Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/352e3138302e36322e302f32342d3332203d3e203632323430.roa
File:                     352e3138302e36322e302f32342d3332203d3e203632323430.roa (raw, json)
Hash identifier:          zG7gSv6Q0bIcCBqUvnIxFsPeSFjCg9V/IznuzaeiQn0=
Subject key identifier:   22:55:A9:BF:72:57:00:4F:2F:0A:C8:73:4C:9E:E8:2E:5D:D8:23:C1
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       35A950C020DA6858178AAB500E03522A62F9B192
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/352e3138302e36322e302f32342d3332203d3e203632323430.roa
Signing time:             Wed 28 Dec 2022 09:27:31 +0000
ROA not before:           Wed 28 Dec 2022 09:22:31 +0000
ROA not after:            Wed 27 Dec 2023 09:27:31 +0000
asID:                     62240
IP address blocks:        5.180.62.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a9:50:c0:20:da:68:58:17:8a:ab:50:0e:03:52:2a:62:f9:b1:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Dec 28 09:22:31 2022 GMT
            Not After : Dec 27 09:27:31 2023 GMT
        Subject: CN=2255A9BF7257004F2F0AC8734C9EE82E5DD823C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:35:dd:d0:16:0d:51:3e:03:6f:87:3b:e8:0b:
                    2a:4d:08:d9:bc:eb:94:d5:7e:41:6c:6d:96:3f:cf:
                    4e:bd:62:81:6f:2c:be:f2:4a:b6:ab:f5:1b:56:85:
                    3f:89:55:c1:73:68:80:3f:31:9a:d9:96:a0:c4:cf:
                    2c:9b:a1:bf:3f:8c:0e:ae:83:d7:ef:d4:78:00:88:
                    72:c5:60:0b:da:3f:85:70:72:28:0b:c0:5a:70:dd:
                    ad:0c:fc:d9:03:08:d6:1a:cd:2b:48:b7:80:24:72:
                    1b:bc:4f:98:96:84:5f:ad:9c:5b:15:55:d7:8d:39:
                    a7:85:26:0e:fd:66:b5:70:fd:78:a7:3c:e9:3d:c2:
                    19:e2:03:33:7d:99:7f:18:fe:7c:3c:89:4c:d4:72:
                    7a:74:e4:6e:c3:c5:65:55:6e:3f:27:ea:a9:10:cd:
                    0a:34:47:8a:3f:cd:ed:ba:56:81:1a:69:c6:64:8a:
                    96:e6:3d:c4:04:c8:57:16:dd:82:79:a8:52:cf:e7:
                    dc:2e:53:50:7f:be:71:46:e0:5a:c0:7f:c3:ce:5e:
                    5e:85:c1:7b:20:0a:79:ba:e9:cc:ab:12:9e:ed:eb:
                    1f:5d:73:cf:6b:8f:89:fa:5d:72:15:0b:9f:2b:d8:
                    00:29:d3:cb:51:d7:d6:91:c8:b5:ad:e2:c2:f3:95:
                    b0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:55:A9:BF:72:57:00:4F:2F:0A:C8:73:4C:9E:E8:2E:5D:D8:23:C1
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/352e3138302e36322e302f32342d3332203d3e203632323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:86:6e:5f:38:7f:3e:c5:c8:9f:ca:93:15:03:67:ac:9b:a0:
         9f:7f:c2:3a:28:47:43:4c:b8:b9:57:3e:c3:35:5b:97:62:eb:
         38:b5:f1:4e:9d:d9:63:c1:c4:60:54:51:d3:1f:62:d0:0b:4c:
         3b:7e:f5:93:1c:92:89:6c:a7:bb:a3:cd:8d:59:9f:61:fd:d9:
         52:6a:7a:ec:ac:17:d7:be:9b:50:73:6b:e5:52:79:9b:6d:22:
         04:51:9a:f2:5a:a5:9e:d0:7b:39:fe:3a:dd:9c:14:a0:0e:42:
         8e:0e:74:7f:02:43:42:ab:07:17:ed:0a:30:95:23:20:a0:50:
         bb:9d:38:22:22:95:de:e1:8b:17:05:91:25:1d:74:2d:2f:0d:
         19:3f:bf:51:74:7a:e8:68:67:15:fb:31:eb:0f:54:35:ca:c6:
         db:44:75:d2:5e:fe:ad:ae:bf:52:ce:7f:68:5b:9b:a6:99:91:
         be:8f:a8:99:d2:ea:25:11:86:dc:b0:b3:09:62:1c:86:35:13:
         eb:76:5c:cc:4d:79:3a:1f:9a:c8:9a:1e:81:b6:2c:40:a2:77:
         a2:95:16:b8:61:7d:27:91:63:58:ff:96:90:3d:fe:2b:5e:ab:
         db:88:83:dc:5f:a9:f1:d9:30:38:3e:46:95:5e:48:33:fc:7c:
         21:ec:a3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----