Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/352e3138322e33342e302f32342d3234203d3e20323133303335.roa
File:                     352e3138322e33342e302f32342d3234203d3e20323133303335.roa (raw, json)
Hash identifier:          ciq0DHxaP8xEKqjJ9tQmMi7F4G6uS4crGWRcTm1260w=
Subject key identifier:   1E:00:C7:8C:93:08:CE:61:72:BF:F8:37:B6:31:D9:33:8B:31:FD:92
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       78721C264E2A01B38A31121D4F02DFC4BD2CAD4F
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/352e3138322e33342e302f32342d3234203d3e20323133303335.roa
Signing time:             Tue 30 Nov 2021 12:49:05 +0000
ROA not before:           Tue 30 Nov 2021 12:44:05 +0000
ROA not after:            Tue 29 Nov 2022 12:49:05 +0000
asID:                     213035
IP address blocks:        5.182.34.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:72:1c:26:4e:2a:01:b3:8a:31:12:1d:4f:02:df:c4:bd:2c:ad:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Nov 30 12:44:05 2021 GMT
            Not After : Nov 29 12:49:05 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:04:08:fe:e6:de:e1:0d:0d:f3:d3:62:fa:84:
                    43:c6:99:1c:b2:c4:81:28:38:4e:61:da:ce:98:0d:
                    f7:09:7d:0a:8f:10:e0:e0:b7:63:54:19:2d:90:c0:
                    d9:cb:9a:c0:eb:da:a6:d2:38:8a:0f:cb:4f:a0:e7:
                    9f:5e:32:a2:39:b9:59:91:63:74:3a:90:e2:94:01:
                    28:f7:b3:aa:36:b0:6f:ff:2f:41:84:11:e9:70:68:
                    34:8a:6e:78:d8:ef:6b:54:74:e0:28:4b:00:8e:e5:
                    74:c7:7e:79:3b:55:24:2f:a0:47:9a:cd:ed:e6:63:
                    93:d5:44:f1:45:a3:db:7b:39:bc:4b:89:b1:fc:93:
                    89:7e:96:62:75:8b:d4:e5:4f:ed:d6:95:66:34:80:
                    6f:80:75:d9:62:5a:e8:61:36:2c:6a:5b:c1:25:0b:
                    5b:a3:1e:42:90:4b:c6:53:4f:fd:49:59:13:51:bb:
                    c9:d8:21:49:ff:d6:74:6e:f5:a3:d1:2f:0f:a8:bb:
                    1b:00:71:38:22:17:fa:25:0f:ef:8b:52:a8:c8:38:
                    b6:76:8c:5e:65:51:5f:60:de:96:4f:3d:08:02:2b:
                    80:c0:ac:f7:7c:b8:2e:70:53:4a:2b:6c:1f:30:41:
                    15:82:da:97:fc:0f:61:42:4e:fc:47:23:13:2b:c1:
                    c0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:00:C7:8C:93:08:CE:61:72:BF:F8:37:B6:31:D9:33:8B:31:FD:92
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/352e3138322e33342e302f32342d3234203d3e20323133303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:b3:51:eb:54:05:db:b4:8b:b3:d5:cf:95:f5:12:5b:5f:1f:
         41:93:aa:72:da:61:90:5e:fd:6c:b9:e7:ce:17:6c:26:14:ec:
         1b:4c:d2:91:21:42:61:87:b7:3f:bc:54:eb:ca:3e:45:a1:fd:
         ab:39:85:7f:b9:8b:67:34:3c:e2:e5:80:54:ab:1b:33:ef:9b:
         fd:0c:10:bc:b2:8d:bf:53:7e:cd:65:ff:b7:07:c8:10:b8:8b:
         79:c1:36:e5:c7:db:12:87:0e:51:f0:f7:f3:55:b5:20:e0:bb:
         47:89:56:1a:9a:39:08:9a:a6:14:dd:77:df:48:c9:60:25:cf:
         cc:19:ad:cd:e2:0f:2c:bc:9b:a2:d8:83:f8:af:15:77:5b:1c:
         32:96:3b:88:e0:de:84:51:b8:ac:69:73:c9:c5:07:7b:46:22:
         d7:08:96:04:79:74:ab:28:c3:f4:6e:2c:a5:36:c0:48:3a:43:
         3d:57:81:42:a5:e9:1e:d8:9c:84:e4:12:a1:b0:78:cc:47:a8:
         fb:1d:ee:aa:5f:d8:db:ff:3d:a4:1c:88:9c:8a:f0:86:33:b2:
         c2:b2:23:82:b2:be:99:03:92:c0:86:94:83:f9:6b:32:97:0e:
         00:a2:21:85:73:66:b7:01:44:82:26:41:91:f4:3f:39:15:5c:
         16:81:d2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----