Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/54/352e3138322e33342e302f32342d3234203d3e20323034393538.roa
File:                     352e3138322e33342e302f32342d3234203d3e20323034393538.roa (raw, json)
Hash identifier:          iqJ+INvtbx1hL5HSwZJb7Rwb54cmDIkp1qz/cxBd66g=
Subject key identifier:   BD:AA:68:44:A9:96:10:C3:F4:59:1F:83:25:CD:D5:4A:C9:40:BD:BE
Certificate issuer:       /CN=1897f5d19c0b1376cbbc8f96d8489f37a85fbf2d
Certificate serial:       084F7AFDC04249D52B8A78F28D88B61A3581D96F
Authority key identifier: 18:97:F5:D1:9C:0B:13:76:CB:BC:8F:96:D8:48:9F:37:A8:5F:BF:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJf10ZwLE3bLvI-W2EifN6hfvy0.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/54/352e3138322e33342e302f32342d3234203d3e20323034393538.roa
Signing time:             Tue 01 Dec 2020 23:26:37 +0000
ROA not before:           Tue 01 Dec 2020 23:21:37 +0000
ROA not after:            Tue 30 Nov 2021 23:26:37 +0000
asID:                     204958
IP address blocks:        5.182.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:4f:7a:fd:c0:42:49:d5:2b:8a:78:f2:8d:88:b6:1a:35:81:d9:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1897f5d19c0b1376cbbc8f96d8489f37a85fbf2d
        Validity
            Not Before: Dec  1 23:21:37 2020 GMT
            Not After : Nov 30 23:26:37 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fa:02:2e:31:62:46:33:80:b5:76:3b:c2:80:
                    7c:33:e2:53:10:e9:96:fc:88:6a:1d:93:6e:9f:06:
                    db:03:22:2b:d7:ee:97:a5:35:52:aa:6d:bf:8a:cd:
                    25:43:67:ec:56:cf:2e:fe:39:dc:4b:45:6a:6f:b3:
                    11:32:a7:08:cb:72:0a:3b:aa:34:58:43:85:86:7d:
                    95:fc:e4:0f:36:d8:34:cc:69:3d:16:de:9f:9a:1c:
                    6b:68:ce:16:8f:5f:50:a3:13:3a:cd:8c:7f:7b:d7:
                    aa:69:94:1a:0e:7e:5a:4e:85:4a:56:c4:b4:d9:83:
                    b6:cc:30:b3:02:27:d0:2c:d5:2c:62:14:66:29:e1:
                    ad:e1:f3:4d:dd:bd:33:25:7b:69:15:ec:f2:5b:84:
                    28:e7:12:25:5f:1b:4a:f0:c4:f2:f4:ce:57:b3:db:
                    c4:33:6b:bd:09:9d:fa:8d:17:b6:9f:83:62:9f:e8:
                    86:74:4b:45:3f:ce:31:bf:84:a9:1b:8e:02:d5:1c:
                    39:08:95:97:3f:7c:e9:f7:dc:20:e1:34:52:66:73:
                    b6:df:39:51:15:3c:b6:00:fa:3c:db:ff:54:8b:76:
                    d3:93:dc:42:c1:60:c9:a2:09:f8:3d:5d:3a:4c:6f:
                    13:28:d5:d7:a1:22:a0:93:68:6c:ce:a1:cc:2c:88:
                    ba:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:AA:68:44:A9:96:10:C3:F4:59:1F:83:25:CD:D5:4A:C9:40:BD:BE
            X509v3 Authority Key Identifier:
                keyid:18:97:F5:D1:9C:0B:13:76:CB:BC:8F:96:D8:48:9F:37:A8:5F:BF:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/54/1897F5D19C0B1376CBBC8F96D8489F37A85FBF2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJf10ZwLE3bLvI-W2EifN6hfvy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/54/352e3138322e33342e302f32342d3234203d3e20323034393538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:4f:f4:df:e5:2c:5a:84:d1:25:17:77:78:4e:57:a6:11:fc:
         a2:02:37:34:c5:54:22:18:59:a2:34:c7:c0:bf:a8:e1:a4:c3:
         13:3b:14:03:cc:23:a6:6d:73:42:7b:00:a7:59:41:01:14:15:
         86:86:7c:c9:5b:c3:92:71:bc:32:17:a9:17:f9:71:1e:ea:0f:
         ac:7b:d2:fa:14:b8:e6:70:8c:26:54:ee:f7:13:bf:50:24:7f:
         d7:37:ef:b4:f5:06:1e:b0:a8:bf:ec:9f:fa:95:54:de:04:5b:
         ff:72:fe:8e:53:55:a2:0f:9d:5d:13:ed:4e:0e:bb:7b:49:ca:
         30:98:f4:01:a8:75:27:fe:30:d5:e2:b0:f8:6c:84:ea:3d:18:
         5d:92:60:98:3d:21:1b:a3:02:1c:00:1c:9d:78:8e:90:96:f2:
         8a:13:cb:25:ef:4d:ce:89:c7:ea:07:f7:4b:b5:4c:33:11:78:
         84:56:4f:be:ca:5b:b5:cc:4e:b4:b4:b1:b1:28:d2:3b:3f:2e:
         0f:75:af:d4:ad:4d:1b:b2:1e:e6:28:9b:55:d9:b7:7e:69:6e:
         7c:d5:ec:e7:a9:c9:90:78:05:79:f9:9b:f6:05:a0:d2:f4:fe:
         32:5c:d7:35:9d:3e:40:ee:58:49:4a:b0:41:1c:22:ed:75:aa:
         79:d0:9e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----