Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/352e3138302e3134382e302f32342d3234203d3e20323732343831.roa
File:                     352e3138302e3134382e302f32342d3234203d3e20323732343831.roa (raw, json)
Hash identifier:          CoOcVlqNQHG8+VHf9IYUnpGaQ+OKuvIb+uF0CWb5Kwo=
Subject key identifier:   13:68:50:00:93:E8:7E:BA:E3:AB:63:EC:05:EE:8A:37:5B:B3:40:D5
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       73063C76F699D19919BC272E9627EC9E56F90C22
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/352e3138302e3134382e302f32342d3234203d3e20323732343831.roa
Signing time:             Sat 22 Oct 2022 04:33:36 +0000
ROA not before:           Sat 22 Oct 2022 04:28:36 +0000
ROA not after:            Sat 21 Oct 2023 04:33:36 +0000
asID:                     272481
IP address blocks:        5.180.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:06:3c:76:f6:99:d1:99:19:bc:27:2e:96:27:ec:9e:56:f9:0c:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:36 2022 GMT
            Not After : Oct 21 04:33:36 2023 GMT
        Subject: CN=1368500093E87EBAE3AB63EC05EE8A375BB340D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a6:90:dc:fe:e7:48:3d:b7:5a:47:2b:74:49:
                    7c:c1:56:30:46:5d:94:f4:d9:b2:a6:8b:fa:f0:71:
                    d6:3b:f3:96:8a:88:4b:6d:cb:2a:33:5c:2a:69:ff:
                    07:c9:71:8c:6e:53:05:c0:7f:f7:ca:c2:39:3a:a5:
                    c6:bc:3c:87:05:e3:7d:df:aa:ce:49:64:eb:4d:9e:
                    8c:cd:c7:90:f0:3a:4d:33:22:6d:3d:92:5e:d1:0d:
                    1b:3b:64:51:94:9f:a9:99:b5:43:7e:0c:03:5f:7a:
                    83:fb:7b:fb:f5:43:59:9f:4d:c2:8d:86:d3:33:08:
                    cd:5d:13:b6:d0:4e:b9:bb:f0:e6:af:72:af:ad:36:
                    c5:39:6c:bd:6d:46:f4:45:4a:99:ea:5e:6c:cb:af:
                    e1:8e:11:95:a0:97:57:21:d5:97:d1:c4:99:40:6b:
                    5e:e3:92:6e:04:8a:5b:cc:c2:86:80:6f:6d:c0:58:
                    d2:32:30:4f:a8:a0:1e:7d:db:69:bc:11:32:6b:28:
                    d1:05:27:91:80:20:83:c2:bb:c0:b0:b4:a0:c3:7a:
                    09:d2:c6:69:8a:7a:76:31:55:e2:a0:09:e3:6f:35:
                    e2:aa:5b:19:7c:a2:86:85:90:df:5d:df:4a:e6:61:
                    99:99:d8:ba:1b:7e:24:d6:98:d6:fa:0f:96:5c:35:
                    1a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:68:50:00:93:E8:7E:BA:E3:AB:63:EC:05:EE:8A:37:5B:B3:40:D5
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/352e3138302e3134382e302f32342d3234203d3e20323732343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:53:c0:9e:92:87:3c:6d:d7:9a:4c:08:c3:ca:e7:94:23:4f:
         5d:2a:35:6c:94:43:55:9b:51:2c:bc:23:37:f3:81:38:eb:a7:
         bb:47:ce:93:2e:67:02:3d:c2:24:d6:33:18:bb:14:fe:15:6c:
         ed:58:e9:eb:c3:5f:24:2c:2b:8f:4e:c2:9d:59:99:72:d3:aa:
         be:2e:7c:e6:c4:9f:77:a9:43:bd:ea:91:27:cf:65:59:cc:e2:
         42:9b:12:d4:d8:5f:3b:25:75:d4:3a:4b:fc:e9:07:fd:40:fc:
         d9:d6:4c:e7:b3:b3:bd:59:57:79:75:c2:75:9c:fc:fd:8d:e1:
         16:41:0c:9f:63:05:ca:b8:84:e6:7b:62:33:1c:f6:30:11:df:
         c3:55:ee:2f:e4:17:b6:d3:b2:af:71:15:11:79:38:49:86:aa:
         da:53:34:8b:de:0c:30:1e:d3:84:84:84:56:e8:50:c7:25:2b:
         f3:35:6b:78:10:86:16:10:4e:f4:99:58:72:f7:b1:37:20:96:
         e2:e6:b8:91:0e:d2:a0:2a:38:97:81:8f:99:8f:b6:ef:40:56:
         5f:db:a9:36:3f:32:a4:3a:6e:d9:2a:cb:47:c7:82:da:c8:c5:
         d6:d4:27:9c:43:47:a0:c4:64:cb:1d:3d:de:f3:fc:c2:64:9a:
         f9:19:15:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----