Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/54/352e3138322e33332e302f32342d3234203d3e20333238333737.roa
File:                     352e3138322e33332e302f32342d3234203d3e20333238333737.roa (raw, json)
Hash identifier:          BnbG38TMxgL7I+F8fo03x00XhY5mPoYwppun2V5X7j8=
Subject key identifier:   5C:BA:1D:CE:1B:79:19:85:B3:1A:03:B3:41:63:19:B5:E1:C0:91:84
Certificate issuer:       /CN=1897f5d19c0b1376cbbc8f96d8489f37a85fbf2d
Certificate serial:       5DD868FECE8193A8559EFFADB0EE5B0E9B6674E8
Authority key identifier: 18:97:F5:D1:9C:0B:13:76:CB:BC:8F:96:D8:48:9F:37:A8:5F:BF:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJf10ZwLE3bLvI-W2EifN6hfvy0.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/54/352e3138322e33332e302f32342d3234203d3e20333238333737.roa
Signing time:             Tue 01 Dec 2020 23:26:37 +0000
ROA not before:           Tue 01 Dec 2020 23:21:37 +0000
ROA not after:            Tue 30 Nov 2021 23:26:37 +0000
asID:                     328377
IP address blocks:        5.182.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d8:68:fe:ce:81:93:a8:55:9e:ff:ad:b0:ee:5b:0e:9b:66:74:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1897f5d19c0b1376cbbc8f96d8489f37a85fbf2d
        Validity
            Not Before: Dec  1 23:21:37 2020 GMT
            Not After : Nov 30 23:26:37 2021 GMT
        Subject: CN=3082010A0282010100C4037503C3950103DC3BD26010A43B8F1F635C44A9D7263E3F68490F1F2D059CFEBC94076CF8719B6A9DF5C1B6D06B0074B8D3948F0497D2237A489282368AF9A03BF6A1591AE1056D8CAC66D03C18E5F3C5CC8BE35EF450DECBC89850BD6165AFF35E39515C56C8756C6E87CFCF7A0CA28FB38DDB21BFEEC089E615C9DC3A56F2F81F42BBF93C0F64E8FE9CECEABE2AF5701D05E5008E125227BB3972513F0AAE8EEB9FF411EFE41037DA07120D8435EE78A43365AD133004622E47303DC03970438968FEB53A0BBF51CF1FB1349D46ABB1F0FD4A66ACA2BBB1830C66F70EA9A44C74F26B5976C5FDF10C5651677986F9CD9747DC799B522B097BEB96D5CE970203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:03:75:03:c3:95:01:03:dc:3b:d2:60:10:a4:
                    3b:8f:1f:63:5c:44:a9:d7:26:3e:3f:68:49:0f:1f:
                    2d:05:9c:fe:bc:94:07:6c:f8:71:9b:6a:9d:f5:c1:
                    b6:d0:6b:00:74:b8:d3:94:8f:04:97:d2:23:7a:48:
                    92:82:36:8a:f9:a0:3b:f6:a1:59:1a:e1:05:6d:8c:
                    ac:66:d0:3c:18:e5:f3:c5:cc:8b:e3:5e:f4:50:de:
                    cb:c8:98:50:bd:61:65:af:f3:5e:39:51:5c:56:c8:
                    75:6c:6e:87:cf:cf:7a:0c:a2:8f:b3:8d:db:21:bf:
                    ee:c0:89:e6:15:c9:dc:3a:56:f2:f8:1f:42:bb:f9:
                    3c:0f:64:e8:fe:9c:ec:ea:be:2a:f5:70:1d:05:e5:
                    00:8e:12:52:27:bb:39:72:51:3f:0a:ae:8e:eb:9f:
                    f4:11:ef:e4:10:37:da:07:12:0d:84:35:ee:78:a4:
                    33:65:ad:13:30:04:62:2e:47:30:3d:c0:39:70:43:
                    89:68:fe:b5:3a:0b:bf:51:cf:1f:b1:34:9d:46:ab:
                    b1:f0:fd:4a:66:ac:a2:bb:b1:83:0c:66:f7:0e:a9:
                    a4:4c:74:f2:6b:59:76:c5:fd:f1:0c:56:51:67:79:
                    86:f9:cd:97:47:dc:79:9b:52:2b:09:7b:eb:96:d5:
                    ce:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:BA:1D:CE:1B:79:19:85:B3:1A:03:B3:41:63:19:B5:E1:C0:91:84
            X509v3 Authority Key Identifier:
                keyid:18:97:F5:D1:9C:0B:13:76:CB:BC:8F:96:D8:48:9F:37:A8:5F:BF:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/54/1897F5D19C0B1376CBBC8F96D8489F37A85FBF2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJf10ZwLE3bLvI-W2EifN6hfvy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/54/352e3138322e33332e302f32342d3234203d3e20333238333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:c0:bc:67:eb:04:f6:f2:6e:5b:b5:7f:17:0f:54:f2:ec:a0:
         94:2e:1f:2a:33:95:5f:52:57:ef:5e:2e:c1:36:de:1f:6b:af:
         33:78:de:1f:c1:5c:36:9e:19:cc:ed:d9:87:1e:68:31:92:fa:
         43:7e:73:a9:f2:98:0a:6b:c1:ac:fb:8d:5f:90:f3:fe:0b:be:
         be:71:0a:52:e9:85:15:12:ca:09:5a:3d:99:78:e9:14:1e:45:
         bd:eb:89:49:bb:09:ae:74:a1:36:4d:41:bf:e2:26:04:09:74:
         8e:fa:41:7b:74:34:3b:2f:a8:25:5d:d1:6f:1d:bd:4f:5a:e1:
         6f:0f:44:e4:fe:02:cb:e7:ae:a4:c3:6a:6a:11:12:e7:d5:d2:
         38:2f:82:e3:1d:42:46:d8:6b:64:cc:2a:d5:1c:2f:55:5a:69:
         c5:0e:82:c1:23:0b:b4:52:b3:a8:e8:7b:ef:90:5a:55:51:d1:
         b4:51:54:ad:25:89:ed:ac:af:64:f9:84:9f:90:0c:94:24:08:
         28:3b:13:fd:8e:85:58:40:b4:94:01:28:af:63:2d:7d:a3:e2:
         e0:e7:ee:92:5f:07:94:39:40:9f:90:4d:75:00:18:80:2c:65:
         9a:28:60:ec:1a:32:53:74:bc:ff:db:d3:7b:69:7a:d9:46:33:
         61:03:2c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----