Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/15/352e3138302e3135312e302f32342d3234203d3e2032383536.roa
File:                     352e3138302e3135312e302f32342d3234203d3e2032383536.roa (raw, json)
Hash identifier:          5dBt+8WHtzSgjZ6qfTQFtR5ZRlSbtj4TNLc3aMU6/VM=
Subject key identifier:   79:5B:61:6A:30:83:C4:2D:1F:99:3C:BB:CA:46:25:BF:85:96:40:18
Certificate issuer:       /CN=077015f3f016b7d62b8733579a7ca46841f5ab65
Certificate serial:       13E0E5154E25230DA8CA466BF7A76AA0B4A072F5
Authority key identifier: 07:70:15:F3:F0:16:B7:D6:2B:87:33:57:9A:7C:A4:68:41:F5:AB:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3AV8_AWt9YrhzNXmnykaEH1q2U.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/15/352e3138302e3135312e302f32342d3234203d3e2032383536.roa
Signing time:             Fri 15 Jan 2021 10:34:13 +0000
ROA not before:           Fri 15 Jan 2021 10:29:13 +0000
ROA not after:            Fri 14 Jan 2022 10:34:13 +0000
asID:                     2856
IP address blocks:        5.180.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:e0:e5:15:4e:25:23:0d:a8:ca:46:6b:f7:a7:6a:a0:b4:a0:72:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=077015f3f016b7d62b8733579a7ca46841f5ab65
        Validity
            Not Before: Jan 15 10:29:13 2021 GMT
            Not After : Jan 14 10:34:13 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:55:7f:a7:50:b7:21:81:1a:69:cd:2f:4e:5d:
                    a2:83:85:77:a6:67:c3:91:72:f2:3f:fd:79:85:07:
                    08:3d:fa:f3:1b:b1:6e:f9:dd:7b:03:0e:46:4b:d0:
                    27:76:59:2a:ff:d2:8f:9a:dc:a5:3c:df:e6:4c:6d:
                    89:aa:0a:8d:ee:24:49:c0:47:11:43:b1:ca:15:ff:
                    dd:f9:05:9d:14:a4:2d:0f:89:7e:07:24:41:c3:14:
                    0a:af:e8:06:b9:e8:d7:0b:87:de:0c:07:c7:db:ed:
                    ee:a2:2c:8b:5a:bc:b5:f1:e1:71:45:33:39:09:27:
                    13:dc:b8:cd:fb:4b:e5:2e:e2:57:7f:c0:d9:48:fb:
                    58:76:00:37:2f:11:99:1e:4b:af:d3:a8:59:50:ab:
                    6f:95:4a:ac:92:3a:4b:51:2e:b9:e1:b4:00:e3:18:
                    9e:6c:b0:96:70:0f:43:d4:5a:72:5e:7f:e3:5b:f4:
                    2e:9c:53:3d:c4:2d:90:5f:6e:52:9b:40:85:14:8d:
                    0e:91:76:4b:0f:b0:2a:a9:ff:c7:9b:5e:c7:35:9b:
                    30:04:6b:d8:b4:55:12:55:68:ff:5a:81:89:ea:66:
                    d4:7f:54:fb:a8:d3:a3:4a:d8:a5:aa:a7:fa:b6:81:
                    32:fe:8b:59:d8:8c:60:9d:3c:84:c2:a5:74:a1:9f:
                    f5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:5B:61:6A:30:83:C4:2D:1F:99:3C:BB:CA:46:25:BF:85:96:40:18
            X509v3 Authority Key Identifier:
                keyid:07:70:15:F3:F0:16:B7:D6:2B:87:33:57:9A:7C:A4:68:41:F5:AB:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/15/077015F3F016B7D62B8733579A7CA46841F5AB65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3AV8_AWt9YrhzNXmnykaEH1q2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/15/352e3138302e3135312e302f32342d3234203d3e2032383536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:79:6d:f5:c7:b3:44:ec:33:d9:56:ba:19:d4:70:c0:e6:0f:
         4e:64:40:39:d6:3f:75:08:ca:48:64:6e:3a:7e:36:f4:41:bf:
         5e:9f:22:e0:0a:9e:3a:40:16:f9:ee:93:59:89:c1:28:9e:aa:
         7a:33:4b:85:93:20:bf:dd:f4:c8:8b:74:dd:34:66:20:58:22:
         fe:a1:fc:91:c1:bf:81:b6:cb:5e:23:36:14:8e:50:02:c4:c4:
         53:78:6d:d3:4e:e0:da:d6:9f:0c:53:aa:81:2f:5d:3f:1e:64:
         ea:6c:e0:fb:c1:34:06:48:d7:7d:39:24:45:eb:b0:b6:ae:66:
         32:22:12:78:c5:27:04:f5:46:8f:0a:51:d6:a4:84:63:69:ca:
         ea:64:10:38:0c:69:60:0f:dd:7d:30:60:1a:78:51:12:28:de:
         c4:04:53:2e:f6:f0:06:be:ad:a1:69:08:7b:9d:12:35:55:b4:
         0f:1b:26:0e:89:1c:51:63:a7:e9:aa:6a:3a:c4:73:e1:52:c8:
         4d:61:ac:e1:27:6e:43:8a:bf:0f:7e:29:89:49:d3:6f:4e:aa:
         49:b4:02:a7:b7:46:cb:64:8a:94:40:17:c1:1c:dd:a3:ce:66:
         57:94:a6:74:fd:76:aa:cd:3e:ba:53:5d:ef:9a:e7:2e:2e:32:
         a6:13:e3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----