Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/15/352e3138302e3134382e302f32342d3234203d3e20323035373439.roa
File:                     352e3138302e3134382e302f32342d3234203d3e20323035373439.roa (raw, json)
Hash identifier:          Zo027Mm7Q9iXTlsQurESorOdGl8JpQ8Q326KUQ6SmBE=
Subject key identifier:   5F:53:09:5F:BB:7A:03:5A:72:66:BD:7A:9D:D3:4D:53:C6:04:E4:7B
Certificate issuer:       /CN=077015f3f016b7d62b8733579a7ca46841f5ab65
Certificate serial:       7C44F58D172E8A4B317F0E79CE8DE195A25C7081
Authority key identifier: 07:70:15:F3:F0:16:B7:D6:2B:87:33:57:9A:7C:A4:68:41:F5:AB:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3AV8_AWt9YrhzNXmnykaEH1q2U.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/15/352e3138302e3134382e302f32342d3234203d3e20323035373439.roa
Signing time:             Mon 30 Nov 2020 16:04:02 +0000
ROA not before:           Mon 30 Nov 2020 15:59:02 +0000
ROA not after:            Mon 29 Nov 2021 16:04:02 +0000
asID:                     205749
IP address blocks:        5.180.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:44:f5:8d:17:2e:8a:4b:31:7f:0e:79:ce:8d:e1:95:a2:5c:70:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=077015f3f016b7d62b8733579a7ca46841f5ab65
        Validity
            Not Before: Nov 30 15:59:02 2020 GMT
            Not After : Nov 29 16:04:02 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e3:22:7f:68:62:ca:41:81:07:d7:48:c3:f3:
                    19:c4:6b:4a:63:bb:9d:87:cc:7b:c4:13:2b:cf:77:
                    f9:29:d5:0a:b3:18:86:09:d0:c6:7c:52:84:38:9a:
                    10:ab:13:5e:6d:ca:48:72:2d:c7:01:2c:fd:8a:d5:
                    e0:65:a6:c1:4c:78:7b:d4:9d:7d:30:56:f9:22:cb:
                    8c:f8:11:f0:cc:5c:5f:b1:38:ee:19:89:9b:2c:64:
                    f6:ae:18:d8:71:b4:41:d3:c3:fe:e7:fa:51:21:7b:
                    2d:19:0a:55:1b:2d:7d:64:2d:79:8d:d8:da:b3:36:
                    52:5b:d7:77:0d:77:77:8b:92:c1:4f:0a:63:45:63:
                    55:2f:e2:e3:99:a6:ee:68:0e:79:9c:9c:bb:8c:52:
                    7c:ec:cc:f8:3a:4e:f6:cc:51:e1:8c:9d:84:cc:68:
                    3e:9f:55:f5:c8:41:cf:36:7e:8b:51:d0:a2:4b:d3:
                    94:fa:1c:37:bc:a8:5c:f3:c9:f8:ab:a5:d2:7e:ba:
                    7c:ff:74:69:81:e2:3c:b3:b0:25:33:f3:be:f5:3c:
                    e4:12:2f:a4:f9:fb:cf:35:94:d6:96:fa:f6:dd:7b:
                    84:c8:2a:14:26:9e:50:52:fe:e6:42:6e:1c:97:63:
                    f7:0d:cb:b3:4b:e8:cd:6b:80:8d:e0:47:72:d4:3e:
                    73:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:53:09:5F:BB:7A:03:5A:72:66:BD:7A:9D:D3:4D:53:C6:04:E4:7B
            X509v3 Authority Key Identifier:
                keyid:07:70:15:F3:F0:16:B7:D6:2B:87:33:57:9A:7C:A4:68:41:F5:AB:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/15/077015F3F016B7D62B8733579A7CA46841F5AB65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3AV8_AWt9YrhzNXmnykaEH1q2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/15/352e3138302e3134382e302f32342d3234203d3e20323035373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:5f:ed:3e:cc:6b:ef:f5:c5:9b:00:3f:66:37:d2:eb:ac:9d:
         1f:39:8c:47:e7:e4:26:75:fc:f5:32:2e:33:f1:82:91:35:93:
         47:64:3e:2c:4a:b2:e4:07:7a:77:3a:3b:4b:c9:9c:9a:08:2a:
         0c:40:0a:e4:a0:99:65:1e:0d:9b:92:0e:8e:5d:14:8c:01:ac:
         9c:4d:e5:c5:ea:6f:11:8f:ee:83:30:66:94:9d:42:2c:87:7f:
         7e:08:de:29:17:06:0b:e6:44:5e:84:22:94:ec:3f:1b:7e:0a:
         a5:ac:59:43:27:76:65:c3:44:b9:67:d9:14:03:42:58:de:99:
         fe:fe:ea:a5:ca:2a:d2:45:8f:fe:53:e6:c9:f4:22:22:a0:9c:
         f3:dc:8e:99:29:e4:49:e6:10:90:13:db:46:2a:13:c1:3e:28:
         b5:87:a6:dd:68:5b:0f:e5:fd:a8:cd:d9:f6:b0:7b:91:c5:55:
         95:aa:d9:50:92:03:ec:de:d4:a9:a3:48:98:64:69:81:55:40:
         cd:99:31:b1:6b:a8:42:04:74:73:4f:98:2f:ed:af:47:5c:d1:
         77:7c:fe:1d:0f:66:ab:eb:a5:2c:07:3a:9d:ec:68:e6:c5:0f:
         8e:74:d1:9b:68:c3:da:61:54:e3:fa:38:ba:fd:51:48:1c:34:
         af:47:e5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----