Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/180/352e3138312e3231362e302f32332d3234203d3e203437353833.roa
File:                     352e3138312e3231362e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier:          8pdsduamlUp9DO3rVB1sUKf0+65DrWlaGI8kd3XpGxM=
Subject key identifier:   30:EE:1B:07:0A:91:F5:9D:19:0D:6C:1C:97:08:94:ED:AB:81:49:D2
Certificate issuer:       /CN=dfe89bf7daa0f8aa7d022df984e6ea37e6f60a3d
Certificate serial:       0C002A751A86D1B1800B386CE15046F9C40A2E97
Authority key identifier: DF:E8:9B:F7:DA:A0:F8:AA:7D:02:2D:F9:84:E6:EA:37:E6:F6:0A:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3-ib99qg-Kp9Ai35hObqN-b2Cj0.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/180/352e3138312e3231362e302f32332d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:33:49 +0000
ROA not before:           Sat 22 Oct 2022 04:28:49 +0000
ROA not after:            Sat 21 Oct 2023 04:33:49 +0000
asID:                     47583
IP address blocks:        5.181.216.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:00:2a:75:1a:86:d1:b1:80:0b:38:6c:e1:50:46:f9:c4:0a:2e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe89bf7daa0f8aa7d022df984e6ea37e6f60a3d
        Validity
            Not Before: Oct 22 04:28:49 2022 GMT
            Not After : Oct 21 04:33:49 2023 GMT
        Subject: CN=30EE1B070A91F59D190D6C1C970894EDAB8149D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:1c:42:f1:42:f3:20:5b:5f:15:61:3a:a2:f5:
                    d3:f0:f3:32:ec:b7:62:13:54:ef:ab:88:4c:b8:2b:
                    37:4a:15:fa:81:22:13:01:1f:be:93:1d:5d:00:a9:
                    f0:6a:95:9f:65:16:31:66:87:25:88:35:51:82:43:
                    53:0c:fe:4a:26:19:1d:93:47:cb:9d:52:26:4d:35:
                    be:e1:aa:56:a8:7c:c1:76:37:d6:78:e1:e2:9c:ae:
                    3f:c6:44:61:7a:88:57:f7:1c:75:27:b3:bd:d7:e1:
                    b6:d2:66:45:da:6e:0f:6d:a5:60:0e:ae:1d:88:f7:
                    c7:33:4d:04:94:52:a3:0f:b9:03:d7:91:7b:65:84:
                    d9:a3:8e:db:ee:0a:54:dc:c8:96:60:a2:6c:28:e2:
                    80:72:38:c1:b0:01:69:32:5d:ac:63:ed:a3:01:91:
                    86:b3:66:1e:55:64:08:b5:52:f8:78:c0:63:8f:02:
                    b6:0a:e4:73:f3:96:e4:57:a2:e2:73:38:11:c6:ff:
                    48:93:ef:61:93:ac:b3:cc:1e:40:80:f9:24:e3:0b:
                    18:eb:6a:a0:d1:2d:b0:c2:9b:f8:55:bc:13:9a:c9:
                    2c:96:45:58:43:de:ce:8d:05:c6:21:87:31:72:37:
                    e9:bc:a9:6d:ea:87:f8:c1:9b:76:95:66:d9:54:09:
                    46:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:EE:1B:07:0A:91:F5:9D:19:0D:6C:1C:97:08:94:ED:AB:81:49:D2
            X509v3 Authority Key Identifier:
                keyid:DF:E8:9B:F7:DA:A0:F8:AA:7D:02:2D:F9:84:E6:EA:37:E6:F6:0A:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/180/DFE89BF7DAA0F8AA7D022DF984E6EA37E6F60A3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-ib99qg-Kp9Ai35hObqN-b2Cj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/180/352e3138312e3231362e302f32332d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:21:f7:e5:7a:4d:e0:57:53:10:92:44:5d:d8:63:42:f6:26:
         be:74:46:1a:b2:b6:6e:cb:54:a4:b2:06:96:28:2a:bc:f8:f3:
         8c:a9:16:7c:95:19:53:ff:d4:2d:94:f5:b4:73:05:2e:de:90:
         cc:de:3e:45:1b:4e:83:8f:90:2f:bb:95:ae:55:f2:88:63:d8:
         d3:1d:ce:d3:cc:24:39:d4:ed:c6:9d:e4:0a:91:4f:58:65:ca:
         e4:ca:b4:56:0f:36:56:b6:42:1d:62:b8:46:dd:e7:ca:d6:33:
         a8:45:ca:09:c7:08:12:7a:80:d1:32:c3:4d:ae:56:70:a1:d5:
         a2:92:29:0f:b1:5b:02:84:d8:61:5d:44:a4:f6:cf:37:df:5f:
         ef:12:33:b4:57:8e:b3:dd:f3:12:95:0c:e8:14:20:fa:b7:8d:
         37:0d:cc:84:55:69:ab:4b:19:ae:4e:a9:07:af:25:a9:d8:c7:
         97:78:8d:ed:f5:e7:d2:c3:59:ca:5c:5b:a5:1c:66:7a:75:e1:
         26:36:ff:d9:6d:eb:c4:ae:b4:a1:10:04:78:6c:d8:e3:0b:40:
         c9:20:1d:70:14:ee:69:b9:bc:a5:97:56:29:a9:09:8e:4f:38:
         78:27:16:1e:8e:60:be:73:9b:97:b1:2a:9b:08:b2:60:26:db:
         00:03:ff:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----