Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e382e3134382e302f32332d3234203d3e203631333137.roa
File:                     34352e382e3134382e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          Oqc2cNBtd+99Pqcxx0b9AH6WJEWRkV0zhQT0sSr6LfY=
Subject key identifier:   33:ED:81:1C:D3:61:D5:14:68:6F:2F:4C:78:5C:64:88:01:89:F3:0E
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       0D859798E5174EE748CD8FA0A3B1C88D8D717988
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e382e3134382e302f32332d3234203d3e203631333137.roa
Signing time:             Tue 28 Jun 2022 04:41:13 +0000
ROA not before:           Tue 28 Jun 2022 04:36:13 +0000
ROA not after:            Tue 27 Jun 2023 04:41:13 +0000
asID:                     61317
IP address blocks:        45.8.148.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:85:97:98:e5:17:4e:e7:48:cd:8f:a0:a3:b1:c8:8d:8d:71:79:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Jun 28 04:36:13 2022 GMT
            Not After : Jun 27 04:41:13 2023 GMT
        Subject: CN=33ED811CD361D514686F2F4C785C64880189F30E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c9:c8:43:f0:ae:f1:4d:ef:c8:96:fa:9d:61:
                    e0:c3:97:0d:11:7b:b6:78:57:89:ab:ae:01:a7:aa:
                    8f:de:d2:ff:ce:fc:a1:d0:27:4d:b8:f0:47:cf:d9:
                    ff:0a:f4:79:2c:42:3b:94:f9:a6:2b:f4:ca:4c:2d:
                    d5:e0:99:4e:7b:d8:5e:0f:2c:92:3c:44:50:29:ae:
                    95:68:0e:aa:db:8e:11:6b:f4:5d:80:89:2c:2f:21:
                    b5:b8:dc:48:d0:cb:ee:68:16:18:4f:a1:44:be:31:
                    c1:14:10:86:f1:3e:2b:ec:66:41:a6:db:2b:d1:c9:
                    2e:64:3a:95:79:d2:c9:85:16:7a:e4:3a:69:78:6a:
                    9d:01:0a:f2:3e:b9:11:24:d5:ae:43:69:cb:ff:82:
                    04:8a:1e:bd:3e:3e:67:b4:6c:da:50:8c:ad:56:c3:
                    74:ea:18:9a:ca:bd:91:12:9b:2a:d6:d4:c9:7a:0e:
                    be:c2:47:76:f2:c4:66:84:03:ae:2c:12:2f:8e:5a:
                    90:68:28:28:a3:9d:66:4f:74:c2:57:2a:4e:d0:29:
                    ff:c0:2e:ef:7a:e0:ff:70:0c:3d:a0:54:f4:c1:a0:
                    e4:eb:e1:4c:1e:fe:b9:84:fb:75:95:a7:18:00:cc:
                    10:65:46:66:4a:7c:41:21:04:18:53:8d:b5:5b:a6:
                    c0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:ED:81:1C:D3:61:D5:14:68:6F:2F:4C:78:5C:64:88:01:89:F3:0E
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e382e3134382e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:2f:77:70:89:c6:d1:af:7a:97:60:ad:c9:e6:11:3e:8a:04:
         d7:4d:97:45:65:96:2e:ee:c5:22:6c:28:56:9e:12:10:15:d9:
         37:cf:83:d5:f5:cd:3b:07:79:2b:b7:24:da:33:79:f3:3c:65:
         10:fc:74:ac:0b:7a:f4:55:37:dc:7d:5c:d6:11:dc:01:e4:48:
         ec:d1:bf:0a:98:fd:74:cc:ba:13:ec:e8:09:c7:b1:51:2e:21:
         44:27:dd:50:66:6b:e3:82:fa:30:d5:b0:ed:05:e4:b4:8b:7c:
         3d:8c:ed:bf:a3:bb:c7:86:38:8c:14:17:9f:1a:42:9b:db:8b:
         0b:5e:b0:e3:de:35:79:10:ce:35:04:da:52:5c:b5:2f:f6:a1:
         a6:16:b9:df:d1:2f:a9:1e:91:10:26:c9:d6:a8:15:d5:f8:b4:
         ea:56:23:1d:1f:b9:43:7c:05:23:6d:70:80:cc:9c:ec:c4:f4:
         a1:23:0a:d2:a8:6b:77:92:46:c8:9c:a4:03:26:e2:40:f3:52:
         d8:f8:ac:e7:04:8f:6a:b7:f9:85:cc:4e:2e:52:60:02:5f:06:
         07:66:46:48:bd:ff:33:1d:a6:9c:98:0f:8e:57:1c:c0:81:23:
         66:69:bb:eb:05:d4:07:65:95:4c:2e:87:cc:44:fb:78:a4:5c:
         72:ac:cd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----