Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/29/352e3138322e31362e302f32342d3234203d3e20323133303139.roa
File:                     352e3138322e31362e302f32342d3234203d3e20323133303139.roa (raw, json)
Hash identifier:          RwORjQgMv7U4D+dELcyojpfAMWZUADZJO0yXbxz7DU4=
Subject key identifier:   9A:66:83:4D:39:2D:F0:F2:DB:DA:DA:A7:B4:54:12:3E:27:21:96:21
Certificate issuer:       /CN=bc745611f3e07d863eabdd6e11b69d47161c74d0
Certificate serial:       71A2836378F9A6E8926601160B9E645A0DB6125B
Authority key identifier: BC:74:56:11:F3:E0:7D:86:3E:AB:DD:6E:11:B6:9D:47:16:1C:74:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vHRWEfPgfYY-q91uEbadRxYcdNA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/29/352e3138322e31362e302f32342d3234203d3e20323133303139.roa
Signing time:             Mon 30 Nov 2020 19:11:11 +0000
ROA not before:           Mon 30 Nov 2020 19:06:11 +0000
ROA not after:            Mon 29 Nov 2021 19:11:11 +0000
asID:                     213019
IP address blocks:        5.182.16.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:a2:83:63:78:f9:a6:e8:92:66:01:16:0b:9e:64:5a:0d:b6:12:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc745611f3e07d863eabdd6e11b69d47161c74d0
        Validity
            Not Before: Nov 30 19:06:11 2020 GMT
            Not After : Nov 29 19:11:11 2021 GMT
        Subject: CN=3082010A0282010100C8B4F3CAF3662ACE0EF892664A6255F5AA6174945A8CF18792D8CD4FB9E4BE0BE48DB9E817304C664937CB17650DC45332FCBEE51146B6140C241E2F6A0C6D8BAE3EF85939032C84FEBED91CE0A6A1314ECFBA303CE221E2025D2DC29A60F4E5C2A5527C20471AFEBC990F50EE91BB42F058A7F9FB0433FE8BA77F52F356FBC8391DF881C8428FA70576B9BACE6404C5D602051D55E39C112F084CC08CFF6B4A7B4AC2EF4F76C9787E364B4C7DE9D4B29FA86A9FF92CFECA8DEF41EFFB36A40546F23F88D04BD3C7FB87EFEBDF44039801C02AE7045DC834922BB1E4BD0C63175939C6D7E0AC84D551D12CA4A54BC375BE888C127B08E7F901BA357DA5E5D9F50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b4:f3:ca:f3:66:2a:ce:0e:f8:92:66:4a:62:
                    55:f5:aa:61:74:94:5a:8c:f1:87:92:d8:cd:4f:b9:
                    e4:be:0b:e4:8d:b9:e8:17:30:4c:66:49:37:cb:17:
                    65:0d:c4:53:32:fc:be:e5:11:46:b6:14:0c:24:1e:
                    2f:6a:0c:6d:8b:ae:3e:f8:59:39:03:2c:84:fe:be:
                    d9:1c:e0:a6:a1:31:4e:cf:ba:30:3c:e2:21:e2:02:
                    5d:2d:c2:9a:60:f4:e5:c2:a5:52:7c:20:47:1a:fe:
                    bc:99:0f:50:ee:91:bb:42:f0:58:a7:f9:fb:04:33:
                    fe:8b:a7:7f:52:f3:56:fb:c8:39:1d:f8:81:c8:42:
                    8f:a7:05:76:b9:ba:ce:64:04:c5:d6:02:05:1d:55:
                    e3:9c:11:2f:08:4c:c0:8c:ff:6b:4a:7b:4a:c2:ef:
                    4f:76:c9:78:7e:36:4b:4c:7d:e9:d4:b2:9f:a8:6a:
                    9f:f9:2c:fe:ca:8d:ef:41:ef:fb:36:a4:05:46:f2:
                    3f:88:d0:4b:d3:c7:fb:87:ef:eb:df:44:03:98:01:
                    c0:2a:e7:04:5d:c8:34:92:2b:b1:e4:bd:0c:63:17:
                    59:39:c6:d7:e0:ac:84:d5:51:d1:2c:a4:a5:4b:c3:
                    75:be:88:8c:12:7b:08:e7:f9:01:ba:35:7d:a5:e5:
                    d9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:66:83:4D:39:2D:F0:F2:DB:DA:DA:A7:B4:54:12:3E:27:21:96:21
            X509v3 Authority Key Identifier:
                keyid:BC:74:56:11:F3:E0:7D:86:3E:AB:DD:6E:11:B6:9D:47:16:1C:74:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/29/BC745611F3E07D863EABDD6E11B69D47161C74D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHRWEfPgfYY-q91uEbadRxYcdNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/29/352e3138322e31362e302f32342d3234203d3e20323133303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:cf:3e:96:1a:a6:ae:d0:3a:65:d1:e7:d6:10:bd:a8:11:60:
         23:f2:eb:03:df:0d:c9:1f:bf:cd:84:d2:81:05:a1:c9:60:5c:
         94:39:03:4c:c1:d9:58:72:6f:71:ee:b5:6e:e5:f3:31:99:96:
         3f:8f:34:93:18:16:6f:a8:8e:73:81:d7:4a:fc:5f:b2:9e:de:
         b6:57:9e:89:07:79:d8:11:70:f6:75:f5:ed:ec:9d:11:7e:49:
         e9:1e:e4:d6:84:6e:04:3f:2f:af:ea:d0:e0:dd:c4:d2:7c:86:
         de:02:de:5f:21:43:17:0b:ce:9f:59:ef:ef:6c:1b:bc:12:83:
         7c:4f:60:d0:8a:62:1a:8f:69:0e:38:2c:5b:f2:61:0d:2b:25:
         00:aa:e8:40:dc:6f:b6:d1:91:bb:3e:d4:c0:b0:d7:fc:cb:7f:
         73:e8:1d:f2:e6:82:a3:d9:37:af:7c:55:e1:3f:e5:e2:b0:62:
         91:80:41:05:47:db:87:c1:ef:45:92:a3:48:e8:02:f0:11:50:
         c1:3d:c9:8e:58:a5:7a:05:28:07:28:e1:3a:25:d1:20:dc:cb:
         28:14:d2:93:3d:29:75:33:3d:f4:e8:17:4c:ec:8c:95:81:ae:
         5b:42:00:5a:43:05:d3:67:4d:60:1f:77:44:e7:5b:47:ed:d6:
         85:03:22:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----