Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139342e3134372e35392e302f32342d3234203d3e2033323537.roa
File:                     3139342e3134372e35392e302f32342d3234203d3e2033323537.roa (raw, json)
Hash identifier:          6xogH7dZHQoalmffOa6r++AP99dlvJHWH/4skN3R25o=
Subject key identifier:   50:B5:86:1C:70:DE:3D:88:66:8A:68:3C:7D:A3:97:2D:4E:C7:FA:FA
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       408BD679C783A568000DF9CBA1523C539F70E274
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e3134372e35392e302f32342d3234203d3e2033323537.roa
Signing time:             Sat 22 Oct 2022 04:33:37 +0000
ROA not before:           Sat 22 Oct 2022 04:28:37 +0000
ROA not after:            Sat 21 Oct 2023 04:33:37 +0000
asID:                     3257
IP address blocks:        194.147.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:8b:d6:79:c7:83:a5:68:00:0d:f9:cb:a1:52:3c:53:9f:70:e2:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:37 2022 GMT
            Not After : Oct 21 04:33:37 2023 GMT
        Subject: CN=50B5861C70DE3D88668A683C7DA3972D4EC7FAFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0d:4e:35:65:2d:ce:93:c2:26:a1:81:61:ab:
                    93:31:c1:bb:aa:f3:0c:29:f6:a6:66:89:7a:db:a2:
                    a3:66:2f:b1:26:08:de:27:60:1b:43:12:7c:95:9e:
                    de:97:f2:57:1d:c9:21:70:49:4b:a8:c9:79:4e:55:
                    1f:e1:bc:47:68:df:87:7e:8d:d1:07:0d:91:ef:ad:
                    ac:34:93:49:ee:59:2c:30:f7:b9:e2:74:42:50:11:
                    38:14:68:f7:aa:6b:f0:c0:b9:24:a8:39:29:e6:b3:
                    71:2a:b0:c2:fd:0b:c8:03:ef:73:11:dd:25:50:1b:
                    4b:dc:b4:48:af:c3:08:89:7a:e4:72:58:26:d5:1c:
                    d0:d1:93:a7:47:02:58:0c:ba:94:d4:d0:c2:fe:1a:
                    96:32:8a:e1:83:40:4d:3b:a2:ae:b0:33:9d:71:23:
                    ec:f5:9c:00:6e:34:3a:2b:c3:fa:2e:cb:b7:f7:eb:
                    f5:17:ad:b5:63:6d:78:f3:fc:4d:bc:ba:a4:19:d7:
                    a8:2b:e8:e4:80:1a:e5:0a:47:6c:85:b2:f5:0e:19:
                    83:ef:e1:c6:aa:86:03:20:d9:7a:fb:58:14:16:96:
                    15:6a:09:59:c2:48:ac:7e:d6:fe:4c:d3:f8:00:85:
                    85:26:d0:7b:09:93:9d:60:8f:cb:0d:4b:2e:7c:30:
                    ec:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B5:86:1C:70:DE:3D:88:66:8A:68:3C:7D:A3:97:2D:4E:C7:FA:FA
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e3134372e35392e302f32342d3234203d3e2033323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.147.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:95:e3:82:22:dd:dc:bb:ff:12:d0:9d:37:15:45:2b:3a:a5:
         d8:83:c3:62:1b:9f:27:2b:07:27:33:cd:fa:d1:e2:0a:bc:01:
         29:2f:dc:72:be:ca:de:6f:aa:15:59:26:2f:43:a0:27:26:f5:
         0f:3e:2b:53:91:1b:f9:14:ef:f1:47:2a:0e:91:d8:d2:68:f0:
         f0:14:34:c2:7c:28:5e:a8:d0:c3:76:86:da:9c:bd:b9:a0:8d:
         96:0c:06:d8:e9:c1:f7:a5:54:77:46:2e:6a:bd:eb:65:6e:be:
         ce:5d:da:ac:40:0b:2b:99:71:1b:0c:cb:54:f0:74:d8:d2:64:
         01:44:ef:5d:ca:b3:01:63:e6:16:fd:3a:2a:f8:c7:66:6e:09:
         52:62:23:07:d2:01:fd:1d:46:20:a4:4a:d8:dd:04:e7:46:b4:
         f5:06:67:b7:13:73:42:1f:8d:f1:3c:07:3a:f8:79:f6:ef:f2:
         04:a8:54:1b:1d:dd:1c:3e:5d:21:ac:52:2c:df:5b:de:f3:6f:
         be:07:23:94:5f:0c:32:0e:2d:ba:4a:2f:bb:4c:54:97:b2:7c:
         10:5f:64:a3:e9:a7:1b:c3:b5:e6:ed:06:64:4d:96:d9:99:da:
         b5:32:6a:f6:ac:2d:79:86:68:4d:da:2e:a8:33:f2:4c:3f:e5:
         ba:ac:5f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----