Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/37372e37352e35322e302f32322d3232203d3e203138353330.roa
File:                     37372e37352e35322e302f32322d3232203d3e203138353330.roa (raw, json)
Hash identifier:          Nbd/JY0BFIUdFtE5OlK0GF1GmHsHVOjmL26MIbAB9Uk=
Subject key identifier:   8D:C3:3E:A3:6F:CF:5F:FE:B3:3B:7A:5B:7F:87:16:B1:8A:8E:61:2D
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       0EB170A0DC1549D8774EA77E60BD4F1B4D4D8413
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/37372e37352e35322e302f32322d3232203d3e203138353330.roa
Signing time:             Fri 27 Nov 2020 15:10:24 +0000
ROA not before:           Fri 27 Nov 2020 15:05:24 +0000
ROA not after:            Fri 26 Nov 2021 15:10:24 +0000
asID:                     18530
IP address blocks:        77.75.52.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:b1:70:a0:dc:15:49:d8:77:4e:a7:7e:60:bd:4f:1b:4d:4d:84:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Nov 27 15:05:24 2020 GMT
            Not After : Nov 26 15:10:24 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:08:84:3c:cf:01:b3:35:22:12:b5:5e:e9:0b:
                    6e:ab:d2:37:ff:b8:0f:52:c3:68:41:31:55:01:31:
                    90:db:7e:bc:2a:3d:21:d9:fb:91:60:90:0a:ed:3d:
                    c8:17:da:6b:53:f6:97:3e:97:ca:6f:98:e0:5b:98:
                    7f:2b:40:15:7d:79:6a:b1:32:cf:20:90:14:d7:1b:
                    0d:22:14:fc:92:e0:69:0f:ee:e8:e8:f0:3d:ca:4a:
                    c1:1c:08:85:88:fd:35:21:9b:47:59:03:63:27:fe:
                    1c:3f:94:96:de:60:35:69:e7:67:e0:c7:6c:13:5c:
                    b0:f6:88:01:75:81:83:8b:b3:3a:7e:9d:62:4f:c3:
                    9c:3b:3a:b3:91:62:17:eb:58:c2:a3:94:b2:03:2f:
                    4d:b9:e7:b3:b0:0d:fd:8e:fd:5e:5c:87:b2:b9:0b:
                    1a:21:01:4e:9d:4c:71:b4:01:87:02:3d:c2:df:7f:
                    2c:27:0d:cd:68:74:e6:4d:d1:95:c7:ca:90:39:63:
                    44:6f:be:21:34:32:f4:ea:64:8b:d0:31:6d:5c:48:
                    2b:9f:4f:ab:fe:02:f1:2b:db:0e:6d:2a:5f:ad:82:
                    50:25:9e:e9:b0:4f:4e:e2:58:fe:1f:65:4e:d0:18:
                    08:85:46:63:e6:b7:e7:ce:43:6d:7b:bb:5e:0d:98:
                    51:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C3:3E:A3:6F:CF:5F:FE:B3:3B:7A:5B:7F:87:16:B1:8A:8E:61:2D
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/37372e37352e35322e302f32322d3232203d3e203138353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:7b:ac:ea:60:cf:fb:1e:78:c8:29:dc:28:dc:cc:47:1a:ad:
         83:65:c7:39:00:c7:3a:30:e4:1f:8c:13:72:07:fa:b5:6c:d9:
         ce:b4:08:c3:08:ec:ae:e1:cb:66:7a:64:c2:6d:f5:a7:e3:00:
         f7:80:c6:d7:9d:88:c1:f2:0e:f3:2e:c0:89:56:d6:4d:71:58:
         a8:01:4e:72:93:59:31:98:6b:bd:11:fc:80:3c:74:e5:fc:31:
         66:65:c6:8b:18:d8:3e:da:39:00:0e:f7:5f:ab:b9:a7:9b:f9:
         8d:bf:0c:90:30:cd:9a:76:7a:3d:7e:91:10:c0:6e:e8:b1:71:
         2c:2c:2b:68:7c:23:be:a3:0c:f3:bb:29:aa:60:96:1c:e2:85:
         45:3f:bb:e6:e4:0a:85:fb:45:29:8b:24:1c:5c:24:75:c5:37:
         75:c1:1f:32:21:79:3c:cf:79:b3:b7:03:f3:01:ee:44:49:dd:
         22:b9:f7:f6:48:4d:5c:3a:e2:83:34:bd:37:8b:1e:04:72:a9:
         1a:33:ed:52:1e:39:74:33:09:2d:c2:b5:24:15:28:ef:4e:4f:
         e2:d1:83:75:f1:b1:1e:46:93:6a:4b:ac:17:1a:4b:6c:2a:94:
         06:db:af:a5:3a:c2:58:a1:63:f1:75:dd:93:f4:16:08:99:c5:
         04:28:47:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----