Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/54/352e3138322e33342e302f32332d3234203d3e203631333137.roa
File:                     352e3138322e33342e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          5Yuh6Tlf0Vxy+ED5d1v1rwH/4rlrHqnDtritMYBW/Qk=
Subject key identifier:   6F:01:E0:80:E6:34:CC:3F:E3:18:23:A3:D0:7A:02:BB:AC:06:0C:00
Certificate issuer:       /CN=1897f5d19c0b1376cbbc8f96d8489f37a85fbf2d
Certificate serial:       7714B5433DEC4B0F37661CE3608C640403A3579D
Authority key identifier: 18:97:F5:D1:9C:0B:13:76:CB:BC:8F:96:D8:48:9F:37:A8:5F:BF:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJf10ZwLE3bLvI-W2EifN6hfvy0.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/54/352e3138322e33342e302f32332d3234203d3e203631333137.roa
Signing time:             Tue 01 Dec 2020 23:26:36 +0000
ROA not before:           Tue 01 Dec 2020 23:21:36 +0000
ROA not after:            Tue 30 Nov 2021 23:26:36 +0000
asID:                     61317
IP address blocks:        5.182.34.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:14:b5:43:3d:ec:4b:0f:37:66:1c:e3:60:8c:64:04:03:a3:57:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1897f5d19c0b1376cbbc8f96d8489f37a85fbf2d
        Validity
            Not Before: Dec  1 23:21:36 2020 GMT
            Not After : Nov 30 23:26:36 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d6:88:db:9a:c9:41:18:52:80:ac:04:8a:a0:
                    5a:40:43:d4:72:31:50:cb:69:ec:79:88:80:17:65:
                    a1:0a:c7:18:4f:56:69:d5:b3:4a:16:47:d0:10:52:
                    d3:a3:86:93:2a:5f:96:eb:0e:91:09:b5:cf:bf:91:
                    77:41:57:88:20:93:7d:a4:ee:53:26:b4:ae:ec:f7:
                    9f:bf:98:71:1f:e9:0c:3a:db:83:ae:f6:39:3b:13:
                    f3:9d:2b:60:51:65:4b:ca:25:2c:fe:0d:f9:6f:46:
                    6a:c2:1c:3b:73:b5:61:23:e9:28:65:14:12:85:4c:
                    c3:34:20:be:41:d9:2a:bd:f1:fa:b0:9a:a3:83:43:
                    ed:d9:f3:c6:dd:d8:c5:99:c2:f7:5d:14:57:60:14:
                    d8:c8:07:a5:92:f1:03:77:cf:67:2d:6f:f5:02:8e:
                    2d:bc:82:32:05:df:5c:3b:e7:6e:bb:71:38:28:d2:
                    ff:bb:3c:bd:71:67:68:b5:20:c5:09:04:7f:d2:6b:
                    71:8e:50:fb:2e:e9:46:2c:f2:27:71:71:06:48:ff:
                    f6:d5:da:b3:3f:cf:8c:e5:e1:37:36:02:4d:dc:d6:
                    08:52:f3:4d:af:99:c0:a0:74:02:f5:cd:e5:16:4e:
                    fb:63:c4:2f:b0:4e:a2:fc:9c:03:2b:41:82:8f:42:
                    a8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:01:E0:80:E6:34:CC:3F:E3:18:23:A3:D0:7A:02:BB:AC:06:0C:00
            X509v3 Authority Key Identifier:
                keyid:18:97:F5:D1:9C:0B:13:76:CB:BC:8F:96:D8:48:9F:37:A8:5F:BF:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/54/1897F5D19C0B1376CBBC8F96D8489F37A85FBF2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJf10ZwLE3bLvI-W2EifN6hfvy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/54/352e3138322e33342e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:73:cf:6e:1b:a4:de:91:de:ae:a1:a7:92:8b:c7:e1:1c:83:
         4b:3d:14:ef:8b:6c:f1:5d:d0:12:60:26:23:59:0a:11:a8:49:
         76:47:a5:98:76:0e:2d:79:9b:86:4c:8e:24:cb:a5:5e:d0:2d:
         82:36:46:9b:4c:44:fc:5d:d1:44:cf:ad:40:d6:dd:9b:50:ce:
         f3:84:97:b0:79:d4:a2:47:e4:39:4f:2a:f7:21:1d:b7:a2:5b:
         a5:3a:7e:53:f0:dd:be:fb:e9:c2:91:a8:58:63:27:e8:fe:fb:
         12:29:ba:80:38:00:7d:69:65:d4:18:00:95:6d:ac:77:63:07:
         81:31:d4:bc:7e:53:60:4c:01:b1:6d:ae:99:b4:e8:e5:d6:6e:
         cb:16:99:30:54:b0:8e:a5:ac:89:4d:ca:ab:84:d0:c5:06:f8:
         4d:0d:61:44:61:72:41:65:40:f9:8f:d0:a8:16:6a:a6:46:4b:
         c5:77:a4:1a:39:91:6b:9c:16:12:ed:e6:f4:bc:70:f8:8a:f7:
         3f:46:8a:99:65:7e:8c:86:1b:f5:c6:b5:ff:df:15:e3:90:18:
         73:bd:64:aa:b5:50:19:bb:54:c2:b0:98:ee:09:d3:33:65:a7:
         0c:56:18:14:a1:36:06:20:49:2e:ee:96:a8:0c:19:28:c7:cb:
         f1:a3:3d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----