Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/180/34352e31342e39302e302f32332d3234203d3e203631333137.roa
File:                     34352e31342e39302e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          PslcnM8tIvz6NmGtv8WJP29K5vZT7V8lpGVU99HKnUI=
Subject key identifier:   C5:38:78:3B:AA:E0:7F:6B:8F:14:CB:14:91:B3:3E:77:8D:85:0E:CB
Certificate issuer:       /CN=dfe89bf7daa0f8aa7d022df984e6ea37e6f60a3d
Certificate serial:       3049E1114B1F2F8214C938292E3A9E1FE931112F
Authority key identifier: DF:E8:9B:F7:DA:A0:F8:AA:7D:02:2D:F9:84:E6:EA:37:E6:F6:0A:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3-ib99qg-Kp9Ai35hObqN-b2Cj0.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/180/34352e31342e39302e302f32332d3234203d3e203631333137.roa
Signing time:             Sat 22 Oct 2022 04:33:47 +0000
ROA not before:           Sat 22 Oct 2022 04:28:47 +0000
ROA not after:            Sat 21 Oct 2023 04:33:47 +0000
asID:                     61317
IP address blocks:        45.14.90.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:49:e1:11:4b:1f:2f:82:14:c9:38:29:2e:3a:9e:1f:e9:31:11:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe89bf7daa0f8aa7d022df984e6ea37e6f60a3d
        Validity
            Not Before: Oct 22 04:28:47 2022 GMT
            Not After : Oct 21 04:33:47 2023 GMT
        Subject: CN=C538783BAAE07F6B8F14CB1491B33E778D850ECB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:9a:2f:65:f0:23:e0:45:37:25:21:93:c5:50:
                    0d:4f:b8:b7:46:bb:ed:d4:b7:44:bf:4a:87:85:0f:
                    03:45:50:da:37:7b:2e:98:5b:08:8b:70:d1:68:32:
                    2a:66:7b:89:fa:40:96:c9:b8:03:74:e1:e2:47:ec:
                    8f:aa:d2:55:61:cf:b2:30:98:1c:2e:bf:83:a9:06:
                    3f:d6:70:67:c4:ea:e6:8d:5d:c3:ef:7e:22:39:8f:
                    5e:fe:cc:0c:a8:6a:99:6b:3d:8b:28:ce:88:6f:28:
                    c8:85:03:b3:58:6d:38:c6:2b:bf:79:d8:e6:f7:5c:
                    11:44:b4:4b:7e:5e:f3:4b:fd:8e:ed:c9:85:99:ac:
                    20:9e:be:06:94:00:30:60:2c:47:63:c5:20:73:61:
                    92:8b:b8:11:1e:2b:7e:fb:b0:75:50:96:ca:4b:33:
                    2e:66:58:c7:3a:39:bf:73:88:28:a7:de:89:81:cb:
                    74:1d:b4:55:13:6a:82:44:43:ba:2c:b2:7b:40:36:
                    81:dc:98:70:40:ef:7d:08:b3:de:b3:1b:9d:e8:62:
                    33:da:13:a6:1a:7f:20:cf:0e:e5:9a:00:f8:3a:20:
                    fe:5c:f4:d1:3b:3b:35:d6:f4:59:72:c1:49:6d:85:
                    68:63:78:55:cf:4c:ea:bb:8d:a4:0b:22:fc:e2:4a:
                    19:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:38:78:3B:AA:E0:7F:6B:8F:14:CB:14:91:B3:3E:77:8D:85:0E:CB
            X509v3 Authority Key Identifier:
                keyid:DF:E8:9B:F7:DA:A0:F8:AA:7D:02:2D:F9:84:E6:EA:37:E6:F6:0A:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/180/DFE89BF7DAA0F8AA7D022DF984E6EA37E6F60A3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-ib99qg-Kp9Ai35hObqN-b2Cj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/180/34352e31342e39302e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.14.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:d2:13:19:55:46:e7:bd:0e:54:1f:03:4b:23:48:51:27:79:
         f1:d1:fb:86:23:d7:f6:a3:8d:0d:97:27:44:55:f9:7f:be:be:
         90:51:68:15:85:3e:00:65:ca:63:41:b1:7e:66:f9:95:2b:5a:
         48:87:da:c0:1c:16:c3:c7:27:4c:06:48:c7:cf:ba:49:c0:97:
         c8:e2:90:06:09:54:ff:b8:e2:e4:60:71:08:cb:a7:f3:8a:f8:
         a5:5d:a3:66:63:dc:66:fe:b9:6b:07:bc:63:c0:f5:ca:6b:b6:
         4e:fb:86:b3:99:d2:72:b4:8b:44:f5:61:e7:76:82:1d:f8:26:
         fb:a1:2a:fb:4d:25:34:02:41:ed:4c:de:ed:80:b3:cd:ca:44:
         a5:d3:33:4f:d2:1f:a8:ae:21:bd:be:ef:38:6d:f4:0e:9b:94:
         3e:07:33:78:82:cc:d8:12:26:89:2c:75:00:39:de:84:af:6b:
         9d:ee:b6:1b:b5:bb:c0:08:23:74:f1:61:da:32:fa:73:57:21:
         a7:39:d1:b4:7f:70:b8:a3:fa:a6:f1:99:46:55:3e:db:94:c0:
         62:f6:be:e3:ba:3e:de:a4:65:00:ea:ce:b6:ff:51:34:b0:e1:
         cd:4e:a3:76:ff:fb:b6:74:99:ab:23:f7:4c:14:fa:0f:23:41:
         b4:40:11:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----