Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/29/352e3138322e31372e302f32342d3234203d3e20323132373335.roa
File:                     352e3138322e31372e302f32342d3234203d3e20323132373335.roa (raw, json)
Hash identifier:          R8PizMlnKh187OFNG6SIHGRF53rdP9doAWXd5ALz6ug=
Subject key identifier:   02:D2:43:B9:E2:13:76:82:0B:5E:D4:4E:85:06:45:41:34:C5:54:F8
Certificate issuer:       /CN=bc745611f3e07d863eabdd6e11b69d47161c74d0
Certificate serial:       3FA8241BEC56B6211CF4EC3ADEE4718B61DD1F0C
Authority key identifier: BC:74:56:11:F3:E0:7D:86:3E:AB:DD:6E:11:B6:9D:47:16:1C:74:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vHRWEfPgfYY-q91uEbadRxYcdNA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/29/352e3138322e31372e302f32342d3234203d3e20323132373335.roa
Signing time:             Mon 30 Nov 2020 19:11:11 +0000
ROA not before:           Mon 30 Nov 2020 19:06:11 +0000
ROA not after:            Mon 29 Nov 2021 19:11:11 +0000
asID:                     212735
IP address blocks:        5.182.17.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a8:24:1b:ec:56:b6:21:1c:f4:ec:3a:de:e4:71:8b:61:dd:1f:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc745611f3e07d863eabdd6e11b69d47161c74d0
        Validity
            Not Before: Nov 30 19:06:11 2020 GMT
            Not After : Nov 29 19:11:11 2021 GMT
        Subject: CN=3082010A0282010100D5772A5B223934830C2A124C9F97AB283645C5EDA775BA16823EA9D85439DEC69C65A7F963FC0CA9F7317905F90246A2742A5EE1DCCF4406FD4B31ECF7B8CA949ED6787913FAEDB43EA7A862A6197422C1C4BB07B28894DD6E8539D9CEDF82645331005714238E62E2568A457DE046A8C5F3C7A220F3007EB1D619FB707F7ACED87F19182554B398EBC37F0AD9F3F8E9F7FAC7B8A5266749228536FEB315626D3A2F74480787D1BDCC2346550EB0B8A0F561094C76828E7EC1EC74EEB91CDDDC40FB6125C7E5DDC7B64A7D89BDDBA2D828F32A5799F4A26F568A463087BEACD8152CB54AD39B04ADB021E10F3418CB48D72C6D1B87494E251974D519981DAFD30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:77:2a:5b:22:39:34:83:0c:2a:12:4c:9f:97:
                    ab:28:36:45:c5:ed:a7:75:ba:16:82:3e:a9:d8:54:
                    39:de:c6:9c:65:a7:f9:63:fc:0c:a9:f7:31:79:05:
                    f9:02:46:a2:74:2a:5e:e1:dc:cf:44:06:fd:4b:31:
                    ec:f7:b8:ca:94:9e:d6:78:79:13:fa:ed:b4:3e:a7:
                    a8:62:a6:19:74:22:c1:c4:bb:07:b2:88:94:dd:6e:
                    85:39:d9:ce:df:82:64:53:31:00:57:14:23:8e:62:
                    e2:56:8a:45:7d:e0:46:a8:c5:f3:c7:a2:20:f3:00:
                    7e:b1:d6:19:fb:70:7f:7a:ce:d8:7f:19:18:25:54:
                    b3:98:eb:c3:7f:0a:d9:f3:f8:e9:f7:fa:c7:b8:a5:
                    26:67:49:22:85:36:fe:b3:15:62:6d:3a:2f:74:48:
                    07:87:d1:bd:cc:23:46:55:0e:b0:b8:a0:f5:61:09:
                    4c:76:82:8e:7e:c1:ec:74:ee:b9:1c:dd:dc:40:fb:
                    61:25:c7:e5:dd:c7:b6:4a:7d:89:bd:db:a2:d8:28:
                    f3:2a:57:99:f4:a2:6f:56:8a:46:30:87:be:ac:d8:
                    15:2c:b5:4a:d3:9b:04:ad:b0:21:e1:0f:34:18:cb:
                    48:d7:2c:6d:1b:87:49:4e:25:19:74:d5:19:98:1d:
                    af:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D2:43:B9:E2:13:76:82:0B:5E:D4:4E:85:06:45:41:34:C5:54:F8
            X509v3 Authority Key Identifier:
                keyid:BC:74:56:11:F3:E0:7D:86:3E:AB:DD:6E:11:B6:9D:47:16:1C:74:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/29/BC745611F3E07D863EABDD6E11B69D47161C74D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHRWEfPgfYY-q91uEbadRxYcdNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/29/352e3138322e31372e302f32342d3234203d3e20323132373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:d6:37:92:45:de:16:18:29:a8:17:78:f9:59:aa:0c:12:37:
         ea:6a:4c:1d:0a:35:a9:c9:24:73:88:33:f7:20:f9:bd:98:2e:
         b1:63:d0:a4:c3:7a:19:37:3f:b3:90:d7:0f:e0:0d:b7:36:3a:
         0f:27:94:9a:db:8b:df:50:34:f1:57:8c:d8:91:c4:23:e8:94:
         30:b9:f0:f6:dc:1b:a5:d5:13:fb:9b:b9:ef:0e:46:b6:91:98:
         2e:8b:92:85:55:24:10:4d:c0:3e:ab:b7:e2:56:4b:d2:2d:af:
         bd:1b:ff:5e:4b:72:fb:4f:2c:f6:5d:5c:62:48:97:8f:a8:7c:
         d3:38:fb:12:33:63:dc:5d:6f:75:05:df:9a:95:7b:6e:90:16:
         03:5d:15:1c:65:49:36:3d:56:80:af:1d:6d:02:49:0e:fe:4c:
         bb:70:bd:72:66:51:a1:1a:2e:f8:56:d8:40:ad:5d:22:40:e8:
         67:13:cd:08:07:91:e3:d9:79:0c:fd:fb:cf:07:36:5b:f5:c1:
         6c:d2:db:a2:36:1b:70:d9:84:aa:0b:a2:b2:96:4e:a2:31:a6:
         2d:0d:63:55:8c:e1:43:a5:2f:c4:43:fb:f0:c5:05:53:60:71:
         a0:bd:71:5d:7a:a5:8e:2e:48:9f:6b:74:0e:bc:99:34:a0:24:
         90:44:25:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----