Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3139342e33312e35322e302f32342d3234203d3e203437353833.roa
File:                     3139342e33312e35322e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier:          yJE/5odLnwScEy+ufj5fHwPVvXCgYXjmYnOmZqjl+ZQ=
Subject key identifier:   4C:A1:3F:52:90:25:A9:31:DA:D2:57:63:00:82:0C:13:75:A2:C7:C1
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       24033E6BC904DEF5A3FFF331CE7DE1287C04D25D
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3139342e33312e35322e302f32342d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:34:06 +0000
ROA not before:           Sat 22 Oct 2022 04:29:06 +0000
ROA not after:            Sat 21 Oct 2023 04:34:06 +0000
asID:                     47583
IP address blocks:        194.31.52.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:03:3e:6b:c9:04:de:f5:a3:ff:f3:31:ce:7d:e1:28:7c:04:d2:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Oct 22 04:29:06 2022 GMT
            Not After : Oct 21 04:34:06 2023 GMT
        Subject: CN=4CA13F529025A931DAD2576300820C1375A2C7C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a2:3c:48:5d:3b:6f:ee:34:21:8e:83:d4:41:
                    48:2e:00:4a:73:d0:42:6b:92:1a:2f:73:64:45:94:
                    51:b3:e7:84:99:98:e0:84:55:0b:f0:40:eb:cd:a1:
                    17:cf:60:ad:c7:3b:68:58:14:36:d9:58:21:c5:ad:
                    ed:80:ca:9a:16:c5:b5:d3:5b:56:bb:92:4b:2b:3f:
                    a6:12:2e:63:03:4a:6a:aa:26:e0:88:3b:f4:a7:d5:
                    66:af:f6:6b:d9:ff:4c:66:eb:5b:cb:46:15:d5:c6:
                    84:88:29:65:f5:72:a5:09:d0:02:c6:a5:b8:87:8a:
                    e3:a8:ae:50:ab:f1:58:bc:7d:87:08:5f:3a:cf:34:
                    66:ad:7b:ed:a1:bb:0d:e1:cc:50:bc:b6:ff:ed:54:
                    da:92:3a:bb:63:b4:47:b2:45:a5:66:64:c3:c1:ae:
                    22:0a:42:09:4e:e8:a9:52:c1:51:42:ae:e2:3a:d9:
                    b5:4c:e8:91:6a:d3:7c:62:97:78:03:fd:2c:7b:9e:
                    9b:12:ab:61:01:2d:7d:37:1c:2f:97:f8:5c:75:89:
                    82:e5:82:83:c4:69:9d:d5:0d:a1:3e:7e:f5:f5:37:
                    49:c8:ac:84:b9:9a:95:26:16:9b:aa:d0:ab:64:47:
                    af:c8:36:b7:29:eb:28:f9:c4:b5:d7:25:04:88:60:
                    1c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A1:3F:52:90:25:A9:31:DA:D2:57:63:00:82:0C:13:75:A2:C7:C1
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3139342e33312e35322e302f32342d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.31.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:5c:ea:93:50:95:b2:03:04:09:5c:c6:a1:7d:a5:0a:22:02:
         e7:00:de:7d:7a:81:6c:1f:2f:a8:5e:b5:4b:d1:bc:85:3f:64:
         e7:71:27:e6:1e:9c:c8:bb:f2:c8:ac:0d:21:a8:66:fe:0f:e7:
         99:ee:c6:e1:33:53:fc:b1:25:39:13:e2:8d:b7:72:b2:7a:24:
         9c:cb:50:f2:58:4c:8f:79:c5:11:02:3f:38:aa:ca:f9:bd:13:
         ca:2b:6c:c4:85:a3:71:df:07:c2:ef:eb:f9:11:c2:74:a8:0b:
         8f:df:e2:8f:81:3e:47:3b:ea:3b:d0:2e:eb:bf:7c:7f:93:e0:
         b6:a4:01:c3:4e:5e:d6:bf:8c:53:2f:34:49:16:e4:4f:fe:87:
         c1:a7:12:88:91:9d:54:1e:0f:6f:84:ae:5f:5d:f7:c4:e8:71:
         83:75:f6:9a:c8:63:a2:45:95:fe:3b:84:28:a9:17:dd:e3:82:
         ce:af:be:de:ef:ae:b7:47:25:38:64:cd:13:41:96:43:32:fd:
         fd:45:05:a5:a7:3c:c4:9a:08:16:a5:bd:39:0d:c9:ed:f5:de:
         ed:50:e6:02:c5:45:5d:a7:a7:0d:9c:fb:57:56:d7:a2:f1:2c:
         25:f1:fc:ac:fc:e5:36:4c:49:6b:da:f5:aa:ed:65:e6:aa:38:
         e7:a8:ba:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----