Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3133302e3138352e3131382e302f32342d3332203d3e203531313637.roa
File:                     3133302e3138352e3131382e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          z2UfO3Bp3RruyNAd+IDfAfIiOmfPjkV6aUQD9gF/nD0=
Subject key identifier:   74:02:28:9F:C9:75:64:DC:65:71:36:E9:48:DA:1D:53:D5:16:2D:F4
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       2DA09A2072280DD8B37195DE5486538D9A5DA13D
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3133302e3138352e3131382e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:41 +0000
ROA not before:           Sat 22 Oct 2022 04:28:41 +0000
ROA not after:            Sat 21 Oct 2023 04:33:41 +0000
asID:                     51167
IP address blocks:        130.185.118.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:a0:9a:20:72:28:0d:d8:b3:71:95:de:54:86:53:8d:9a:5d:a1:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Oct 22 04:28:41 2022 GMT
            Not After : Oct 21 04:33:41 2023 GMT
        Subject: CN=7402289FC97564DC657136E948DA1D53D5162DF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:da:81:ba:a1:97:e5:b0:e1:ad:08:74:60:d8:
                    b0:ab:6c:66:b6:84:11:fc:b9:5b:35:a7:b3:f3:94:
                    78:47:ca:db:9a:d4:f4:d4:79:a2:65:2f:9e:46:8a:
                    42:14:84:8d:fe:69:d8:1a:bd:5c:e9:08:7b:85:69:
                    cd:d8:08:5e:f3:8c:bc:0a:6c:0e:23:83:78:2f:e2:
                    93:99:f4:ed:0d:30:79:57:20:5e:0e:90:15:ad:06:
                    29:7d:fc:6c:93:9c:ef:42:95:46:7d:cd:5a:82:65:
                    a4:2d:3b:c6:62:51:7c:52:94:05:8d:be:ca:27:b1:
                    73:1b:61:07:fb:a9:89:f9:bf:1d:fa:cc:c7:90:66:
                    98:a6:5e:d5:32:f7:c7:f8:a2:d7:c3:db:31:17:71:
                    96:a5:e4:fb:d4:cf:85:8e:a4:3d:05:c5:7b:8e:d9:
                    01:6f:91:c0:8d:63:f0:3b:bc:08:6c:62:75:8e:3c:
                    8a:b0:86:a0:4e:9c:bc:92:cc:82:cd:49:3a:86:90:
                    18:c7:ad:a7:05:31:25:ac:41:eb:df:ea:bb:f0:68:
                    9d:ff:36:9c:c9:61:cc:7b:54:19:53:5a:6f:81:73:
                    c4:31:5b:dc:e6:e4:bd:82:10:a0:22:3d:f6:23:08:
                    57:9c:24:8f:5a:19:67:83:61:76:a4:d8:fd:95:c8:
                    48:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:02:28:9F:C9:75:64:DC:65:71:36:E9:48:DA:1D:53:D5:16:2D:F4
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3133302e3138352e3131382e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.185.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:c1:f4:f8:9e:bf:f2:cc:c0:a2:09:10:8a:78:92:1f:86:52:
         8e:ee:f8:6f:c4:5c:11:3d:42:b3:02:af:92:c8:bd:6b:f7:8d:
         55:2b:3a:3e:d7:2b:1c:4a:a0:db:ff:51:28:06:45:0a:00:2f:
         48:26:15:5f:4c:46:cb:02:f2:59:09:47:e0:9c:3c:04:74:6a:
         ed:0f:6d:66:5d:0e:6d:f0:39:3e:57:cb:2a:76:98:57:1d:b0:
         4e:ee:1c:84:74:0a:d8:fa:04:70:08:02:c8:9e:3c:72:95:24:
         10:fa:a7:c6:9d:8d:bf:2d:b9:dd:65:b3:cb:11:c5:58:6f:fb:
         d8:72:62:65:e4:38:19:3a:c4:2b:0b:65:67:3d:24:bb:b1:27:
         42:32:32:49:7f:da:c6:c2:32:64:e3:4e:f4:43:e4:1f:f0:85:
         6e:83:91:b7:fa:f6:d1:94:d1:1b:41:53:f2:c8:20:31:5c:b6:
         d4:9c:09:07:62:e1:e2:e9:9b:71:89:73:1d:8a:d7:39:5e:00:
         b2:4a:f2:4c:4d:1e:dd:48:e5:f5:6c:89:da:f5:92:9e:2b:3a:
         f2:2f:fb:64:73:fa:fe:fb:f2:c0:8f:79:1d:0b:b1:f1:f6:6f:
         62:d1:91:78:2d:89:fc:bb:3d:fc:27:d0:ce:f2:89:55:d3:ad:
         ee:14:e7:ca
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIULaCaIHIoDdizcZXeVIZTjZpdoT0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWRjOTcwNzU1ODI0Y2I5NjdjYWQ2ZjNiOTY0NzA5YjA5
MmQ0MzA2OTAeFw0yMjEwMjIwNDI4NDFaFw0yMzEwMjEwNDMzNDFaMDMxMTAvBgNV
BAMTKDc0MDIyODlGQzk3NTY0REM2NTcxMzZFOTQ4REExRDUzRDUxNjJERjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX2oG6oZflsOGtCHRg2LCrbGa2
hBH8uVs1p7PzlHhHytua1PTUeaJlL55GikIUhI3+adgavVzpCHuFac3YCF7zjLwK
bA4jg3gv4pOZ9O0NMHlXIF4OkBWtBil9/GyTnO9ClUZ9zVqCZaQtO8ZiUXxSlAWN
vsonsXMbYQf7qYn5vx36zMeQZpimXtUy98f4otfD2zEXcZal5PvUz4WOpD0FxXuO
2QFvkcCNY/A7vAhsYnWOPIqwhqBOnLySzILNSTqGkBjHracFMSWsQevf6rvwaJ3/
NpzJYcx7VBlTWm+Bc8QxW9zm5L2CEKAiPfYjCFecJI9aGWeDYXak2P2VyEgLAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUdAIon8l1ZNxlcTbpSNodU9UWLfQwHwYDVR0j
BBgwFoAUXclwdVgky5Z8rW87lkcJsJLUMGkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzcvNURDOTcwNzU1ODI0Q0I5NjdDQUQ2RjNCOTY0NzA5QjA5
MkQ0MzA2OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hjbHdkVmdreTVaOHJX
ODdsa2NKc0pMVU1Hay5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Ny8zMTMzMzAyZTMxMzgzNTJlMzEzMTM4MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIw
MzUzMTMxMzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIK5djANBgkqhkiG9w0BAQsFAAOCAQEAg8H0
+J6/8szAogkQiniSH4ZSju74b8RcET1CswKvksi9a/eNVSs6PtcrHEqg2/9RKAZF
CgAvSCYVX0xGywLyWQlH4Jw8BHRq7Q9tZl0ObfA5PlfLKnaYVx2wTu4chHQK2PoE
cAgCyJ48cpUkEPqnxp2Nvy253WWzyxHFWG/72HJiZeQ4GTrEKwtlZz0ku7EnQjIy
SX/axsIyZONO9EPkH/CFboORt/r20ZTRG0FT8sggMVy21JwJB2Lh4umbcYlzHYrX
OV4AskryTE0e3Ujl9WyJ2vWSnis68i/7ZHP6/vvywI95HQux8fZvYtGReC2J/Ls9
/CfQzvKJVdOt7hTnyg==
-----END CERTIFICATE-----