Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139352e38382e38372e302f32342d3332203d3e203531313637.roa
File:                     3139352e38382e38372e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          a842Eovja4+ldlwkeFNHxmI5v+nhev2CfQ/suYtcpPc=
Subject key identifier:   18:50:EA:CE:AF:FC:06:74:CA:8F:43:B0:32:D7:E0:3F:5F:7F:2B:8E
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       5529E5E1661109B973A128482277A259C68D0847
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139352e38382e38372e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:34:16 +0000
ROA not before:           Sat 22 Oct 2022 04:29:16 +0000
ROA not after:            Sat 21 Oct 2023 04:34:16 +0000
asID:                     51167
IP address blocks:        195.88.87.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:29:e5:e1:66:11:09:b9:73:a1:28:48:22:77:a2:59:c6:8d:08:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:16 2022 GMT
            Not After : Oct 21 04:34:16 2023 GMT
        Subject: CN=1850EACEAFFC0674CA8F43B032D7E03F5F7F2B8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:67:81:6b:6b:50:b8:34:41:c3:e2:63:ed:9d:
                    5e:1e:13:fc:46:e1:f9:47:0b:8a:b5:ac:12:4c:95:
                    5a:b9:2c:7e:07:43:04:2e:12:9d:1d:a5:25:4b:35:
                    00:5f:33:3f:3b:39:da:78:ae:37:b7:68:96:5d:b9:
                    3f:e3:2e:f1:44:5b:6c:f7:08:dd:30:f5:1a:2e:1f:
                    8d:f6:ae:ba:94:1f:68:b8:18:a0:26:4b:eb:a2:47:
                    fb:7f:a0:b3:a9:5c:09:df:b3:af:48:9a:32:3c:52:
                    91:a6:09:69:88:1e:be:11:d1:f7:60:3e:8d:f6:b4:
                    69:45:4e:f0:dc:7a:60:8b:49:f3:11:27:c2:73:84:
                    72:35:3a:d1:6d:8e:67:1a:3f:c3:a3:1f:8f:c6:0c:
                    81:58:8d:f3:1f:dc:67:e7:06:fc:22:4d:62:ca:09:
                    1a:21:c1:ed:47:8a:d6:68:29:7b:f7:4b:58:ca:41:
                    6a:af:e8:8b:30:e5:9e:89:cb:09:41:28:24:92:d9:
                    64:f7:75:d1:ca:4d:f0:04:47:2d:7e:13:88:8b:d5:
                    9c:1d:e0:33:cb:31:2f:f2:02:1c:35:07:88:f5:99:
                    d9:39:65:8f:17:fd:c0:36:a3:34:61:2e:e4:c5:30:
                    1b:ef:f0:2e:c0:59:ce:73:ea:ae:7e:48:f2:28:b0:
                    4c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:50:EA:CE:AF:FC:06:74:CA:8F:43:B0:32:D7:E0:3F:5F:7F:2B:8E
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139352e38382e38372e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.88.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:91:a5:98:d5:f6:7a:08:2c:19:14:36:c2:c7:7a:22:72:ab:
         69:11:67:b4:39:9f:7a:42:e7:0e:ad:12:a3:99:ec:23:ee:b9:
         c6:53:7e:20:e9:a5:83:2d:49:85:f2:c6:1b:54:3e:66:60:23:
         89:95:c8:57:d3:72:bc:ff:e6:26:de:b8:b5:41:f9:07:0c:6c:
         fb:0a:d5:a3:d2:ee:1d:09:e1:b8:6e:d0:7f:1b:96:12:05:6d:
         33:ee:c6:53:7c:83:f2:ca:73:17:c2:12:07:10:cd:1e:b2:e5:
         99:5e:76:91:d8:42:4d:01:fd:3e:7b:33:9e:8a:c0:bf:b3:35:
         cf:c7:a4:5f:ed:b2:54:c0:33:36:fd:19:aa:c5:7a:cd:61:18:
         eb:ab:e3:9a:15:5d:e1:b8:d0:01:9b:1c:6c:79:fa:d0:28:58:
         44:3f:36:a7:39:8c:89:48:d9:3c:02:91:df:7a:67:ae:2f:d6:
         da:88:2e:a6:cf:47:ed:67:46:e9:7d:61:91:37:5b:a6:92:7a:
         c5:8d:f4:6c:29:14:84:77:e6:3b:b2:d4:db:d3:a2:b9:33:2f:
         2b:64:76:9a:d6:67:25:2a:0e:93:89:1c:75:db:bf:f9:6d:6c:
         15:6c:99:59:11:e4:48:62:1d:b0:93:86:86:66:7f:31:ae:87:
         43:c7:bc:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----