Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3139382e32372e302f32342d3332203d3e203531313637.roa
File:                     3138352e3139382e32372e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          NYzONzSO/7IIe+7mDIdNWPtDy3TVbWeXRKq88JJn2zQ=
Subject key identifier:   A3:57:84:05:5A:27:73:F4:6D:8F:0C:57:BA:8E:DB:79:AF:9A:90:1F
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       55A0E27C09BDA896F598CC559C81C6D20EB8974E
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3139382e32372e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:34:08 +0000
ROA not before:           Sat 22 Oct 2022 04:29:08 +0000
ROA not after:            Sat 21 Oct 2023 04:34:08 +0000
asID:                     51167
IP address blocks:        185.198.27.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a0:e2:7c:09:bd:a8:96:f5:98:cc:55:9c:81:c6:d2:0e:b8:97:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Oct 22 04:29:08 2022 GMT
            Not After : Oct 21 04:34:08 2023 GMT
        Subject: CN=A35784055A2773F46D8F0C57BA8EDB79AF9A901F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:6e:5c:9b:c5:36:08:69:ab:4e:63:85:18:b3:
                    d5:b9:92:75:9e:e2:19:09:cc:67:38:79:19:7a:40:
                    1e:da:43:4d:84:6b:3f:2e:58:53:ab:5d:f4:8a:60:
                    56:2c:57:e0:81:fd:33:f2:9a:cb:8a:8b:39:48:65:
                    d9:1e:e1:32:78:2a:12:d7:f7:1a:03:e8:42:db:67:
                    af:32:98:5e:be:5b:1b:f8:0b:2d:57:56:e2:e4:d5:
                    b2:19:02:98:89:1f:b4:e9:26:b1:f2:26:27:bf:3a:
                    5e:dc:b4:c8:89:ea:bc:1a:b0:00:27:d9:e8:4c:d3:
                    32:e4:78:5b:87:ee:a0:69:a4:8c:90:82:28:d0:bb:
                    71:42:1a:59:78:1a:59:ed:cb:96:4c:ca:ad:21:09:
                    ff:06:2a:84:2c:ba:64:5f:61:a9:7b:86:a0:ec:b0:
                    f8:17:41:6c:dc:50:61:d8:11:93:98:1c:f0:79:2f:
                    ef:b2:18:ad:d4:ef:21:9c:82:4f:6d:51:58:f2:e7:
                    c2:fb:98:9a:d4:18:d5:a5:12:32:eb:03:a5:65:f4:
                    d4:2b:05:31:74:7e:74:b7:94:c3:a8:f5:bc:47:fe:
                    f1:b8:af:aa:7e:be:59:87:e1:4b:6b:cf:a0:58:bf:
                    c2:47:d2:d5:65:fa:33:44:13:ec:23:84:f1:2d:e7:
                    9a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:57:84:05:5A:27:73:F4:6D:8F:0C:57:BA:8E:DB:79:AF:9A:90:1F
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3139382e32372e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.198.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:d4:f4:58:48:09:7c:ea:9b:a8:cf:c8:f6:ce:09:5e:87:68:
         ac:41:f3:d8:56:71:a9:71:28:b7:41:22:ba:32:1d:80:6b:26:
         24:87:74:2d:c0:14:0a:21:ec:9b:16:95:a0:e3:37:a9:6f:3b:
         4f:a0:e0:01:62:f5:1a:3d:bd:ea:ba:7a:00:55:2f:ba:bd:47:
         3a:b4:fe:a1:f7:ce:e2:ea:86:b2:a2:dc:a3:1f:78:b2:b4:97:
         23:6a:c5:53:22:af:25:6d:9e:89:db:c3:c5:32:e6:ca:3b:30:
         f3:fc:55:9c:13:f9:99:77:e6:35:a5:b6:a3:fc:73:c9:e7:ed:
         dc:ba:51:48:44:49:58:16:e3:c9:c2:57:23:00:87:45:20:c5:
         bb:33:7c:a7:4f:fd:2d:d2:fa:af:6a:70:34:4a:0b:0a:ad:7d:
         c0:ee:8b:0a:9f:fa:b0:21:08:ee:92:cc:3d:62:4f:5c:7c:3b:
         a4:ce:02:fe:3a:06:5b:e3:9e:3a:02:5d:ed:74:9c:8c:2f:7d:
         d6:92:8c:07:1b:04:93:c8:d2:bb:1a:84:37:d4:f6:ef:b5:cc:
         76:f3:a8:cb:0b:9a:3d:a5:a7:2e:d3:70:93:14:a9:df:f0:16:
         e1:64:38:b6:ef:9b:f8:9e:45:c9:df:bf:bd:f5:1f:1e:1b:e6:
         55:19:e8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----