Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e3133342e3232352e302f32342d3234203d3e20323038303436.roa
File:                     34352e3133342e3232352e302f32342d3234203d3e20323038303436.roa (raw, json)
Hash identifier:          z2cGGcHiXKf6cVGnF5gVxXDDbiKCapeFQ70B7A2DyG4=
Subject key identifier:   E7:03:5E:7F:F8:58:84:9E:AE:E9:26:B7:E5:D8:1B:E9:19:64:F6:E6
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       36F4A0CDBECBA340A3F9BC01010E1EF12210FD76
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3133342e3232352e302f32342d3234203d3e20323038303436.roa
Signing time:             Sat 22 Oct 2022 04:33:25 +0000
ROA not before:           Sat 22 Oct 2022 04:28:25 +0000
ROA not after:            Sat 21 Oct 2023 04:33:25 +0000
asID:                     208046
IP address blocks:        45.134.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f4:a0:cd:be:cb:a3:40:a3:f9:bc:01:01:0e:1e:f1:22:10:fd:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:25 2022 GMT
            Not After : Oct 21 04:33:25 2023 GMT
        Subject: CN=E7035E7FF858849EAEE926B7E5D81BE91964F6E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d8:aa:e5:c1:21:54:e3:af:c1:19:e8:2e:16:
                    e3:c6:b8:96:45:4b:ba:4d:56:57:71:25:b4:c7:ac:
                    02:ba:0f:93:ed:ff:24:34:c9:e8:f0:14:49:41:89:
                    ea:78:81:57:68:95:a7:f3:0f:d1:d9:0c:30:c1:0c:
                    fb:f3:68:73:82:03:04:7e:c6:3a:da:62:48:b4:9c:
                    92:e0:39:cc:5c:b9:d9:69:76:4e:2a:2e:7c:c2:9e:
                    29:dc:26:e7:94:a2:34:a6:0c:4f:23:70:75:4f:54:
                    65:6a:f3:59:e2:26:ba:b0:c4:32:de:2c:c5:e4:b6:
                    36:bb:fa:2f:d8:3b:cd:2f:cc:49:8b:9f:cc:e8:7b:
                    4c:01:ab:2f:3c:a9:04:44:df:1b:59:d3:87:ad:c4:
                    e9:d0:b9:42:68:49:bb:6c:73:2b:f1:c6:03:8b:f7:
                    b4:4f:77:61:33:00:21:c8:9a:58:a9:8c:1b:46:d6:
                    42:4d:02:3c:a4:28:e1:8d:11:58:66:a9:7d:41:72:
                    16:fe:a6:ee:6d:af:ca:69:48:d6:59:5f:c5:3b:74:
                    d6:70:dd:9b:94:d5:8c:f5:ee:15:67:df:c1:b6:5b:
                    cd:c4:b0:4c:fb:4b:e8:9b:b1:77:a0:3a:4e:30:de:
                    2c:cd:b2:06:36:f7:82:e9:8e:fe:e0:60:a4:8e:33:
                    a5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:03:5E:7F:F8:58:84:9E:AE:E9:26:B7:E5:D8:1B:E9:19:64:F6:E6
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3133342e3232352e302f32342d3234203d3e20323038303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.134.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:9c:15:de:16:43:ec:05:25:09:1d:8c:87:54:00:28:c0:06:
         d4:08:2a:d6:d8:4f:ca:20:43:0b:52:5c:14:c7:40:af:58:79:
         6b:21:94:e9:1c:e2:c9:4a:aa:4d:0d:46:f2:cf:57:04:7b:b3:
         a0:e3:a6:96:bd:b9:17:df:5a:e8:40:14:8d:01:fd:de:2c:66:
         3a:eb:b1:99:81:62:5e:fc:ec:ea:28:11:be:7a:d1:3c:27:d7:
         ed:85:48:68:b2:c3:fc:c1:57:91:04:d3:bb:b0:b9:88:ee:bd:
         21:ef:a6:f1:2e:86:5b:f9:c8:4c:53:d0:a5:74:89:04:c0:c8:
         b0:ad:df:ef:41:10:62:0b:99:1f:16:bc:77:49:56:51:85:80:
         55:50:67:e6:da:11:72:76:48:ef:c9:d5:01:64:b1:00:e7:cc:
         8a:0d:a3:3e:b3:7c:92:b1:ee:64:9a:4a:be:f3:af:ea:b2:81:
         ce:40:ac:92:09:5f:13:8e:c1:e7:b8:05:fa:5d:68:42:70:51:
         ef:f4:2e:9e:c4:f4:b7:c8:13:b8:d3:71:e2:0a:35:64:21:45:
         7e:31:37:58:88:cc:8b:53:28:1e:e7:cc:55:27:08:81:34:ae:
         c6:d1:a6:e4:1e:e7:44:ee:26:63:e5:0e:29:10:a1:46:e2:3b:
         3f:85:63:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----