Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/180/322e35392e3135302e302f32342d3234203d3e203437353833.roa
File:                     322e35392e3135302e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier:          XxJ23vhqVkzBGcb/Jl5tEl+ZVNT67LbzGmAk7M6xmz4=
Subject key identifier:   09:21:92:9B:07:10:A2:55:D7:D1:50:1B:E7:13:ED:31:CE:92:86:3B
Certificate issuer:       /CN=dfe89bf7daa0f8aa7d022df984e6ea37e6f60a3d
Certificate serial:       5CBDC2BB57C0073D11292BC3503301C7FB7C6908
Authority key identifier: DF:E8:9B:F7:DA:A0:F8:AA:7D:02:2D:F9:84:E6:EA:37:E6:F6:0A:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3-ib99qg-Kp9Ai35hObqN-b2Cj0.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/180/322e35392e3135302e302f32342d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:33:48 +0000
ROA not before:           Sat 22 Oct 2022 04:28:48 +0000
ROA not after:            Sat 21 Oct 2023 04:33:48 +0000
asID:                     47583
IP address blocks:        2.59.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:bd:c2:bb:57:c0:07:3d:11:29:2b:c3:50:33:01:c7:fb:7c:69:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe89bf7daa0f8aa7d022df984e6ea37e6f60a3d
        Validity
            Not Before: Oct 22 04:28:48 2022 GMT
            Not After : Oct 21 04:33:48 2023 GMT
        Subject: CN=0921929B0710A255D7D1501BE713ED31CE92863B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a6:1b:eb:42:0a:eb:9e:cd:f1:ff:b6:00:ce:
                    ca:de:9f:78:a8:8b:a0:df:2f:58:32:f5:01:b3:58:
                    e2:1f:6c:37:75:5c:e6:f5:45:0e:49:5a:88:ce:ef:
                    43:a2:76:7e:ea:8a:f9:37:33:ae:d2:4b:85:2e:3c:
                    57:ea:06:81:dc:21:5d:a3:7b:33:68:1c:f9:3b:bc:
                    d6:68:01:77:87:17:b7:c3:56:0f:1f:32:2f:f0:97:
                    93:73:5d:91:ab:b2:fa:6a:f5:13:f2:0f:20:eb:1b:
                    1b:d1:72:eb:91:75:4c:72:90:96:1e:19:1d:4e:8a:
                    53:ac:80:aa:02:f8:3b:12:c9:93:bc:b3:5e:05:c0:
                    a5:22:e5:4a:95:5f:8c:7e:80:e4:30:9a:46:c7:c7:
                    00:1e:67:e6:49:e4:dc:09:ef:28:e8:b1:5e:64:a8:
                    de:cb:03:01:44:8f:69:8f:8d:91:16:8e:e7:db:41:
                    98:59:ca:6c:fb:87:bb:a5:21:2f:37:46:87:c5:18:
                    1c:3a:41:ae:78:97:ad:30:a0:1f:f0:41:ec:30:56:
                    d8:bf:64:c1:e6:70:78:8f:5f:54:31:08:8a:ea:8f:
                    f3:03:54:29:58:66:ed:67:aa:e7:c9:2e:f8:ec:a6:
                    c9:d2:49:42:7c:eb:07:70:43:2d:c1:89:fb:69:20:
                    60:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:21:92:9B:07:10:A2:55:D7:D1:50:1B:E7:13:ED:31:CE:92:86:3B
            X509v3 Authority Key Identifier:
                keyid:DF:E8:9B:F7:DA:A0:F8:AA:7D:02:2D:F9:84:E6:EA:37:E6:F6:0A:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/180/DFE89BF7DAA0F8AA7D022DF984E6EA37E6F60A3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-ib99qg-Kp9Ai35hObqN-b2Cj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/180/322e35392e3135302e302f32342d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.59.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:0f:60:95:94:47:4e:05:7a:8e:77:af:26:98:da:57:a5:5a:
         e5:40:4a:e4:b9:60:b5:5f:9d:44:40:82:77:4d:b0:6a:b9:b6:
         a7:f5:5b:00:e0:38:bd:8f:2b:47:f9:b4:f3:62:c6:f2:08:8a:
         24:7a:8a:30:ae:9c:1b:05:50:81:a9:ac:49:dc:f1:26:10:cd:
         63:13:3a:c4:e8:fe:14:c2:ff:18:d9:79:07:7e:28:07:0e:93:
         a7:2e:f5:a3:b9:d3:2e:80:99:a0:b4:98:40:3e:bc:e3:69:3c:
         e9:3c:84:b5:0b:0f:9a:d3:eb:ff:c8:5e:9a:cd:4f:a5:53:20:
         ab:90:b3:82:36:e3:77:6f:04:59:ab:5d:63:cb:cd:59:b0:38:
         62:ad:60:0a:3d:07:c3:a0:7d:b7:4f:0b:00:d4:41:5c:e9:e6:
         bd:f1:8c:2e:ea:dc:f4:fd:18:22:60:ca:26:02:ae:fb:c3:cc:
         26:49:08:38:53:9a:e5:b7:d1:f1:1d:1f:63:e0:ee:92:e2:11:
         1f:8a:15:0f:69:7f:d0:f9:b8:e7:0f:f2:40:63:91:b0:36:67:
         46:53:c2:f0:41:5d:3d:8e:d2:75:14:f5:56:2e:63:5c:13:82:
         81:89:26:37:44:cb:b3:54:6e:92:15:26:f9:24:c9:f0:d4:bf:
         b9:78:d6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----