Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e382e3134382e302f32332d3233203d3e203232373733.roa
File:                     34352e382e3134382e302f32332d3233203d3e203232373733.roa (raw, json)
Hash identifier:          FTM3H37LCJ4m3wtuuS5pVKMmF7Cn2xkcFGtdUH9KsAE=
Subject key identifier:   C6:24:6A:2A:3C:CF:9F:5B:66:07:1C:6E:B6:E5:7E:ED:79:19:9F:1D
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       5E61361A05DD3CC3F3BCE2C12DABC2639BDA14F9
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e382e3134382e302f32332d3233203d3e203232373733.roa
Signing time:             Tue 28 Jun 2022 04:41:10 +0000
ROA not before:           Tue 28 Jun 2022 04:36:10 +0000
ROA not after:            Tue 27 Jun 2023 04:41:10 +0000
asID:                     22773
IP address blocks:        45.8.148.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:61:36:1a:05:dd:3c:c3:f3:bc:e2:c1:2d:ab:c2:63:9b:da:14:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Jun 28 04:36:10 2022 GMT
            Not After : Jun 27 04:41:10 2023 GMT
        Subject: CN=C6246A2A3CCF9F5B66071C6EB6E57EED79199F1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:88:80:ee:b9:ac:e9:e4:83:57:31:6c:68:0c:
                    58:54:d5:f7:c8:29:e9:80:65:2c:cd:e7:47:5d:70:
                    c9:23:69:95:bd:c4:07:01:e3:df:60:ec:5c:39:a5:
                    f8:d8:29:b9:db:a5:24:75:ce:c9:c1:2c:52:4f:0d:
                    f0:c2:63:ca:da:8a:5e:1d:0a:e5:67:a9:9c:c1:cc:
                    73:77:18:07:3a:c4:fb:fc:1c:3a:89:ab:9d:5e:e8:
                    39:b3:1c:40:79:a1:2d:07:e3:3c:77:c6:95:2e:e1:
                    1b:f3:58:e7:8b:2d:e0:8c:36:0f:4b:ad:0a:18:20:
                    61:ad:70:e5:53:01:67:bf:89:a3:3f:3c:0b:9a:94:
                    49:4b:e1:da:59:89:94:ec:94:6b:ad:5f:fb:97:d4:
                    31:fe:7c:ce:54:88:42:3b:a4:3c:f8:54:3d:0f:78:
                    51:45:62:40:00:a4:8a:5c:46:87:fa:ec:f2:77:d2:
                    78:b6:fe:76:eb:68:83:69:6a:2f:84:cd:18:fd:c3:
                    12:66:35:34:bc:c9:9e:b8:23:95:ab:35:bf:98:64:
                    f9:1d:29:39:3f:23:06:10:30:19:17:ab:d1:83:35:
                    e9:9d:52:c6:43:8a:7d:5d:b6:c9:60:bb:ee:3c:a9:
                    45:62:e3:c0:e8:8c:24:a2:d6:89:dc:e4:16:a4:fa:
                    04:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:24:6A:2A:3C:CF:9F:5B:66:07:1C:6E:B6:E5:7E:ED:79:19:9F:1D
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e382e3134382e302f32332d3233203d3e203232373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:12:8a:88:d8:65:d6:64:ab:f4:65:26:91:ca:0d:30:15:9b:
         81:5e:6f:d6:25:d9:19:0d:a7:75:2a:d2:02:57:01:7d:90:90:
         eb:d2:4b:40:3d:cd:9b:f3:ea:99:a4:04:13:87:86:42:81:8f:
         07:f4:9d:ef:cc:53:68:58:97:a8:86:47:53:4c:53:05:ed:b2:
         af:54:80:a7:a4:51:df:84:6c:0b:c0:33:d9:cc:ff:fc:5a:0a:
         8b:32:d9:7f:53:fa:51:68:f3:1a:8e:26:75:18:80:02:15:df:
         a0:6c:d1:46:c4:37:e9:9e:57:54:ac:49:9c:29:86:9b:42:5f:
         4d:58:e2:99:67:19:9a:22:81:5d:8a:23:9f:eb:df:c4:7b:0b:
         e0:26:59:d2:a7:25:8f:97:9b:5e:21:61:40:4c:b7:71:00:d3:
         58:fc:5d:a3:11:96:04:ea:76:f9:e3:d2:7c:81:49:e3:50:22:
         05:cb:22:c2:78:80:fd:02:88:7f:68:4d:43:7a:9d:79:a8:54:
         82:12:e4:7e:8d:c3:d6:cb:9b:65:ed:39:a5:d5:28:2e:74:22:
         e1:84:3d:8f:b2:07:dc:7a:04:c6:d4:35:8c:b3:6c:6e:e9:8b:
         da:13:f6:cf:c9:9e:c8:2a:d5:b7:7f:24:68:29:ec:17:dd:41:
         25:7d:b7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----