Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/54/352e3138322e33322e302f32342d3234203d3e20323037373837.roa
File:                     352e3138322e33322e302f32342d3234203d3e20323037373837.roa (raw, json)
Hash identifier:          9trzNRTxo3St6AyZy1JzT8GtcJVrDxpc9pUN1pD817c=
Subject key identifier:   2F:86:DE:9C:53:DF:B6:A1:EA:CC:EB:71:49:97:F7:06:39:94:D5:08
Certificate issuer:       /CN=1897f5d19c0b1376cbbc8f96d8489f37a85fbf2d
Certificate serial:       2826BFF2C97205B7A5DC6A8EDF9965013086C108
Authority key identifier: 18:97:F5:D1:9C:0B:13:76:CB:BC:8F:96:D8:48:9F:37:A8:5F:BF:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJf10ZwLE3bLvI-W2EifN6hfvy0.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/54/352e3138322e33322e302f32342d3234203d3e20323037373837.roa
Signing time:             Tue 01 Dec 2020 23:26:37 +0000
ROA not before:           Tue 01 Dec 2020 23:21:37 +0000
ROA not after:            Tue 30 Nov 2021 23:26:37 +0000
asID:                     207787
IP address blocks:        5.182.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:26:bf:f2:c9:72:05:b7:a5:dc:6a:8e:df:99:65:01:30:86:c1:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1897f5d19c0b1376cbbc8f96d8489f37a85fbf2d
        Validity
            Not Before: Dec  1 23:21:37 2020 GMT
            Not After : Nov 30 23:26:37 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:36:30:09:96:70:8c:71:7c:9f:8f:23:bb:e6:
                    fa:85:ae:f2:75:f6:e8:65:c6:49:f3:dc:28:30:a1:
                    a6:fb:e7:94:9e:cc:02:d9:c2:76:09:4b:e4:f3:de:
                    b0:48:dc:cd:ac:7a:29:1b:1a:43:71:dd:7b:5b:3f:
                    d8:84:29:22:7b:e7:4d:15:20:84:90:e4:48:76:21:
                    a9:94:66:0b:20:8d:99:62:a5:3f:d8:07:42:55:ef:
                    f3:dc:6d:4f:48:fc:4b:ed:94:1b:ce:2f:2b:fe:f4:
                    ac:53:40:9b:55:44:e7:36:83:27:94:da:8b:07:1e:
                    2c:ae:65:7b:e0:08:9e:e7:56:0e:db:a1:ce:85:b3:
                    68:ff:ce:4d:5f:fe:97:9f:0b:1a:25:09:53:ac:fe:
                    b7:62:af:de:db:b7:66:ee:b4:10:27:2e:12:fa:dc:
                    10:5d:78:29:05:e9:f1:32:e9:29:5d:30:09:18:8a:
                    e3:86:f1:77:28:9f:01:35:19:5c:1f:71:ae:df:7c:
                    d9:65:66:ee:2a:7a:cc:fe:e8:5f:76:24:25:0b:03:
                    3a:7b:e0:d8:11:25:e2:82:fe:15:63:f2:15:1d:10:
                    cf:c3:99:43:38:5c:d1:de:66:1e:03:68:e1:56:93:
                    f8:ab:4a:05:c4:f8:3f:b7:73:7a:3b:f6:cb:b5:04:
                    1a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:86:DE:9C:53:DF:B6:A1:EA:CC:EB:71:49:97:F7:06:39:94:D5:08
            X509v3 Authority Key Identifier:
                keyid:18:97:F5:D1:9C:0B:13:76:CB:BC:8F:96:D8:48:9F:37:A8:5F:BF:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/54/1897F5D19C0B1376CBBC8F96D8489F37A85FBF2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJf10ZwLE3bLvI-W2EifN6hfvy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/54/352e3138322e33322e302f32342d3234203d3e20323037373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:e8:f4:d1:ab:e3:ed:36:97:c4:7e:87:73:e5:3b:d3:cf:16:
         b6:a3:21:ba:59:7a:e1:a2:10:2b:d7:2e:aa:11:89:82:81:e7:
         34:e7:fd:1b:5a:6b:81:4d:8e:d3:8b:ef:7c:39:af:85:24:82:
         cc:e8:08:65:17:02:bd:dd:fe:18:f0:c5:27:05:9b:16:f7:3b:
         7e:bd:5d:ca:04:c9:07:12:22:a4:ce:4c:92:95:25:ff:a2:00:
         0d:11:a3:c8:f3:4d:60:5b:5b:5b:2c:11:55:e6:6f:b8:9e:ff:
         18:85:bf:46:7c:85:a1:d0:c2:04:9d:48:f0:19:d5:7a:dd:c2:
         76:37:63:5f:42:b2:d7:5b:56:4c:50:0e:4f:b7:5f:59:76:55:
         42:19:41:ce:35:98:ad:4b:34:df:6d:8a:23:a3:94:e2:81:3a:
         38:0b:c6:cb:ed:6e:fb:d7:d5:a1:f0:c9:da:b0:52:75:c1:54:
         dd:a6:de:75:c4:7f:da:5b:a4:9b:dc:1e:c5:e3:97:04:0d:5a:
         8a:e2:5c:e5:6d:29:06:8f:45:15:15:99:03:11:69:18:ce:3a:
         b4:93:85:42:e7:6f:b6:93:f5:1c:00:7a:5a:17:02:25:b8:2c:
         0e:0b:6a:68:26:2f:f4:2d:62:ac:8e:46:d0:d8:d5:69:f5:3a:
         06:16:7f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----