Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e38352e3134352e302f32342d3234203d3e203632323430.roa
File:                     34352e38352e3134352e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier:          a1mPP6In49e/qhgY05pgQ/gk4EPZZC22nRTdQbI6ADk=
Subject key identifier:   F6:29:B8:82:48:A3:59:9E:F5:7F:B0:6A:0B:6C:B2:80:8A:A7:64:12
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       21A1719E301A4CE05EE490CB1627FCE956276280
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e38352e3134352e302f32342d3234203d3e203632323430.roa
Signing time:             Sat 22 Oct 2022 04:33:30 +0000
ROA not before:           Sat 22 Oct 2022 04:28:30 +0000
ROA not after:            Sat 21 Oct 2023 04:33:30 +0000
asID:                     62240
IP address blocks:        45.85.145.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:a1:71:9e:30:1a:4c:e0:5e:e4:90:cb:16:27:fc:e9:56:27:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:30 2022 GMT
            Not After : Oct 21 04:33:30 2023 GMT
        Subject: CN=F629B88248A3599EF57FB06A0B6CB2808AA76412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6f:86:c3:db:8d:d1:6c:d9:68:23:59:0c:11:
                    b6:2e:4b:0b:b0:ee:ad:8d:7b:39:7f:11:7b:0d:63:
                    6a:df:26:03:f2:86:44:bb:75:4a:ce:b1:66:d2:a3:
                    96:f3:5f:3b:f4:bc:a9:dc:36:67:7d:e5:bb:2a:95:
                    1e:11:7f:35:a2:e1:2d:87:67:b3:24:80:3e:cb:d6:
                    2a:0d:09:dd:eb:f6:7b:79:11:e5:1b:b7:6f:9c:5b:
                    aa:4b:24:c5:e6:fa:ee:0c:c9:76:f6:4d:5e:5e:84:
                    14:ce:6b:82:3b:c4:f1:aa:91:0d:b7:7a:14:5a:95:
                    68:a1:c3:1a:30:38:79:df:98:3f:16:66:31:7a:39:
                    7c:e4:44:80:ef:e8:2e:30:70:ca:a3:48:72:37:a9:
                    c0:bb:f4:e7:7a:3f:b6:b9:8b:f0:9a:fc:67:8d:91:
                    db:b4:9d:b5:9f:46:f4:d0:6a:2e:27:ff:be:67:f7:
                    65:8a:a6:49:4e:09:53:7b:05:5b:08:eb:9e:92:a9:
                    81:67:c1:8d:89:d6:45:dd:dc:58:b6:39:65:79:bd:
                    b9:3e:5f:0a:71:99:db:07:d7:0b:02:6d:0e:96:26:
                    d2:b4:7e:a0:9e:b2:26:02:b5:b8:23:20:d7:47:83:
                    f3:d8:cc:93:66:b1:1e:a9:08:cb:5d:0f:4d:56:2c:
                    dd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:29:B8:82:48:A3:59:9E:F5:7F:B0:6A:0B:6C:B2:80:8A:A7:64:12
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e38352e3134352e302f32342d3234203d3e203632323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.85.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:60:80:97:10:85:c7:ea:e1:f5:fc:6d:e5:27:c9:1b:8c:ef:
         d3:42:f5:30:b7:a2:1a:18:a1:86:c2:a0:4d:68:89:e0:47:2f:
         e4:e0:99:77:a6:c1:61:4e:67:46:d8:43:64:f3:9d:61:1a:a4:
         ad:32:19:51:18:cf:7c:86:92:06:ae:50:5b:51:43:28:f0:d3:
         24:81:d1:fd:8d:fb:85:79:0d:f6:60:e4:68:89:fb:ca:e1:09:
         9e:29:2a:98:8d:31:18:98:a3:0a:bf:d7:ff:d3:6d:05:e6:48:
         07:7e:7f:7a:5f:61:d9:39:1a:66:1f:2a:a0:79:88:cd:fc:e5:
         5a:79:35:3a:96:22:4a:59:24:dc:02:7a:ac:e8:f8:5b:61:24:
         33:f5:32:60:3a:94:45:1e:56:bf:22:d5:b1:3a:ae:45:f0:07:
         14:36:58:f7:28:50:1d:8a:d5:c4:eb:37:3f:a4:11:77:c3:68:
         b4:c6:cf:73:ca:22:d0:ff:ab:fc:8e:34:9a:20:e4:c5:29:62:
         be:95:94:09:25:29:63:d2:52:0f:63:91:0b:26:3b:e2:89:4a:
         83:cb:72:aa:71:9d:cb:37:ca:f2:4a:ed:7a:fd:1f:1b:e0:6f:
         b7:63:63:11:64:e2:d1:89:c6:69:d3:3f:22:2b:7d:14:f7:ae:
         7a:82:f9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----