Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/180/34352e39332e3130302e302f32322d3234203d3e203437353833.roa
File:                     34352e39332e3130302e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier:          CsCINeSckl9XD/QPFpFzHWGa6myMRoRrOfZld2L5DeE=
Subject key identifier:   49:81:25:75:95:35:72:C9:5D:27:6E:BC:AB:CF:BD:8E:E7:EC:81:86
Certificate issuer:       /CN=dfe89bf7daa0f8aa7d022df984e6ea37e6f60a3d
Certificate serial:       33357A921455F0ACEE4911DAD152468FCF42C1E7
Authority key identifier: DF:E8:9B:F7:DA:A0:F8:AA:7D:02:2D:F9:84:E6:EA:37:E6:F6:0A:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3-ib99qg-Kp9Ai35hObqN-b2Cj0.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/180/34352e39332e3130302e302f32322d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:33:50 +0000
ROA not before:           Sat 22 Oct 2022 04:28:50 +0000
ROA not after:            Sat 21 Oct 2023 04:33:50 +0000
asID:                     47583
IP address blocks:        45.93.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:35:7a:92:14:55:f0:ac:ee:49:11:da:d1:52:46:8f:cf:42:c1:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe89bf7daa0f8aa7d022df984e6ea37e6f60a3d
        Validity
            Not Before: Oct 22 04:28:50 2022 GMT
            Not After : Oct 21 04:33:50 2023 GMT
        Subject: CN=49812575953572C95D276EBCABCFBD8EE7EC8186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0e:f0:c5:9d:16:5f:0a:d9:f8:b4:e2:6d:c9:
                    74:04:6e:e9:86:a4:09:dd:ce:6d:51:85:5f:9e:37:
                    55:ee:be:2e:7b:8b:df:48:2a:0a:a5:59:47:e1:0d:
                    4f:50:50:27:87:40:57:ba:d9:ed:9f:14:69:25:0c:
                    7d:c0:1d:3d:65:73:ee:eb:c5:54:47:6c:c3:7c:65:
                    23:68:8b:4f:6c:bd:2e:43:64:18:3b:cd:e6:8a:32:
                    81:76:5e:13:c8:50:f3:4b:17:f8:bb:a2:de:14:c7:
                    a8:5a:e6:67:c5:5d:a5:7c:29:e7:0c:9c:1f:32:15:
                    97:d4:f6:9f:43:99:09:51:e0:b0:b4:36:cc:83:53:
                    70:b9:f2:ef:1e:cf:8b:70:15:48:ff:39:1f:2f:ff:
                    db:fa:85:1e:69:69:0b:1a:b6:bb:98:a4:23:d4:fc:
                    7d:bb:90:9d:e6:b3:d1:1a:fd:c3:dd:e2:bf:26:64:
                    b9:e6:67:23:34:93:96:ab:e3:b2:4c:27:d2:b4:a5:
                    82:c0:b8:8b:ed:c9:8d:3e:85:7a:bb:8b:7a:41:60:
                    b6:2f:a9:ae:28:79:f8:1f:d3:33:bb:f0:c8:16:e3:
                    89:8c:c0:da:9d:64:1d:03:98:3d:74:d6:f2:06:f1:
                    d8:7e:29:ba:bb:45:6e:5d:ff:94:de:d3:b9:31:5b:
                    fb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:81:25:75:95:35:72:C9:5D:27:6E:BC:AB:CF:BD:8E:E7:EC:81:86
            X509v3 Authority Key Identifier:
                keyid:DF:E8:9B:F7:DA:A0:F8:AA:7D:02:2D:F9:84:E6:EA:37:E6:F6:0A:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/180/DFE89BF7DAA0F8AA7D022DF984E6EA37E6F60A3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-ib99qg-Kp9Ai35hObqN-b2Cj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/180/34352e39332e3130302e302f32322d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.93.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:b2:da:9e:69:c4:92:23:57:3b:c7:46:51:90:2f:39:70:72:
         b5:24:e4:db:6b:70:84:fe:23:1b:a5:d1:99:4c:73:c3:a9:21:
         ec:01:da:2b:54:17:98:d3:5d:07:d2:67:8f:fc:aa:eb:c3:1c:
         22:a4:e7:39:d0:f1:48:be:87:1a:73:c8:c9:60:56:a9:9f:1c:
         82:5e:47:a7:aa:a8:e1:3e:6d:3c:9e:12:3b:ca:91:fe:49:03:
         b9:8b:94:9a:ad:d5:05:40:f1:58:69:6b:b2:34:fd:22:61:11:
         df:33:40:de:a1:55:0f:4a:6b:eb:74:84:c1:fa:3a:6a:8f:33:
         de:b2:99:ed:2e:76:4e:5a:6a:65:b4:72:f7:cd:e9:d7:c9:af:
         9e:e3:96:3d:c8:8d:e0:a3:14:18:ea:a3:43:d6:29:db:52:b8:
         b7:8f:f0:d0:41:2f:0b:19:12:16:06:d8:77:f9:8a:6b:e4:0d:
         d4:7d:ad:d1:84:f4:de:5d:62:9e:3b:c0:0d:ba:ef:7d:5a:13:
         17:c5:8f:6d:6d:0f:6c:1b:0f:f3:43:95:6b:81:75:5a:ad:8d:
         23:bd:6a:37:25:ee:f8:d8:3e:b7:23:df:0a:80:eb:a2:55:1c:
         b1:9a:f2:5b:00:14:c6:be:f0:eb:7a:7f:50:30:80:23:7a:4d:
         74:51:78:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----