Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/5/3139342e33312e3134382e302f32332d3233203d3e203631333137.roa
File:                     3139342e33312e3134382e302f32332d3233203d3e203631333137.roa (raw, json)
Hash identifier:          AUhA3/FALJMWMHv4EWDsoTsDJK4UndnAt4zcwFP7FJ4=
Subject key identifier:   9A:7A:C7:48:84:62:65:A1:E8:4C:56:B1:20:B7:A7:28:C8:41:1A:3C
Certificate issuer:       /CN=57ee86dfc56d55209a35924d831530035bae3907
Certificate serial:       2898C7E50614FDF578D298793FDB7B30115A099A
Authority key identifier: 57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e33312e3134382e302f32332d3233203d3e203631333137.roa
Signing time:             Sat 22 Oct 2022 04:33:58 +0000
ROA not before:           Sat 22 Oct 2022 04:28:58 +0000
ROA not after:            Sat 21 Oct 2023 04:33:58 +0000
asID:                     61317
IP address blocks:        194.31.148.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:98:c7:e5:06:14:fd:f5:78:d2:98:79:3f:db:7b:30:11:5a:09:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57ee86dfc56d55209a35924d831530035bae3907
        Validity
            Not Before: Oct 22 04:28:58 2022 GMT
            Not After : Oct 21 04:33:58 2023 GMT
        Subject: CN=9A7AC748846265A1E84C56B120B7A728C8411A3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:36:a3:5e:50:32:fa:29:0c:6c:58:56:38:66:
                    eb:c5:0c:a2:84:29:4c:22:2b:21:d1:81:b9:a4:db:
                    45:2e:82:e2:f1:cc:f4:68:14:ea:7d:7e:05:de:8c:
                    75:b7:dc:24:2e:d7:65:69:00:b2:71:80:41:09:ba:
                    7e:ea:6d:f0:2f:68:f6:f1:42:85:15:f3:ae:f2:bf:
                    ba:3b:5d:62:20:39:84:d7:e1:e6:99:78:cf:b7:22:
                    d3:3d:33:61:13:b2:88:3b:67:99:64:9d:9a:a1:2f:
                    a6:65:f6:96:06:cf:29:98:3c:4c:7e:b9:e8:9e:54:
                    22:f4:59:33:aa:75:80:74:da:84:9a:e8:0d:2c:b8:
                    9e:96:cf:be:83:93:02:49:9e:39:2b:45:b4:dc:08:
                    58:7e:71:f4:7e:8e:5c:05:de:cb:0a:3d:4e:79:bf:
                    03:8d:23:af:d7:88:26:f9:b2:66:13:0b:33:42:45:
                    b5:92:dc:9c:06:7d:57:72:d8:9e:e0:66:3a:a0:e6:
                    0a:85:fd:65:28:c3:21:91:c1:7f:3d:45:36:78:73:
                    b8:f9:1a:1c:dd:c2:83:46:7b:f9:f9:36:3c:c8:bf:
                    2d:82:aa:51:b5:e8:2e:09:79:e9:c0:6d:1b:ad:d6:
                    af:82:36:82:a7:7b:11:f4:26:40:6d:18:ef:e4:60:
                    14:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:7A:C7:48:84:62:65:A1:E8:4C:56:B1:20:B7:A7:28:C8:41:1A:3C
            X509v3 Authority Key Identifier:
                keyid:57:EE:86:DF:C5:6D:55:20:9A:35:92:4D:83:15:30:03:5B:AE:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/57EE86DFC56D55209A35924D831530035BAE3907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-6G38VtVSCaNZJNgxUwA1uuOQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/5/3139342e33312e3134382e302f32332d3233203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.31.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:4d:06:50:b6:36:82:30:aa:47:31:8c:9e:92:07:1c:ae:b9:
         5f:e5:75:8f:d3:90:58:f4:8a:62:bf:6c:a3:8c:56:07:62:51:
         fe:c0:da:be:66:9f:96:38:5f:2a:2c:9d:2f:7e:7c:60:76:d9:
         c5:93:58:0c:db:52:3d:fa:fd:a1:b1:79:19:64:c6:3d:23:f8:
         1f:67:13:0e:dc:88:5c:f8:0e:8f:fb:96:e2:7f:03:0f:89:fa:
         1c:f9:21:36:08:73:e0:ee:33:ea:74:16:95:e4:f7:f1:1b:92:
         93:7b:21:a6:07:4c:fa:61:1a:01:16:d1:1f:79:01:a9:d7:36:
         ba:26:07:26:12:bd:a8:5d:70:cc:de:28:2c:bb:bb:ad:48:88:
         45:63:56:79:08:a9:6a:d8:19:48:28:4e:cb:2c:26:d9:c0:44:
         00:7e:7c:58:a6:e4:25:63:e2:ea:76:cf:49:37:19:f4:0e:17:
         eb:cb:10:87:38:31:d9:a2:8f:f6:73:26:57:cc:c5:f5:d2:da:
         e6:7e:e7:2a:78:56:5d:01:c3:f9:11:44:78:a8:9c:11:c3:9c:
         51:9b:eb:c4:41:97:95:07:0f:a4:e3:83:83:d0:94:33:49:2e:
         3f:65:e1:c3:da:2c:de:72:04:3b:3c:71:8e:21:e1:f9:16:0b:
         e5:62:54:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----