Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/34352e36372e3231362e302f32332d3332203d3e203531313637.roa
File:                     34352e36372e3231362e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier:          7NFRCZUqobxHEbuZQsszMQyvw7tv8nJZBiz0dVNun5c=
Subject key identifier:   A0:7D:0C:B1:74:09:EB:F6:12:BF:9A:2A:CA:F3:AC:26:E8:64:9A:29
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       2310841D51DB8D77E66878769084ECB0CA05CF46
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/34352e36372e3231362e302f32332d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:58 +0000
ROA not before:           Sat 22 Oct 2022 04:28:58 +0000
ROA not after:            Sat 21 Oct 2023 04:33:58 +0000
asID:                     51167
IP address blocks:        45.67.216.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:10:84:1d:51:db:8d:77:e6:68:78:76:90:84:ec:b0:ca:05:cf:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Oct 22 04:28:58 2022 GMT
            Not After : Oct 21 04:33:58 2023 GMT
        Subject: CN=A07D0CB17409EBF612BF9A2ACAF3AC26E8649A29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f6:0c:78:1e:19:09:f5:6d:0a:7d:b2:c1:c4:
                    f6:11:f8:a1:8b:7c:cf:d3:0c:8c:96:92:c4:29:7d:
                    c9:0b:7f:03:ab:de:2a:27:7b:7d:f4:20:31:bb:5e:
                    c3:4e:9e:a6:62:1c:b3:ca:83:aa:fd:58:27:de:99:
                    4f:35:93:36:fc:a0:71:19:30:7b:59:a6:e5:05:02:
                    a5:8a:22:bf:a1:a4:ff:1d:c6:54:de:53:49:1e:34:
                    5b:52:a9:3c:de:c6:92:b0:d3:6f:db:2e:b7:76:48:
                    07:a0:bc:7b:03:d2:7d:40:01:f0:da:61:ca:82:b9:
                    5c:bc:89:18:21:5d:88:59:5c:53:aa:f8:3f:9e:c8:
                    db:77:c8:95:0b:8f:b9:ba:50:3a:d2:d6:82:a2:e4:
                    4d:f5:50:58:81:f7:28:ac:9e:34:85:77:18:34:04:
                    c5:62:ad:7e:f0:5a:81:56:a0:f4:ee:3b:5f:0d:78:
                    f7:85:6e:8c:9a:3b:69:4e:ad:56:7d:36:70:e7:a8:
                    49:51:26:c1:7a:9f:f9:e8:aa:02:7d:8e:59:54:bc:
                    e8:e1:a5:4e:9a:25:90:2b:ce:d8:87:35:0c:6e:d2:
                    1f:02:bf:62:ab:88:5e:9e:74:e2:87:58:1f:de:fc:
                    ce:a7:2a:4f:30:8d:69:5b:b5:2b:88:69:12:3c:4b:
                    48:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:7D:0C:B1:74:09:EB:F6:12:BF:9A:2A:CA:F3:AC:26:E8:64:9A:29
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/34352e36372e3231362e302f32332d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.67.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:c8:db:8f:3d:34:dd:23:d1:74:34:a2:6d:38:b9:6a:29:8f:
         ef:f2:93:01:1b:29:53:33:d0:c4:20:ea:71:5f:e0:54:51:43:
         fa:0a:27:30:7c:2f:33:31:d5:52:a6:67:10:02:7f:b9:48:64:
         ae:e4:71:81:b4:c8:0a:42:98:22:78:3d:51:cc:11:a7:60:1f:
         27:f2:55:49:45:c5:11:c6:6e:85:a1:26:60:08:fe:a8:6a:df:
         d9:59:6c:67:f3:01:c9:8b:72:ec:f8:49:30:8d:0a:9f:77:df:
         80:1d:d4:ee:83:9a:8e:8c:26:17:77:bc:3a:ac:c7:09:12:96:
         ec:fd:8e:8d:38:df:21:73:2c:d8:96:95:93:91:80:4b:76:e5:
         1b:be:34:cf:75:b1:08:8d:b1:37:da:bb:5d:60:bf:cc:e7:d9:
         3f:e8:85:dd:0f:fb:e0:e3:bc:0f:c5:f2:2a:7c:91:b2:05:76:
         85:a9:ae:40:a8:b3:e2:3f:34:69:4e:ef:46:64:5f:b1:28:20:
         ec:e7:c4:dc:2f:47:9b:8f:8f:4c:9e:09:3b:74:04:9f:90:f4:
         e6:57:27:63:c2:56:99:d2:2d:83:eb:cd:47:64:d8:1a:f9:4f:
         28:5b:b1:d7:9e:a4:e3:c9:2b:69:8f:a3:4f:bd:a4:53:01:49:
         88:88:6b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----