Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/180/34352e31342e39312e302f32342d3234203d3e203434363835.roa
File:                     34352e31342e39312e302f32342d3234203d3e203434363835.roa (raw, json)
Hash identifier:          zNdDj9j/tEvPRV27MdHUFK9IbdkdWTj52oFcxl8xreo=
Subject key identifier:   73:56:AB:42:51:04:0B:9A:88:63:96:9E:9B:72:9E:E9:4A:DD:11:77
Certificate issuer:       /CN=dfe89bf7daa0f8aa7d022df984e6ea37e6f60a3d
Certificate serial:       6BD089D910DE14CD86CDF80EF7434A40801AA319
Authority key identifier: DF:E8:9B:F7:DA:A0:F8:AA:7D:02:2D:F9:84:E6:EA:37:E6:F6:0A:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3-ib99qg-Kp9Ai35hObqN-b2Cj0.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/180/34352e31342e39312e302f32342d3234203d3e203434363835.roa
Signing time:             Sat 22 Oct 2022 04:33:47 +0000
ROA not before:           Sat 22 Oct 2022 04:28:47 +0000
ROA not after:            Sat 21 Oct 2023 04:33:47 +0000
asID:                     44685
IP address blocks:        45.14.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:d0:89:d9:10:de:14:cd:86:cd:f8:0e:f7:43:4a:40:80:1a:a3:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe89bf7daa0f8aa7d022df984e6ea37e6f60a3d
        Validity
            Not Before: Oct 22 04:28:47 2022 GMT
            Not After : Oct 21 04:33:47 2023 GMT
        Subject: CN=7356AB4251040B9A8863969E9B729EE94ADD1177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:03:a1:71:58:7d:a9:4b:f8:d5:4f:99:ca:91:
                    d6:71:48:5e:05:2c:c9:33:62:1e:0c:d5:4a:86:c6:
                    cb:c5:41:9b:68:2a:f6:d7:31:88:7e:de:8b:dc:a6:
                    1e:27:0d:55:72:da:6f:96:d1:aa:0b:16:53:8e:6a:
                    a5:bb:7a:1d:c9:d6:2a:e7:34:07:83:bf:82:17:da:
                    09:7e:77:c7:93:8c:86:3a:4e:ae:59:3b:7a:a9:e2:
                    4e:cb:6c:91:c7:25:d2:f4:40:83:62:fe:51:21:1b:
                    e9:e6:a8:88:5a:cd:34:4a:e7:c6:e0:90:57:f5:b3:
                    56:65:7c:bf:bd:25:02:68:76:7a:60:79:56:18:97:
                    87:54:8f:6e:89:c6:b4:12:26:22:50:1a:79:2c:a5:
                    27:b1:7e:c9:ba:67:f7:ec:dc:58:6d:36:cf:d5:8a:
                    35:3d:9e:62:c8:97:1c:f4:33:9c:59:8c:a8:98:35:
                    c9:c8:bf:ff:2a:7a:e9:1a:20:e1:1f:4a:7e:8b:ff:
                    d1:8d:80:f0:59:35:d4:05:d4:5d:df:c4:66:8b:8a:
                    79:f7:0d:61:18:3d:71:86:c8:80:45:b4:46:45:d9:
                    e8:00:f7:3a:45:1b:4b:3d:93:17:4d:86:15:db:e8:
                    97:31:04:f5:e6:b0:39:d2:38:6c:e5:a2:b8:34:1b:
                    38:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:56:AB:42:51:04:0B:9A:88:63:96:9E:9B:72:9E:E9:4A:DD:11:77
            X509v3 Authority Key Identifier:
                keyid:DF:E8:9B:F7:DA:A0:F8:AA:7D:02:2D:F9:84:E6:EA:37:E6:F6:0A:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/180/DFE89BF7DAA0F8AA7D022DF984E6EA37E6F60A3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-ib99qg-Kp9Ai35hObqN-b2Cj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/180/34352e31342e39312e302f32342d3234203d3e203434363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.14.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:74:37:31:2e:99:b4:a0:bd:d2:f7:e9:11:d2:7b:11:8b:00:
         a9:3c:57:d5:b1:99:a0:61:42:17:83:27:dc:a0:d0:1c:ab:f2:
         ea:04:84:be:bb:2f:c8:eb:3e:9d:44:1f:2c:ab:e7:e9:62:85:
         14:2f:99:0d:f3:e4:48:ce:84:3a:b1:97:a4:7b:83:a2:98:d0:
         40:70:d5:8c:1e:1a:69:37:91:fd:f5:60:50:a3:f6:c9:47:db:
         7f:cb:b2:83:b5:d3:a8:19:e0:7e:f4:23:4d:4d:06:9f:49:b6:
         56:fe:70:d3:4a:1d:53:54:da:95:2c:80:6d:07:9a:c3:35:48:
         2c:6f:a7:27:d7:5c:89:f4:eb:90:4d:4c:07:5b:5f:43:73:39:
         0a:f1:0a:80:ef:66:f4:cf:16:bf:d9:3f:26:79:05:ba:94:ba:
         37:98:32:78:a7:5e:99:ba:6f:67:47:71:ce:10:63:21:fd:c2:
         53:15:0c:59:9c:fa:72:75:31:f4:b6:f0:41:44:d1:9c:22:4b:
         61:f3:e4:d8:dd:18:f4:9e:33:18:2b:16:77:ad:0d:a1:44:b3:
         8a:99:d3:22:68:c5:36:a9:44:7d:96:b4:e1:eb:aa:d0:23:18:
         9a:1c:49:cc:29:77:16:d6:55:be:bf:46:6e:2a:2e:68:d1:38:
         6b:44:b2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----