Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e3133322e3135392e302f32342d3234203d3e20323037313839.roa
File:                     34352e3133322e3135392e302f32342d3234203d3e20323037313839.roa (raw, json)
Hash identifier:          8jeNaJDk/3Au4KNuNLU3DVJeLoUya0PuXkaT1NmAJi4=
Subject key identifier:   AE:18:93:71:24:A4:B2:21:8A:DC:27:5B:F7:04:52:02:1A:59:42:4E
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       3D9820171D6A8BA46DE44D7F6ED972EC286FCD11
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3133322e3135392e302f32342d3234203d3e20323037313839.roa
Signing time:             Sat 22 Oct 2022 04:33:29 +0000
ROA not before:           Sat 22 Oct 2022 04:28:29 +0000
ROA not after:            Sat 21 Oct 2023 04:33:29 +0000
asID:                     207189
IP address blocks:        45.132.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:98:20:17:1d:6a:8b:a4:6d:e4:4d:7f:6e:d9:72:ec:28:6f:cd:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:29 2022 GMT
            Not After : Oct 21 04:33:29 2023 GMT
        Subject: CN=AE18937124A4B2218ADC275BF70452021A59424E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ff:fd:44:f1:b6:06:5b:a9:26:02:66:12:b7:
                    1c:2d:29:50:a6:83:2e:a4:d2:5a:da:d6:cc:ea:dd:
                    80:0c:52:29:fe:11:4e:1d:81:5a:46:4c:a5:54:ac:
                    87:a8:f0:39:bd:6a:48:6f:2d:88:bd:47:9a:b3:f6:
                    96:d4:80:ad:13:bc:53:70:1d:98:f5:2b:b3:49:01:
                    c3:2c:f2:a9:62:3b:1e:64:5c:78:f3:91:35:0f:80:
                    3a:bc:6c:60:8f:74:1a:10:4a:87:4e:02:ee:35:fd:
                    a4:53:79:c3:a7:f9:dd:20:50:19:d2:74:c9:25:4f:
                    91:8e:94:de:cc:41:8e:e9:47:0e:ee:4b:b7:ed:24:
                    9f:64:df:13:2e:25:3b:ad:c5:dc:42:f7:71:e3:a7:
                    0e:0b:9a:51:5f:ef:20:99:17:32:4b:51:21:fb:3a:
                    d5:c7:4d:6d:7b:d8:c0:a9:4d:f9:dc:53:e4:36:78:
                    df:fe:0a:6b:f3:2b:69:f8:20:cd:8a:a3:74:4c:12:
                    13:ed:33:30:38:43:90:73:34:03:1b:48:5f:0a:8d:
                    42:38:f5:63:30:c9:18:df:79:5a:88:b6:29:1c:c5:
                    40:d4:b1:96:5c:39:29:95:01:a6:a2:a9:c0:77:c7:
                    bf:7d:49:ef:49:cf:9a:14:9c:21:e5:d0:1f:da:7e:
                    0f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:18:93:71:24:A4:B2:21:8A:DC:27:5B:F7:04:52:02:1A:59:42:4E
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3133322e3135392e302f32342d3234203d3e20323037313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:16:00:1c:d1:74:23:4d:a1:5f:bd:c9:c9:39:ee:90:2d:e7:
         4e:b0:5e:af:d8:d8:d3:a4:82:32:07:e7:53:e5:28:83:da:d1:
         76:6c:8d:43:8e:d1:ca:f3:e0:f3:f4:23:c6:2e:01:2c:22:da:
         3d:95:57:b6:1e:d9:d4:ff:33:40:93:a7:de:ee:b5:f6:4a:cf:
         cc:68:ed:0f:d0:b3:a2:bf:0f:6e:72:56:10:84:a6:6c:e5:ef:
         09:22:34:d0:39:64:03:cb:b2:04:70:f9:c0:70:42:a5:23:a1:
         e8:56:cc:7b:20:87:a2:5f:d1:49:b3:86:68:db:59:f7:2f:b9:
         f1:83:e5:6d:bb:7e:99:ec:0a:3b:56:4d:78:cb:2a:a6:e0:34:
         47:f4:18:a2:6f:f2:a2:62:c1:e8:50:0e:73:f9:7f:bd:5c:0f:
         d7:54:73:6c:81:ed:7f:aa:ec:ec:b2:77:b5:15:2f:e6:36:ba:
         ba:4f:b3:68:20:99:91:12:a1:95:d0:95:aa:ea:9c:54:e1:b7:
         f3:c5:7d:18:c5:39:b9:0e:26:b0:17:5c:7c:56:44:56:1e:bc:
         68:6d:be:c0:9e:0f:8a:86:7e:70:54:f7:2e:7e:98:d9:56:15:
         4f:fe:af:30:fe:cd:64:75:0a:b9:bd:36:89:67:23:97:9a:d2:
         19:f7:02:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----