Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/180/352e3138312e3231382e302f32342d3234203d3e203437353833.roa
File:                     352e3138312e3231382e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier:          kJjRPRep4opopE9Nde/5Q6b/2ozgkKLvYhOpZyKA320=
Subject key identifier:   6B:EE:ED:7F:56:84:60:B3:13:93:6E:DD:A4:EB:0F:5A:75:7D:95:27
Certificate issuer:       /CN=dfe89bf7daa0f8aa7d022df984e6ea37e6f60a3d
Certificate serial:       02FF5C195AAA0F634923DC59A163F02167CED128
Authority key identifier: DF:E8:9B:F7:DA:A0:F8:AA:7D:02:2D:F9:84:E6:EA:37:E6:F6:0A:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3-ib99qg-Kp9Ai35hObqN-b2Cj0.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/180/352e3138312e3231382e302f32342d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:33:49 +0000
ROA not before:           Sat 22 Oct 2022 04:28:49 +0000
ROA not after:            Sat 21 Oct 2023 04:33:49 +0000
asID:                     47583
IP address blocks:        5.181.218.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ff:5c:19:5a:aa:0f:63:49:23:dc:59:a1:63:f0:21:67:ce:d1:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe89bf7daa0f8aa7d022df984e6ea37e6f60a3d
        Validity
            Not Before: Oct 22 04:28:49 2022 GMT
            Not After : Oct 21 04:33:49 2023 GMT
        Subject: CN=6BEEED7F568460B313936EDDA4EB0F5A757D9527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b1:49:8a:de:ef:0d:ae:23:7e:dd:64:ee:1c:
                    16:f1:49:f1:1b:f0:37:03:d6:ff:7e:18:e6:39:03:
                    75:8a:d3:ef:47:f6:34:b3:fd:63:77:65:3a:be:12:
                    cf:b7:16:de:4d:cd:58:f6:8f:2c:00:6a:2f:00:ea:
                    b9:be:30:79:99:b4:1f:58:b7:99:0e:be:a6:c3:66:
                    e8:e1:b8:f7:f8:e1:5a:3a:1e:d6:a5:68:7d:79:eb:
                    12:a8:85:78:15:5b:78:46:d4:23:6f:f4:7c:4a:61:
                    cf:8c:fb:86:4a:74:51:d1:b7:a0:b1:58:4b:0a:f7:
                    22:af:2b:c3:61:64:89:29:11:38:5b:f3:4f:c3:d8:
                    ba:ff:9e:67:67:df:02:f4:54:a6:83:ca:3c:fd:be:
                    8e:64:77:10:b4:34:5d:87:22:97:18:b6:ab:fb:9e:
                    87:e7:84:5b:e0:19:a4:b6:f0:4d:8c:2d:3e:7c:bd:
                    e2:6c:7f:8a:83:d4:b6:c6:a8:79:82:1e:73:27:e8:
                    8d:4c:b8:4d:40:81:63:05:7d:60:bf:30:0d:23:2a:
                    bf:bc:e8:dd:68:da:f2:58:86:e9:8a:45:d0:1e:b5:
                    37:92:3b:d2:a3:fb:34:43:b8:81:3d:62:56:3a:7f:
                    1c:66:b9:70:55:e0:de:67:d2:44:1a:6c:7f:32:58:
                    06:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:EE:ED:7F:56:84:60:B3:13:93:6E:DD:A4:EB:0F:5A:75:7D:95:27
            X509v3 Authority Key Identifier:
                keyid:DF:E8:9B:F7:DA:A0:F8:AA:7D:02:2D:F9:84:E6:EA:37:E6:F6:0A:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/180/DFE89BF7DAA0F8AA7D022DF984E6EA37E6F60A3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-ib99qg-Kp9Ai35hObqN-b2Cj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/180/352e3138312e3231382e302f32342d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:fb:f1:24:bd:10:dd:0f:f7:6a:e8:e5:55:b6:29:52:f6:6a:
         ff:d7:f7:22:62:a3:c1:d1:a2:14:b5:0d:0c:7e:b0:c5:fe:b3:
         18:5f:38:9e:e5:9d:f5:80:62:ee:4c:7c:41:2f:25:fc:28:d2:
         6f:fd:fe:26:5e:7f:e5:14:bf:18:89:92:c6:81:11:46:fa:08:
         62:c7:d1:87:26:1e:f0:f6:9c:c2:84:92:4f:fa:f7:7d:a4:78:
         eb:6c:dc:10:4a:87:7e:95:4f:a5:a2:fb:24:0a:0b:34:18:4d:
         2e:94:2d:12:a0:86:df:c6:19:a3:cd:dc:82:eb:14:d8:22:7c:
         dc:99:a0:20:b6:aa:e8:8e:f4:a6:bc:09:89:ce:4e:a3:78:96:
         85:b7:f4:57:b5:ad:3b:7f:4b:65:5f:53:fa:f1:61:9b:59:8c:
         68:09:ac:c4:ab:86:c7:f9:34:d7:b5:ba:09:67:34:74:0f:7a:
         e1:e9:df:66:37:32:bc:f1:f2:9d:ec:fa:ac:05:c0:88:7e:f1:
         cf:8e:d8:7d:78:dc:7e:4e:0a:bc:b1:76:bd:47:cf:ba:ac:7a:
         5a:07:4d:ff:ca:52:59:64:f1:d9:e7:05:2f:83:7c:f2:9d:b2:
         3a:47:4b:f6:77:90:b1:25:7a:53:e5:fd:47:a5:16:34:c9:e3:
         07:d3:86:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----