Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/15/352e3138302e3134392e302f32342d3234203d3e20313431313939.roa
File:                     352e3138302e3134392e302f32342d3234203d3e20313431313939.roa (raw, json)
Hash identifier:          tNvg2YBNUuwsbnvV+j20VWreJfjqyaHSTyR0/1MLOdY=
Subject key identifier:   10:2C:F9:04:88:01:70:81:87:6A:1F:03:9A:00:0B:50:46:C1:41:32
Certificate issuer:       /CN=077015f3f016b7d62b8733579a7ca46841f5ab65
Certificate serial:       0C706F3A0FDC8B335AD6EA68E4FF881E5739DB6A
Authority key identifier: 07:70:15:F3:F0:16:B7:D6:2B:87:33:57:9A:7C:A4:68:41:F5:AB:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3AV8_AWt9YrhzNXmnykaEH1q2U.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/15/352e3138302e3134392e302f32342d3234203d3e20313431313939.roa
Signing time:             Mon 30 Nov 2020 16:06:13 +0000
ROA not before:           Mon 30 Nov 2020 16:01:13 +0000
ROA not after:            Mon 29 Nov 2021 16:06:13 +0000
asID:                     141199
IP address blocks:        5.180.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:70:6f:3a:0f:dc:8b:33:5a:d6:ea:68:e4:ff:88:1e:57:39:db:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=077015f3f016b7d62b8733579a7ca46841f5ab65
        Validity
            Not Before: Nov 30 16:01:13 2020 GMT
            Not After : Nov 29 16:06:13 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e5:d7:f8:93:75:fb:8b:33:30:3f:52:67:66:
                    1b:62:63:22:38:00:07:d5:e2:9b:7e:9f:62:08:51:
                    98:f9:67:86:f6:98:3b:94:b6:7a:60:7c:56:db:47:
                    31:ab:c4:c2:67:ef:f3:dd:4a:dc:14:bd:8a:f8:87:
                    3c:dd:bd:1d:30:c0:08:c3:0b:54:cc:7f:57:6d:12:
                    79:8b:dc:fe:00:b5:0d:cb:b2:d7:da:bd:aa:5b:b1:
                    fa:52:cf:fe:d2:62:9f:14:e3:d0:77:e6:05:d9:7b:
                    d6:77:47:bb:d6:cb:8d:be:29:1c:7a:0b:30:a1:ad:
                    e1:37:67:d9:35:8b:bd:3e:a3:19:eb:ec:48:71:4b:
                    bd:1e:6b:9e:62:59:06:e3:d8:d4:00:76:60:a9:05:
                    27:50:1c:4b:3b:73:51:52:94:2d:79:34:1b:d9:69:
                    c3:5d:1e:97:80:b1:be:87:b8:e1:2a:f9:32:ae:df:
                    3a:de:1b:6d:72:47:4e:ce:48:5a:cc:d9:8a:da:35:
                    09:fb:57:88:b4:b7:d8:c9:91:37:d4:4a:6e:ac:ec:
                    b0:61:8c:9f:87:81:c4:96:97:45:3e:6c:95:ba:03:
                    d7:4d:cf:ec:88:69:6b:28:5a:7b:17:33:ae:c5:93:
                    93:5f:2b:e6:33:82:bb:e0:34:0b:74:25:11:a4:e0:
                    d1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2C:F9:04:88:01:70:81:87:6A:1F:03:9A:00:0B:50:46:C1:41:32
            X509v3 Authority Key Identifier:
                keyid:07:70:15:F3:F0:16:B7:D6:2B:87:33:57:9A:7C:A4:68:41:F5:AB:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/15/077015F3F016B7D62B8733579A7CA46841F5AB65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3AV8_AWt9YrhzNXmnykaEH1q2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/15/352e3138302e3134392e302f32342d3234203d3e20313431313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:25:00:8d:71:4e:ef:1e:21:f5:05:d1:50:df:fd:35:7c:f9:
         10:bc:87:50:c4:ea:fb:b3:7f:44:06:14:a1:eb:51:c0:92:92:
         36:3a:00:6f:54:d2:51:81:4c:7d:43:8b:b4:ac:2e:fa:8b:76:
         22:50:fe:3a:df:89:01:10:c8:6a:be:16:47:dd:bb:e2:bd:9c:
         c2:8a:9d:16:ad:eb:58:9b:a8:6b:fd:0d:19:70:81:10:70:12:
         91:15:f0:21:55:14:0a:b4:66:b1:e2:ba:6e:87:ae:16:cc:7b:
         aa:2c:16:98:be:91:b6:a9:9a:c3:e5:4d:cd:0e:26:4c:f9:c0:
         8e:46:c5:87:1c:ff:22:09:b0:50:b1:d0:9a:f6:cc:2e:ec:b7:
         dd:33:87:26:f6:36:83:38:fe:b9:25:8e:6d:26:70:c6:87:a3:
         53:71:70:9a:43:71:5f:b3:ea:bb:d4:ae:3b:f6:47:7f:7b:dd:
         62:f6:23:9e:08:20:ab:38:79:7e:4c:2b:71:eb:98:54:e1:bd:
         f7:08:13:c7:b8:54:49:be:5e:33:a3:85:29:30:b1:80:d3:f2:
         20:89:ae:a4:32:9b:38:54:1c:bd:04:d9:53:e5:35:bf:02:71:
         67:4b:37:72:3d:69:c5:41:c5:75:25:99:bf:bb:20:6f:0f:d8:
         65:89:89:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----