Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3231312e33332e302f32342d3234203d3e203233343730.roa
File:                     3138352e3231312e33332e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          MH6tuZlqd6FPfcZObOaGcIMDEPWymvcX9e1f9X+EUDI=
Subject key identifier:   66:D8:72:13:F6:A6:1C:FB:57:2E:50:FA:85:9E:06:CA:35:6E:6C:91
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       56F8E09E86CFC13A344C7790C99A3542F10E078F
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3231312e33332e302f32342d3234203d3e203233343730.roa
Signing time:             Thu 18 Feb 2021 08:30:36 +0000
ROA not before:           Thu 18 Feb 2021 08:25:36 +0000
ROA not after:            Thu 17 Feb 2022 08:30:36 +0000
asID:                     23470
IP address blocks:        185.211.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:f8:e0:9e:86:cf:c1:3a:34:4c:77:90:c9:9a:35:42:f1:0e:07:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Feb 18 08:25:36 2021 GMT
            Not After : Feb 17 08:30:36 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:36:e1:c1:a3:75:ee:c6:b5:cc:9d:dc:5f:c6:
                    26:d8:e6:7b:dc:a6:76:96:2e:09:28:11:1d:6b:00:
                    bf:47:cd:90:d9:ab:2d:a5:56:9d:51:72:24:ce:ac:
                    62:84:1a:80:8d:ff:2f:8a:b5:95:f4:97:95:2a:22:
                    2e:d8:51:51:47:3a:b7:62:28:01:58:a0:50:5f:13:
                    a2:71:b1:e2:3e:8c:3d:d5:5b:5f:ac:da:68:72:a0:
                    ed:14:2f:c3:b7:85:08:4c:ae:88:ba:d2:7c:ab:01:
                    bd:7d:c6:12:ef:15:2a:0d:53:94:bc:5a:fc:70:d4:
                    97:23:39:de:81:6b:f9:81:0e:f6:fc:e2:09:ce:51:
                    5e:32:ce:6d:46:02:1e:fe:d9:8f:d4:0e:1c:74:18:
                    12:13:e7:ef:8d:9b:af:ba:f5:19:a6:a1:ef:15:e7:
                    69:ba:1e:73:a6:18:83:4b:53:64:be:4c:4b:9b:78:
                    e8:b5:ad:7f:1f:d6:de:dd:f4:78:1a:f7:3d:cd:a0:
                    8b:b7:39:2d:78:9b:b3:fd:54:20:52:59:b1:90:07:
                    50:f3:f8:78:c9:af:5d:47:f6:3e:29:65:00:33:06:
                    27:74:cb:81:b2:df:74:13:2e:4a:ef:4d:42:f0:50:
                    87:75:95:30:28:50:a3:83:e9:fd:c0:88:63:4c:e3:
                    ea:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D8:72:13:F6:A6:1C:FB:57:2E:50:FA:85:9E:06:CA:35:6E:6C:91
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3231312e33332e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.211.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:69:15:de:cc:70:a7:da:d0:27:63:bc:d7:4b:29:18:81:42:
         5e:28:e7:83:b0:25:5f:37:60:67:9e:69:0d:e0:6b:68:d6:a7:
         38:5f:a7:bb:0b:43:da:e4:db:ea:31:3e:49:50:f9:ed:5a:54:
         d6:f8:84:4b:07:d5:14:e2:2c:a9:63:70:27:ce:31:a0:6d:6e:
         1d:da:54:36:6e:d2:cd:c8:89:05:c2:85:8c:85:59:74:f8:f7:
         b3:d1:ae:94:aa:2b:4f:e9:57:47:5e:fc:f1:21:76:3b:78:79:
         1d:6d:d2:ee:9c:c7:a0:4c:88:8b:f7:10:19:7a:06:c2:bc:53:
         46:6e:ae:9d:5f:87:53:54:9f:79:e4:df:a9:81:b5:4a:95:d6:
         b4:2d:90:e5:35:f9:cc:4f:02:fc:c3:74:c1:e7:bd:3b:12:51:
         9c:12:a9:fc:bf:ac:aa:05:b9:b4:d2:ff:88:47:33:fe:1a:32:
         b4:6e:d2:ff:48:b9:f2:d5:9a:e8:5e:27:0e:0d:48:a3:4f:df:
         76:13:6f:11:e6:ef:b8:2c:83:8c:b1:51:dc:9f:c9:da:b6:06:
         dd:1e:8d:38:4e:a2:bb:13:6d:d5:d3:29:34:ee:35:d4:24:3a:
         68:bc:2b:1e:5a:23:30:a5:14:c2:91:cf:96:c2:fb:0c:cb:70:
         0d:ed:89:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----