Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/34352e3134312e32322e302f32342d3332203d3e203531313637.roa
File:                     34352e3134312e32322e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          2nsQ/kwz4yit0XbAVenCopbd8i/afp1IU5m4VHevD6I=
Subject key identifier:   1B:85:BC:FE:F6:68:9B:E7:F3:44:CE:35:95:F7:56:8B:FF:51:76:A0
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       53B6C469293D54DE330BCAFC9CD7A1F333B4ED97
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e3134312e32322e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:43 +0000
ROA not before:           Sat 22 Oct 2022 04:28:43 +0000
ROA not after:            Sat 21 Oct 2023 04:33:43 +0000
asID:                     51167
IP address blocks:        45.141.22.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:b6:c4:69:29:3d:54:de:33:0b:ca:fc:9c:d7:a1:f3:33:b4:ed:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Oct 22 04:28:43 2022 GMT
            Not After : Oct 21 04:33:43 2023 GMT
        Subject: CN=1B85BCFEF6689BE7F344CE3595F7568BFF5176A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a9:3a:b0:ff:4d:ee:a2:e5:5f:2d:01:76:a9:
                    be:42:53:6b:a8:a5:ec:44:4b:8e:43:36:62:f9:91:
                    b2:ae:28:a0:5f:14:75:c3:57:a4:55:24:1d:75:58:
                    c0:12:f9:30:80:1c:0c:46:99:3a:87:9d:79:ac:7c:
                    08:27:7c:10:73:0c:fd:d3:1d:9e:11:82:de:03:59:
                    32:27:ff:80:b3:97:61:16:6b:0a:30:79:18:44:6c:
                    de:9b:7d:b7:6b:d6:6f:46:cd:0c:f6:22:3d:8c:78:
                    32:c0:47:b4:2a:fb:8b:2a:82:a5:af:b7:9b:f2:f4:
                    1b:3f:2d:2d:32:b7:a7:34:bf:b0:eb:46:a5:e3:53:
                    d4:79:bb:db:81:55:f4:00:22:95:e9:56:04:28:33:
                    b5:2e:44:61:26:54:df:cd:9d:ec:a5:73:1f:f3:26:
                    99:4c:63:70:c2:71:9c:d5:08:4e:24:de:9c:20:b0:
                    27:b8:fd:32:62:e3:3c:82:2f:26:ed:ff:57:9c:d0:
                    02:0a:73:1b:d3:7b:7c:07:83:d4:ee:50:3c:86:e2:
                    df:8e:e8:24:3d:b0:59:07:ab:75:48:61:c6:d6:b6:
                    96:fe:ef:fd:29:5b:95:21:62:ca:d2:97:ba:c8:e0:
                    74:3a:af:53:77:47:02:f1:87:80:6c:14:da:5f:97:
                    04:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:85:BC:FE:F6:68:9B:E7:F3:44:CE:35:95:F7:56:8B:FF:51:76:A0
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e3134312e32322e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.141.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:ee:48:03:af:85:ba:c4:67:64:38:a3:1b:d1:ed:6c:11:b5:
         ad:af:45:60:60:31:94:ca:22:d8:fa:ee:9e:f7:1f:09:74:92:
         b0:43:c9:ec:c8:cb:48:3c:7c:d0:b6:96:cc:c8:69:1a:39:19:
         1e:f1:fa:dd:ef:7f:c1:49:2b:69:05:d3:a8:6a:29:bf:c8:84:
         af:ab:0c:2b:a3:fb:ff:d8:6d:78:0c:f8:85:26:54:32:95:b6:
         a2:4c:ce:b5:e3:f5:26:b7:df:51:28:70:a7:4d:13:f4:cd:8c:
         61:f4:6d:87:84:3b:2b:d5:11:e2:4e:c5:1e:a3:ac:0f:aa:46:
         2d:37:48:8c:23:60:d7:eb:d3:05:05:3e:6b:3b:68:4a:f2:8b:
         e4:b7:41:d9:d9:78:6d:2d:e8:3a:42:ba:11:1f:26:f1:41:02:
         f1:6c:31:92:f5:4f:15:ad:8a:86:da:0b:fe:74:e8:56:b4:fd:
         d9:40:e0:6a:41:95:3d:2e:d1:d9:f6:14:75:c5:16:e1:88:cc:
         fc:9a:33:8e:2d:e2:bf:33:24:6c:54:4f:76:01:6c:b5:81:8a:
         76:d1:d4:94:77:62:8a:0a:76:0e:8f:2b:65:ff:8f:fd:42:ac:
         e0:c7:b4:c2:50:e5:c8:bf:db:46:13:6f:a8:2c:d0:97:b3:d0:
         19:b7:72:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----