Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/54/352e3138322e33352e302f32342d3234203d3e203235303938.roa
File:                     352e3138322e33352e302f32342d3234203d3e203235303938.roa (raw, json)
Hash identifier:          9Uzpn4NxwTGRR5r8vHWOA3nja0tfqgFcJDeQZ1G9myY=
Subject key identifier:   B9:38:0B:4D:ED:3E:46:93:AC:36:C8:E9:6C:26:41:1A:D6:25:29:3E
Certificate issuer:       /CN=1897f5d19c0b1376cbbc8f96d8489f37a85fbf2d
Certificate serial:       0D5D735FF68C08BB65D4D47610CDC1CAF30C12B8
Authority key identifier: 18:97:F5:D1:9C:0B:13:76:CB:BC:8F:96:D8:48:9F:37:A8:5F:BF:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJf10ZwLE3bLvI-W2EifN6hfvy0.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/54/352e3138322e33352e302f32342d3234203d3e203235303938.roa
Signing time:             Tue 01 Dec 2020 23:26:39 +0000
ROA not before:           Tue 01 Dec 2020 23:21:39 +0000
ROA not after:            Tue 30 Nov 2021 23:26:39 +0000
asID:                     25098
IP address blocks:        5.182.35.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:5d:73:5f:f6:8c:08:bb:65:d4:d4:76:10:cd:c1:ca:f3:0c:12:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1897f5d19c0b1376cbbc8f96d8489f37a85fbf2d
        Validity
            Not Before: Dec  1 23:21:39 2020 GMT
            Not After : Nov 30 23:26:39 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:92:1a:18:12:5f:87:89:40:90:60:4a:18:c2:
                    ff:58:9e:f1:af:d1:0d:80:97:53:ed:07:ba:dd:9e:
                    77:cc:77:7d:a1:8d:7e:71:f3:ed:34:ed:7b:1d:d8:
                    69:21:40:17:54:51:17:26:e8:0d:2a:48:95:d3:53:
                    49:08:28:66:f0:e5:6a:6a:05:e7:2a:93:4a:54:58:
                    9b:db:b2:64:f7:cd:b1:37:80:be:1b:8c:c7:f6:23:
                    de:0d:50:c3:bc:d8:7d:d6:13:e8:34:aa:d9:a8:25:
                    66:3d:47:ee:85:dc:2c:33:9a:b6:8b:8a:2f:cc:38:
                    1a:3c:94:d0:68:7e:be:6d:6b:92:ad:69:fa:e0:db:
                    a7:ef:0b:59:73:a2:96:43:b9:57:02:d9:0e:51:fd:
                    a5:fa:79:c8:46:14:5a:1a:79:cb:f0:24:b0:c8:cb:
                    d1:5a:78:2f:0a:e7:00:28:4f:12:e2:9d:b4:06:27:
                    06:d9:96:ef:21:ed:e0:1d:6e:79:12:f2:6e:63:90:
                    c2:6f:44:05:a9:8b:6f:60:69:d4:fb:18:20:12:4f:
                    26:29:8d:f8:48:f0:ec:c4:3c:0c:79:83:40:7d:d0:
                    59:9d:ad:eb:dc:67:76:d8:e5:3b:85:22:eb:d3:49:
                    14:c7:ff:16:bf:05:0f:41:08:af:b9:74:e6:13:72:
                    92:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:38:0B:4D:ED:3E:46:93:AC:36:C8:E9:6C:26:41:1A:D6:25:29:3E
            X509v3 Authority Key Identifier:
                keyid:18:97:F5:D1:9C:0B:13:76:CB:BC:8F:96:D8:48:9F:37:A8:5F:BF:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/54/1897F5D19C0B1376CBBC8F96D8489F37A85FBF2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJf10ZwLE3bLvI-W2EifN6hfvy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/54/352e3138322e33352e302f32342d3234203d3e203235303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:99:09:e3:1a:45:95:e5:ab:31:bd:2f:54:e5:6f:b9:ad:5e:
         70:58:ce:22:8b:18:1c:2c:e4:46:28:2f:fd:be:12:4d:1b:69:
         42:92:69:e6:7e:e2:70:ff:eb:4b:3d:55:1f:aa:ca:a7:9e:85:
         af:dc:81:e4:de:9e:99:1f:ba:cb:5b:52:db:24:21:1c:5a:c4:
         42:b3:9b:a8:20:27:33:39:9e:ae:38:02:ea:48:84:f9:6c:da:
         a4:8d:f8:dd:fe:49:13:4d:0f:f0:8c:d8:a9:22:4f:de:bd:27:
         65:34:a8:fb:82:14:65:b3:c5:32:f3:9d:fd:cc:6b:fb:32:72:
         e0:55:f6:fe:fa:77:a2:d2:0b:e5:dd:b3:92:21:7f:85:11:d1:
         07:d5:e8:66:ba:90:f2:ad:a4:45:28:52:8e:dc:ad:c6:95:2a:
         87:b0:31:04:fd:31:4e:57:cf:9c:71:f3:eb:bb:4c:f4:86:e3:
         ec:2d:45:f4:c0:99:09:c1:31:df:58:46:99:b5:5b:4b:d8:f3:
         d9:c4:af:ab:c1:cc:42:2d:08:ed:bb:17:04:6f:32:5b:28:3f:
         82:24:59:95:57:97:8c:44:8d:e5:af:32:6d:5c:78:1f:60:d5:
         b8:0a:dc:b0:81:4e:af:5e:3c:74:8a:24:54:9d:88:cc:bc:1d:
         58:c0:e2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----