Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/29/352e3138322e31372e302f32342d3234203d3e20323132333430.roa
File:                     352e3138322e31372e302f32342d3234203d3e20323132333430.roa (raw, json)
Hash identifier:          yKNF+abRm3I9/MHTsNvw9zehHV+VaeHT09x9e75KdjI=
Subject key identifier:   4A:4F:34:A3:9A:8C:39:01:83:1D:98:0C:4A:CC:5B:1D:77:6E:14:8C
Certificate issuer:       /CN=bc745611f3e07d863eabdd6e11b69d47161c74d0
Certificate serial:       7E59AC1D1AB9E9F4040AECEA1D2885BA38F136C7
Authority key identifier: BC:74:56:11:F3:E0:7D:86:3E:AB:DD:6E:11:B6:9D:47:16:1C:74:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vHRWEfPgfYY-q91uEbadRxYcdNA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/29/352e3138322e31372e302f32342d3234203d3e20323132333430.roa
Signing time:             Mon 30 Nov 2020 19:11:11 +0000
ROA not before:           Mon 30 Nov 2020 19:06:11 +0000
ROA not after:            Mon 29 Nov 2021 19:11:11 +0000
asID:                     212340
IP address blocks:        5.182.17.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:59:ac:1d:1a:b9:e9:f4:04:0a:ec:ea:1d:28:85:ba:38:f1:36:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc745611f3e07d863eabdd6e11b69d47161c74d0
        Validity
            Not Before: Nov 30 19:06:11 2020 GMT
            Not After : Nov 29 19:11:11 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9f:8b:fc:9f:ae:4e:7d:f2:92:4e:9e:84:5a:
                    88:1e:cc:0d:8a:65:26:80:5e:99:31:55:50:f9:e5:
                    e2:28:9a:ac:0c:20:2c:2e:65:da:fc:91:dd:78:af:
                    fc:93:10:b4:c2:71:e5:f2:d0:2c:c8:0f:89:ee:05:
                    10:5a:a5:55:2e:a1:bc:ab:e4:b6:7a:ae:ab:f4:b2:
                    97:83:63:59:70:95:29:3d:be:ca:e5:98:0d:2f:18:
                    aa:3f:f8:03:b5:b9:9c:1e:35:53:de:d5:d9:3c:91:
                    12:20:07:05:3a:95:25:5d:58:09:bd:ba:9f:75:f9:
                    bb:1e:47:fa:58:fd:9e:f8:ae:49:60:32:c5:36:0d:
                    28:94:d7:0b:1a:0e:fd:f4:f4:c9:cf:67:c4:5d:55:
                    bd:7a:b8:03:ec:71:d4:d0:1a:1b:21:c7:bb:ee:f0:
                    33:c2:c2:43:d5:07:1b:26:af:56:7e:67:0d:fd:b8:
                    70:5d:52:7c:fc:e0:51:d5:64:83:f7:4a:81:df:92:
                    a4:ed:86:09:68:fd:58:4d:1a:fe:6c:53:9a:4b:41:
                    b6:71:32:85:d2:92:08:d5:fa:09:3b:2d:65:9d:f4:
                    d0:62:30:8f:af:e6:b3:7d:ad:6c:4d:e1:83:88:c7:
                    48:a3:3a:0e:af:b9:be:95:91:9e:44:33:71:de:75:
                    d0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:4F:34:A3:9A:8C:39:01:83:1D:98:0C:4A:CC:5B:1D:77:6E:14:8C
            X509v3 Authority Key Identifier:
                keyid:BC:74:56:11:F3:E0:7D:86:3E:AB:DD:6E:11:B6:9D:47:16:1C:74:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/29/BC745611F3E07D863EABDD6E11B69D47161C74D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHRWEfPgfYY-q91uEbadRxYcdNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/29/352e3138322e31372e302f32342d3234203d3e20323132333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:93:20:e2:2f:cc:f7:16:5f:27:1a:d3:f0:e5:00:2d:16:05:
         71:f4:e9:99:0b:6c:4e:0c:47:54:24:f4:6a:bf:56:e8:56:d8:
         3b:a4:d9:ba:00:bb:0c:7e:d7:2f:f3:e4:82:4e:c9:05:5a:c5:
         50:6b:77:7f:e4:09:68:bd:83:23:7d:b2:cd:6e:3c:24:88:ed:
         30:e3:7c:d9:59:46:1e:c9:39:39:23:7c:c8:2e:19:f0:da:9a:
         f1:80:70:b5:ad:5b:16:2c:8e:ec:65:1d:3c:18:38:16:7c:ac:
         b2:02:87:e3:56:f2:9c:a8:7f:a3:66:60:f9:e0:cf:82:67:81:
         51:95:16:75:0c:0c:e5:12:ff:d7:5e:af:f3:64:aa:1c:d9:11:
         8d:34:91:b5:2d:9d:de:cd:07:31:81:82:cf:87:24:db:51:46:
         24:97:07:ca:d0:e2:f9:c0:de:f2:0f:a4:88:9f:0d:d6:8c:0c:
         04:5f:fe:5e:83:eb:7c:bf:31:ec:74:1b:0c:2d:69:c8:8d:7b:
         38:43:64:2b:1c:c0:3d:dc:2e:88:60:73:a6:21:4c:d3:39:ab:
         a6:b0:8b:fd:00:c5:2e:85:8a:c7:98:a3:8c:6a:55:70:8c:9f:
         e6:6f:51:ed:40:ad:66:d8:1e:84:38:db:8c:b4:8d:3f:7f:90:
         b7:6e:1a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----