Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/29/352e3138322e31382e302f32342d3234203d3e20323037313839.roa
File:                     352e3138322e31382e302f32342d3234203d3e20323037313839.roa (raw, json)
Hash identifier:          +J5shSzaWuA9G4RvSCZKcYrlYn4XUFrtDQlHaE8tP8Y=
Subject key identifier:   44:10:C8:2B:E5:E5:61:15:70:1D:78:0F:C5:2C:33:F1:65:52:CC:E8
Certificate issuer:       /CN=bc745611f3e07d863eabdd6e11b69d47161c74d0
Certificate serial:       69CA19DC83B35BC5ADCA6E80D618138FF86B1F1F
Authority key identifier: BC:74:56:11:F3:E0:7D:86:3E:AB:DD:6E:11:B6:9D:47:16:1C:74:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vHRWEfPgfYY-q91uEbadRxYcdNA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/29/352e3138322e31382e302f32342d3234203d3e20323037313839.roa
Signing time:             Mon 30 Nov 2020 19:11:11 +0000
ROA not before:           Mon 30 Nov 2020 19:06:11 +0000
ROA not after:            Mon 29 Nov 2021 19:11:11 +0000
asID:                     207189
IP address blocks:        5.182.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ca:19:dc:83:b3:5b:c5:ad:ca:6e:80:d6:18:13:8f:f8:6b:1f:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc745611f3e07d863eabdd6e11b69d47161c74d0
        Validity
            Not Before: Nov 30 19:06:11 2020 GMT
            Not After : Nov 29 19:11:11 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5a:e0:02:4b:23:78:2b:e5:ff:7c:65:97:7b:
                    1c:0d:b1:e1:77:21:da:2d:ab:e1:1e:57:27:cb:ec:
                    11:aa:eb:cb:94:b4:15:27:95:0d:77:19:78:a5:54:
                    ef:70:37:ff:73:a2:52:9f:9c:30:cd:13:d6:39:a5:
                    02:95:1b:09:18:bd:b6:f1:f5:b8:e5:03:70:36:7b:
                    0f:c2:b5:6c:b4:cd:74:9b:94:2a:60:65:80:96:48:
                    31:51:5a:17:8b:ef:2e:fb:b9:c1:73:7d:63:33:06:
                    cc:29:56:68:8a:f9:1a:33:9f:dc:ed:cd:28:19:8f:
                    fd:2c:47:89:16:89:05:12:a1:4a:e2:d9:14:41:ec:
                    9a:42:5f:f2:5d:aa:89:81:a6:81:6d:db:ae:2c:e3:
                    d0:8f:84:07:73:40:d7:1d:19:d8:1c:f1:fb:f7:98:
                    db:a7:17:41:9e:1c:44:67:37:58:a4:b3:f2:97:af:
                    ad:71:10:d3:61:88:f5:d9:02:a3:f6:8d:4d:fd:d4:
                    2e:7c:6c:a7:f0:08:70:11:f5:05:02:78:43:85:f5:
                    0b:34:61:9f:c8:3f:dd:ea:b3:92:3d:25:28:f1:68:
                    51:14:c4:4b:ee:40:0a:48:fe:80:cb:a5:16:e0:f2:
                    3b:d9:95:d5:e5:79:da:de:5a:b8:c5:7b:84:ec:49:
                    d1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:10:C8:2B:E5:E5:61:15:70:1D:78:0F:C5:2C:33:F1:65:52:CC:E8
            X509v3 Authority Key Identifier:
                keyid:BC:74:56:11:F3:E0:7D:86:3E:AB:DD:6E:11:B6:9D:47:16:1C:74:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/29/BC745611F3E07D863EABDD6E11B69D47161C74D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHRWEfPgfYY-q91uEbadRxYcdNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/29/352e3138322e31382e302f32342d3234203d3e20323037313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:e5:22:2e:41:bc:57:59:ac:a9:53:3a:e4:99:01:1d:cd:ed:
         ed:f6:e2:2b:f6:63:db:ab:78:19:25:d9:8f:03:c6:2f:15:58:
         db:78:5f:01:93:08:c3:47:4d:61:25:9a:b0:26:60:6e:d4:36:
         a4:be:8b:6b:9d:70:64:28:63:6b:0d:e9:4f:14:96:a7:8b:5b:
         31:49:ac:08:27:b2:30:bb:5b:ae:e1:31:6b:3e:2c:68:f7:4e:
         de:13:e4:11:8d:9f:45:4b:c3:41:68:c6:39:24:dd:93:91:a3:
         c9:1e:6d:d2:76:52:91:3e:47:dc:17:cf:34:72:83:c4:e8:89:
         58:d2:7b:0b:20:79:47:c0:9b:a2:9b:38:8c:f6:dd:46:50:c6:
         c7:ac:f7:5f:3c:eb:7d:f5:9d:19:90:9f:49:0a:79:14:42:45:
         4a:b8:c0:7c:60:3b:f8:23:d5:5f:64:c6:c1:c6:ce:f9:1b:04:
         be:99:69:5a:ab:76:37:4d:78:c3:dd:9b:ab:c3:a4:ed:84:5c:
         73:8e:b5:11:11:39:67:dd:b0:be:cd:03:58:f1:8a:f3:d1:06:
         5f:cd:ba:ba:44:3c:ff:03:8b:68:c9:f2:2c:06:45:07:9b:76:
         88:65:e6:09:25:8f:8c:87:c3:28:ac:a7:8c:14:99:99:a5:9c:
         74:bd:9b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----