Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e36372e3232302e302f32342d3332203d3e203531313637.roa
File:                     34352e36372e3232302e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          XD6mxSEGBy6D7dN73W3trzSz7Hbr1Q4pj3p0tw8ULkU=
Subject key identifier:   58:E8:38:EB:EB:65:E0:BF:60:6E:AD:6E:F5:B0:62:FC:C6:E9:BB:92
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       62EA4D7BB3E2E8830819EEBCB8A94E462AD97544
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e36372e3232302e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 04 Dec 2021 00:17:20 +0000
ROA not before:           Sat 04 Dec 2021 00:12:20 +0000
ROA not after:            Sat 03 Dec 2022 00:17:20 +0000
asID:                     51167
IP address blocks:        45.67.220.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ea:4d:7b:b3:e2:e8:83:08:19:ee:bc:b8:a9:4e:46:2a:d9:75:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Dec  4 00:12:20 2021 GMT
            Not After : Dec  3 00:17:20 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:23:b6:d4:9d:2c:a6:d5:9f:39:b6:c4:e9:45:
                    a1:91:fd:5e:9e:38:ec:6d:3c:57:5f:40:62:98:c2:
                    74:d2:ea:35:3b:5d:fa:4a:63:4d:a0:d6:d0:e2:71:
                    af:2e:01:9b:67:1a:ca:67:81:59:27:be:bd:db:89:
                    e0:cb:7d:7e:0b:54:dd:f5:8c:1b:6f:9b:47:33:3b:
                    44:b5:74:f2:88:47:97:ed:06:9d:f4:b6:12:ac:7f:
                    c3:00:de:50:33:66:e3:f9:09:7e:90:c3:5d:45:b5:
                    25:2d:ef:48:3f:06:89:71:0e:3a:f7:88:8d:1c:04:
                    ab:a2:22:2a:9a:cf:a9:0a:72:fb:a9:46:ee:b0:40:
                    b9:2a:70:cd:af:8f:43:8f:6c:b6:e4:6f:ca:7d:ae:
                    5d:28:bd:e1:0c:9c:3d:99:60:44:b3:0d:1c:5d:ac:
                    ea:68:ab:4f:3c:7e:e4:bd:d4:07:61:d1:65:b4:2f:
                    3c:e4:2b:e0:23:ab:a8:e5:b3:e8:f7:a5:a0:4f:79:
                    01:a6:d5:c9:83:2b:93:fc:d6:c2:15:13:32:36:6a:
                    e6:5e:70:30:8a:8b:bb:6e:68:11:90:38:5a:a5:40:
                    4e:17:3b:30:f3:b0:fd:75:77:47:9d:81:11:70:f4:
                    12:fd:b0:10:2b:e1:af:04:86:22:85:3d:de:30:5b:
                    a6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E8:38:EB:EB:65:E0:BF:60:6E:AD:6E:F5:B0:62:FC:C6:E9:BB:92
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e36372e3232302e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.67.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:7e:e5:5e:dc:70:9d:51:39:0a:e9:b3:58:b3:38:b5:a1:fd:
         75:1c:04:7a:99:35:6d:6e:44:4a:b2:0b:34:06:ee:e3:a0:f9:
         60:38:b7:7c:77:0f:54:d7:cf:3d:0c:00:4b:5c:40:d4:82:30:
         42:05:a3:c9:81:48:93:f3:78:9a:f6:07:52:f8:87:df:18:3c:
         31:47:bb:76:03:0a:ec:96:4c:7f:cf:aa:91:bb:ad:42:5c:2b:
         90:71:73:f6:74:25:14:e3:a5:90:1a:3f:ad:af:95:ed:1b:d2:
         25:15:a9:e9:fc:79:ca:01:59:de:df:c5:de:59:68:4f:88:61:
         e4:f7:9f:8b:73:18:f3:a1:7c:1f:47:cd:a2:9b:00:75:6c:b4:
         44:2b:17:35:4f:c6:08:1b:0c:a8:2b:05:37:c2:a1:8b:be:a5:
         63:7a:35:37:4e:95:35:cc:68:4d:ca:c4:ca:19:28:9f:0d:82:
         dc:9d:5f:7a:50:06:ba:8a:4e:bc:a9:b6:e8:28:0a:43:2d:04:
         bc:2f:96:97:99:c4:d7:e9:c4:e1:02:d8:8a:0c:f7:4c:19:ad:
         7f:ce:ff:b3:77:6d:90:a0:d1:9f:31:15:ae:a8:14:a2:53:39:
         0f:79:8e:af:ca:bc:f6:f6:b4:1b:f3:ba:c2:76:5d:a9:d5:7c:
         b6:8b:aa:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----