Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/55/352e3138302e36302e302f32342d3234203d3e20323133303335.roa
File:                     352e3138302e36302e302f32342d3234203d3e20323133303335.roa (raw, json)
Hash identifier:          vFMvj/xBvBo8gmn0arwMLw8XBmQo3sFqeaUMfBvQbck=
Subject key identifier:   B7:C3:F0:01:4A:CD:B0:2D:E0:2A:46:86:94:50:D6:4B:9D:53:E7:1F
Certificate issuer:       /CN=c9d78d8a48b0e6fa4d59727081d02afda59f8650
Certificate serial:       729F53E610FB6BA4DCFC26803CEDBC93CB25A8F7
Authority key identifier: C9:D7:8D:8A:48:B0:E6:FA:4D:59:72:70:81:D0:2A:FD:A5:9F:86:50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ydeNikiw5vpNWXJwgdAq_aWfhlA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/55/352e3138302e36302e302f32342d3234203d3e20323133303335.roa
Signing time:             Tue 01 Dec 2020 23:25:45 +0000
ROA not before:           Tue 01 Dec 2020 23:20:45 +0000
ROA not after:            Tue 30 Nov 2021 23:25:45 +0000
asID:                     213035
IP address blocks:        5.180.60.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:9f:53:e6:10:fb:6b:a4:dc:fc:26:80:3c:ed:bc:93:cb:25:a8:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d78d8a48b0e6fa4d59727081d02afda59f8650
        Validity
            Not Before: Dec  1 23:20:45 2020 GMT
            Not After : Nov 30 23:25:45 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:be:b5:ee:0b:6f:7b:68:1d:36:86:a2:94:33:
                    0f:13:63:a1:b7:31:7d:44:93:35:2a:4b:f2:b9:4f:
                    73:6c:0e:c4:9f:a7:a4:65:9f:52:d5:ab:54:a0:ad:
                    bf:b5:53:83:c5:25:8a:08:38:72:db:82:9c:94:de:
                    d0:37:03:b9:66:8f:27:60:16:7b:2a:03:f1:8c:c8:
                    00:b7:f7:b5:e2:87:49:18:26:46:ef:9b:20:70:0c:
                    0c:70:38:46:ff:99:ef:58:3c:27:bb:f7:85:28:4c:
                    31:78:f1:5f:64:a3:f3:93:d2:6d:34:fd:1d:5f:70:
                    ea:d0:31:7e:40:d7:c8:3a:78:6b:27:ca:d0:bc:e0:
                    6a:6d:4d:02:90:79:42:b9:82:b8:2b:44:18:26:c0:
                    d2:9b:d8:19:8c:fc:9f:c7:9e:94:a1:e4:0f:e3:2f:
                    82:4e:09:12:b6:a8:4d:e9:e8:0d:13:d7:7f:24:4c:
                    11:46:d7:3a:2a:d7:3f:2b:c6:ec:ea:a6:55:7c:0d:
                    cb:57:76:84:26:64:f5:8b:3c:12:15:90:54:ce:7f:
                    c1:8f:5e:33:e2:cc:da:1e:05:1a:9f:ec:eb:14:60:
                    86:7c:57:20:29:ee:d8:f1:a7:1f:a7:7f:71:e8:d7:
                    5a:e4:85:ed:fe:93:94:fa:9d:09:e8:75:51:5c:55:
                    b1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C3:F0:01:4A:CD:B0:2D:E0:2A:46:86:94:50:D6:4B:9D:53:E7:1F
            X509v3 Authority Key Identifier:
                keyid:C9:D7:8D:8A:48:B0:E6:FA:4D:59:72:70:81:D0:2A:FD:A5:9F:86:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/55/C9D78D8A48B0E6FA4D59727081D02AFDA59F8650.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydeNikiw5vpNWXJwgdAq_aWfhlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/55/352e3138302e36302e302f32342d3234203d3e20323133303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:30:e4:60:5d:63:de:c4:1d:66:6d:fe:69:6e:81:5b:65:14:
         ea:78:af:71:41:7d:8c:37:a7:e9:64:0c:b8:5f:bd:03:20:c9:
         94:9f:85:91:71:13:09:05:6a:4e:2d:f7:4b:3f:6c:39:e4:72:
         9b:f2:5e:41:26:7e:d0:f4:32:18:72:1a:7a:c6:c8:d9:e2:1e:
         78:7e:ff:e8:62:2d:94:93:fc:d3:9a:ea:15:08:f7:73:f2:05:
         43:1d:88:12:17:70:36:50:81:86:eb:d7:e5:5f:03:96:b5:35:
         d4:57:94:2d:e1:d3:f0:8b:8e:70:2e:a6:0f:94:15:31:c5:b8:
         a2:b7:45:53:17:74:cf:ba:6e:4c:ad:e5:f0:15:ca:e4:92:0e:
         e5:15:61:2c:85:8b:4a:0f:dd:3f:b6:ff:d9:9d:52:a0:36:b8:
         94:c6:a4:54:11:9d:1e:a6:e9:27:32:d4:cd:aa:14:8a:b0:80:
         27:cf:bb:00:29:21:92:d0:43:4c:13:9d:4b:7f:e5:32:33:49:
         df:c0:d8:db:6a:e7:46:e9:8f:41:d7:d9:7a:f7:d7:e1:4a:09:
         bd:f5:ca:c6:3e:25:72:0b:0c:ef:ac:30:fe:8c:3e:75:db:54:
         bf:0f:cc:c2:06:b4:66:09:44:3d:50:f7:f2:28:c1:27:de:ff:
         d1:3d:b5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----