Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/29/352e3138322e31382e302f32342d3234203d3e20323133303336.roa
File:                     352e3138322e31382e302f32342d3234203d3e20323133303336.roa (raw, json)
Hash identifier:          EHOxyB/XiP/sf3X+9XzDOWcI4+wbQH25Nf73um8oUag=
Subject key identifier:   0E:FB:8D:23:1E:28:94:4A:0D:E4:5A:DD:92:15:A4:FD:72:A4:33:C5
Certificate issuer:       /CN=bc745611f3e07d863eabdd6e11b69d47161c74d0
Certificate serial:       6F49620C328A6AF248D43925D9EEF27D9E1B4263
Authority key identifier: BC:74:56:11:F3:E0:7D:86:3E:AB:DD:6E:11:B6:9D:47:16:1C:74:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vHRWEfPgfYY-q91uEbadRxYcdNA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/29/352e3138322e31382e302f32342d3234203d3e20323133303336.roa
Signing time:             Mon 30 Nov 2020 19:11:12 +0000
ROA not before:           Mon 30 Nov 2020 19:06:12 +0000
ROA not after:            Mon 29 Nov 2021 19:11:12 +0000
asID:                     213036
IP address blocks:        5.182.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:49:62:0c:32:8a:6a:f2:48:d4:39:25:d9:ee:f2:7d:9e:1b:42:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc745611f3e07d863eabdd6e11b69d47161c74d0
        Validity
            Not Before: Nov 30 19:06:12 2020 GMT
            Not After : Nov 29 19:11:12 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e7:5d:4b:76:9c:b9:85:4b:f0:31:4b:c8:b4:
                    30:cf:ea:a2:df:77:9c:75:ef:4e:c7:22:86:ee:d6:
                    20:fb:eb:17:9e:69:40:03:20:0d:83:fa:79:f2:00:
                    f9:1d:c0:a2:01:72:3a:02:84:75:92:a9:f4:1f:34:
                    09:d8:94:fa:1b:c8:70:32:f5:b3:47:c4:11:a7:bc:
                    81:54:9d:1a:a8:8d:36:04:d0:44:52:68:93:ab:a6:
                    ba:7c:c6:db:f5:b4:7a:f7:36:a4:a8:23:2c:ff:13:
                    d2:c1:ec:df:6f:dc:26:85:26:be:08:a7:04:e8:61:
                    3a:8e:1c:17:97:e7:9b:31:78:0f:ac:1d:0e:53:6e:
                    c9:e1:af:38:a2:b0:64:98:30:ac:23:53:5b:d9:2f:
                    2e:00:ba:83:1f:2c:87:51:f4:29:e8:5f:a5:29:08:
                    b7:1f:72:8c:13:0c:07:3e:29:5b:6b:c1:5c:be:d7:
                    dc:78:46:6d:f7:cf:7b:18:07:ce:b3:76:82:a2:c9:
                    27:0c:d9:0d:4b:19:e6:72:a8:83:16:9e:10:b2:d5:
                    e3:cf:ff:ee:b1:b4:25:87:3a:25:44:98:3a:9d:6f:
                    e1:d5:3a:6b:9f:5b:ac:e0:ba:4a:19:08:56:af:47:
                    e5:7a:cd:5b:dc:c8:6e:58:b6:66:df:a8:25:92:73:
                    be:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:FB:8D:23:1E:28:94:4A:0D:E4:5A:DD:92:15:A4:FD:72:A4:33:C5
            X509v3 Authority Key Identifier:
                keyid:BC:74:56:11:F3:E0:7D:86:3E:AB:DD:6E:11:B6:9D:47:16:1C:74:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/29/BC745611F3E07D863EABDD6E11B69D47161C74D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHRWEfPgfYY-q91uEbadRxYcdNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/29/352e3138322e31382e302f32342d3234203d3e20323133303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:5a:f0:53:a6:ae:4b:94:9d:6e:dc:00:51:c4:db:6e:2a:98:
         3b:aa:e4:88:be:b8:dd:c5:9c:93:7b:0c:09:5e:64:5e:6e:cc:
         90:8c:92:f4:13:03:fd:01:57:f6:10:ba:89:9d:f9:e1:71:56:
         14:3f:ac:18:95:26:62:79:ea:ba:61:29:8a:9f:81:f8:a0:c8:
         26:f8:9c:7c:8a:10:78:07:a5:de:14:c7:a0:8b:af:5a:4f:ca:
         af:d3:22:12:24:29:e8:10:36:78:43:19:98:35:dd:0c:8a:e0:
         a7:a0:2e:df:c0:2f:a1:50:a8:7b:42:86:dc:7d:5f:d9:c7:91:
         79:3b:0c:6b:80:1a:92:65:0c:6c:9b:5b:be:ef:75:39:a9:79:
         01:28:76:bb:3b:c7:b5:ab:24:77:10:e5:ec:2e:c2:ae:de:48:
         67:67:22:47:f8:7a:f8:ee:c8:18:28:1e:40:11:26:db:e4:8d:
         92:aa:1d:00:62:59:71:fe:91:ae:ba:4e:96:11:22:55:86:f6:
         6a:70:c4:2b:c1:25:0c:bc:99:ae:fb:60:c7:e4:b9:2c:19:14:
         7d:c4:bc:41:03:bd:9b:42:fd:ea:35:95:6e:2f:cd:9a:c7:8d:
         e4:30:82:15:59:d4:09:dd:14:2d:f0:5c:58:19:2e:5e:03:4d:
         3e:84:49:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----