:9f:d0:bd:e9:3d:14:bb:b8:45:2f:d3:
         ce:d3:f8:bc:2a:11:14:ca:0e:ae:f1:56:1b:56:e1:ff:e7:da:
         ec:e6:03:87:ae:26:37:57:de:95:62:1e:44:3e:a4:61:26:5f:
         3b:a7:ad:7e:71:50:d1:04:b3:11:b1:05:2f:b9:34:a9:24:3b:
         50:82:57:39:42:e7:40:8d:64:1e:1a:0d:35:41:4c:13:e5:e0:
         3c:3b:52:f3:20:71:05:1d:b6:2b:8b:9c:27:d4:d1:57:d3:de:
         89:50:7f:2f:bd:da:00:2d:55:3d:71:0e:e2:8f:82:c6:a7:5a:
         33:98:7c:b6:51:04:58:c6:f6:7f:c3:20:38:38:1b:3a:e0:9c:
         bd:e3:21:5c:d3:60:e1:2f:e0:ff:4f:06:be:73:4d:84:e0:a4:
         9d:69:7e:a9:09:45:f8:3e:e9:75:f3:cc:0a:d9:83:d2:19:fc:
         bf:a6:15:7d:58:19:1d:cb:1f:25:47:97:d5:2a:f6:1a:d1:c3:
         ac:bb:84:ea
-----BEGIN CERTIFICATE-----
MIIG4TCCBcmgAwIBAgIUP7tzbd1IH/BkjyJrVdkaMdViD54wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmM3NDU2MTFmM2UwN2Q4NjNlYWJkZDZlMTFiNjlkNDcx
NjFjNzRkMDAeFw0yMDExMzAxOTA2MTJaFw0yMTExMjkxOTExMTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjY1MDhBOEIzMTQ4MTM3NTgy
RjYyMTY0REZEQUFCRjQwMjQ4MjUzOTZDQzEyRUQxOTBCQUIzNDY5MDlBRjdDOTMy
Nzk5RjBGMTdGMzk2QTI1NUQwQzZEMTczMDkxQ0E2MUJBNkEzQzA5Q0ZEMjNCQzg5
OTlGMUM2NUFCMEQ0MDZDMUI0RTE4MDM1RTI2NzZERjNERTYzNTIzRTQ5N0IxM0E3
QkNEOTgwMzdDODhCMDk0QzY4REFFOUZCMjU5QUVCQjUwNzcwOEJDMEUyQzg2QkE1
MzExM0I3QkRGNTk2Q0VBN0NGMDdCNzVDOTA3NDE5QzQ0MzEyMjc4QjQyQzlCRkJG
QTMyOTZENEI4MTkzRTk5M0U0OURBMzg0RDVGQjIyRjU2NDUyQThGOEUyQTI5OEIw
RDE5MTg3QjNEOTMxNjUwQzE0QTkwRkZGMTdDNTVCRDgzMzc4QjVEMzc1M0YzRkNE
ODMwNTIxQzBDN0RDRTFBMjQ2QjJDNjFCRERDMjA1RDdCMDZDNzgzNUM4MTNCOTJF
Mzc3REVFM0Y0NzFDMTBCQkIwMEZFOTAwQjc3QjkzRkU4RTM1M0ZGMDMyNkRDODdF
NDMxOEY5NjZGQUNERTVBNDk2NzIxN0Y1MjU5Mjg4MkU4RjlGRDBBNTg5OERBNkVG
NzRFNkY4OUY4Q0UzMkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtlCKizFIE3WC9iFk39qr9AJIJTlswS7RkLqzRpCa98kyeZ8PF/OW
olXQxtFzCRymG6ajwJz9I7yJmfHGWrDUBsG04YA14mdt895jUj5JexOnvNmAN8iL
CUxo2un7JZrrtQdwi8DiyGulMRO3vfWWzqfPB7dckHQZxEMSJ4tCyb+/oyltS4GT
6ZPknaOE1fsi9WRSqPjiopiw0ZGHs9kxZQwUqQ//F8Vb2DN4tdN1Pz/NgwUhwMfc
4aJGssYb3cIF17BseDXIE7kuN33uP0ccELuwD+kAt3uT/o41P/Aybch+Qxj5ZvrN
5aSWchf1JZKILo+f0KWJjabvdOb4n4zjLQIDAQABo4IB7zCCAeswHQYDVR0OBBYE
FK2wJwX+VucaRNVNakBAVZAUz3SFMB8GA1UdIwQYMBaAFLx0VhHz4H2GPqvdbhG2
nUcWHHTQMA4GA1UdDwEB/wQEAwIHgDBwBgNVHR8EaTBnMGWgY6Bhhl9yc3luYzov
L3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8yOS9CQzc0
NTYxMUYzRTA3RDg2M0VBQkRENkUxMUI2OUQ0NzE2MUM3NEQwLmNybDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkhSV0VmUGdmWVktcTkxdUViYWRSeFljZE5BLmNlcjCB
hQYIKwYBBQUHAQsEeTB3MHUGCCsGAQUFBzALhmlyc3luYzovL3Jwa2kxLnRlcnJh
dHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNpdC8yOS8zNTJlMzEzODMyMmUzMTM5
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzMzMzMzgzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAW2
EzANBgkqhkiG9w0BAQsFAAOCAQEAQL4hVFLC+KS9adaKrA4W+nc/1tEEwdg+ppCs
51h7cpuK35bOd+Gk9Ll3POEGDsXyZ3ySXkTPlx4LMrHfvJ/Qvek9FLu4RS/TztP4
vCoRFMoOrvFWG1bh/+fa7OYDh64mN1felWIeRD6kYSZfO6etfnFQ0QSzEbEFL7k0
qSQ7UIJXOULnQI1kHhoNNUFME+XgPDtS8yBxBR22K4ucJ9TRV9PeiVB/L73aAC1V
PXEO4o+CxqdaM5h8tlEEWMb2f8MgODgbOuCcveMhXNNg4S/g/08GvnNNhOCknWl+
qQlF+D7pdfPMCtmD0hn8v6YVfVgZHcsfJUeX1Sr2GtHDrLuE6g==
-----END CERTIFICATE-----