Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3139362e32312e302f32342d3332203d3e203531313637.roa
File:                     3138352e3139362e32312e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          pLiSUo26ZyMGTQbN3vaiQg1W0p6QtUiIunFZijmGtQo=
Subject key identifier:   58:C2:50:94:F0:65:FF:F6:24:3C:DB:F0:23:1B:DF:91:CD:30:C9:17
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       05B38DE2716F06DF1726FD80A6640987EDFBFD26
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3139362e32312e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:34:08 +0000
ROA not before:           Sat 22 Oct 2022 04:29:08 +0000
ROA not after:            Sat 21 Oct 2023 04:34:08 +0000
asID:                     51167
IP address blocks:        185.196.21.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:b3:8d:e2:71:6f:06:df:17:26:fd:80:a6:64:09:87:ed:fb:fd:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Oct 22 04:29:08 2022 GMT
            Not After : Oct 21 04:34:08 2023 GMT
        Subject: CN=58C25094F065FFF6243CDBF0231BDF91CD30C917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d7:eb:52:04:78:64:96:39:3e:40:61:c6:19:
                    1e:cb:bb:99:a4:ef:4f:f1:43:75:af:f3:a8:20:2d:
                    2a:82:51:17:66:c7:bb:3a:1d:82:b9:f7:26:84:67:
                    dc:49:1e:f2:6e:80:b5:2f:19:0a:2f:8e:dd:72:2a:
                    8b:cc:70:ba:8f:86:24:b4:10:d1:25:5a:47:0b:0f:
                    f7:8b:ba:f7:7f:b3:27:45:ba:65:07:19:ba:ee:ee:
                    fa:5c:de:61:73:48:18:7f:51:10:c5:3a:c3:7f:b8:
                    87:61:c0:48:6b:b1:7a:0a:18:e7:75:31:b6:8d:0b:
                    15:7b:40:5a:d6:dc:5d:c5:b5:e6:ae:85:74:3f:2b:
                    38:11:8b:58:00:91:cb:2b:7a:cf:7c:55:e9:ab:04:
                    8a:c1:5e:30:ed:5a:88:12:21:a6:b4:47:13:73:93:
                    b8:f0:bc:8d:9e:36:82:6d:27:9f:95:24:cd:de:0b:
                    2c:d9:02:08:8f:0b:e1:03:cd:53:3d:60:6b:17:4b:
                    36:6a:3b:39:02:56:f9:f1:47:a7:2e:18:51:e2:81:
                    9e:86:1a:27:14:07:bc:d6:9f:5d:b2:ff:31:ee:90:
                    e5:61:4c:06:ec:23:05:4d:3f:7c:a1:4d:27:e1:a6:
                    db:4d:7f:2f:f4:77:ad:2c:34:5a:00:73:bb:f3:a1:
                    0b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C2:50:94:F0:65:FF:F6:24:3C:DB:F0:23:1B:DF:91:CD:30:C9:17
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3139362e32312e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.196.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:2f:02:b2:a0:27:e7:91:64:1e:2a:53:36:e2:62:e3:e6:ed:
         72:8c:97:68:6e:26:9f:ad:63:f9:c5:8a:d9:af:f9:57:da:e8:
         f6:32:04:ae:1d:99:6d:d0:6a:ae:ac:3e:35:83:06:b5:31:f2:
         e0:50:72:c0:85:83:68:b9:4c:a7:c6:4d:85:fc:c8:b6:7a:b9:
         98:8b:e9:10:cf:35:37:39:c8:85:e9:69:21:c3:2b:b4:c1:1a:
         ce:e1:ac:3d:ed:ec:9f:ee:7b:b5:a7:49:d7:c3:b0:ca:18:8a:
         67:7a:fe:c3:b2:53:cd:c8:f5:c8:1a:ac:1a:26:aa:a5:39:11:
         db:2a:69:50:d7:84:4a:7d:e8:00:cc:75:2b:ca:a8:8d:49:f4:
         8b:14:f7:9e:ae:bd:81:17:40:b4:30:b0:b2:37:22:c6:50:8f:
         33:9a:e8:81:f0:84:a9:33:5c:7d:9e:b5:cf:6d:ed:87:2f:ba:
         cf:1f:a7:f5:42:ae:26:e0:e8:51:f9:72:5b:81:bc:93:db:7f:
         45:d9:c2:af:4b:d5:d4:d1:be:9d:f4:f1:f5:de:96:2b:d8:b7:
         6f:2a:24:1e:ae:59:c3:d1:1d:b9:d2:6b:1b:8d:89:96:fc:2a:
         7d:6c:05:7f:94:b2:41:2f:41:ae:28:d3:c4:ba:4e:06:a7:aa:
         2c:3b:55:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----