Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3138352e3234392e3232352e302f32342d3332203d3e203531313637.roa
File:                     3138352e3234392e3232352e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          pSNq74SGXqFOe6BKxiyQTtRt9rWEAdiXJgsHI5lJNnE=
Subject key identifier:   07:D0:97:BE:78:F7:30:88:C8:46:51:FA:FC:1C:56:9C:62:B5:0B:85
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       3C1E7F6C2F5B863D7E6E3667CC4572A9ED00C9D1
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3138352e3234392e3232352e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:42 +0000
ROA not before:           Sat 22 Oct 2022 04:28:42 +0000
ROA not after:            Sat 21 Oct 2023 04:33:42 +0000
asID:                     51167
IP address blocks:        185.249.225.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:1e:7f:6c:2f:5b:86:3d:7e:6e:36:67:cc:45:72:a9:ed:00:c9:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Oct 22 04:28:42 2022 GMT
            Not After : Oct 21 04:33:42 2023 GMT
        Subject: CN=07D097BE78F73088C84651FAFC1C569C62B50B85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a4:2a:4a:23:2b:69:06:bc:d7:62:4e:24:07:
                    9b:31:6e:d1:85:a7:c4:46:52:95:f3:24:97:26:5d:
                    42:38:a4:3b:88:60:88:b9:05:b0:b8:e3:51:92:2a:
                    dc:03:db:89:d8:c2:4b:77:44:7c:16:cb:69:42:3d:
                    7c:0c:5c:b2:2b:8c:67:e6:70:8e:45:6f:b6:f5:be:
                    10:9c:3c:28:7c:a2:fb:5a:29:7c:70:e4:c7:03:ec:
                    e2:2e:b4:22:45:0a:fd:60:5b:4e:ee:10:f8:ce:b1:
                    7e:ae:c8:ea:2c:10:c1:0f:32:2f:72:a4:d1:95:17:
                    d5:9b:ca:37:b5:1d:22:88:55:b8:ee:06:29:6f:22:
                    78:cf:8c:f1:74:ed:f4:da:d9:03:20:ac:80:3c:dc:
                    ca:07:4e:0a:0f:be:a9:75:7f:2e:77:15:73:89:4f:
                    3f:89:67:09:d5:69:f7:20:40:54:ed:0c:f1:66:03:
                    9d:70:74:aa:4e:a8:7f:c3:07:d3:d2:17:d3:62:9d:
                    bc:ea:db:28:8d:c8:21:8c:78:f8:59:ea:45:3c:98:
                    10:75:08:10:59:12:01:12:0d:76:02:0e:b0:a7:6c:
                    98:03:c7:f8:5f:f7:08:fb:46:37:a8:57:4b:b7:f2:
                    6f:d3:9d:3f:fb:22:bc:12:05:f3:6d:74:26:ad:da:
                    f8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D0:97:BE:78:F7:30:88:C8:46:51:FA:FC:1C:56:9C:62:B5:0B:85
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3138352e3234392e3232352e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.249.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:3d:66:1e:a0:11:d4:e2:8f:ac:83:67:4d:34:f7:7d:ae:13:
         76:3c:03:4f:93:fa:7b:4e:6b:f9:00:12:e0:54:fd:85:4c:b3:
         2e:30:16:d6:fa:b0:e0:cf:aa:67:a7:a1:ae:7f:36:39:f4:9d:
         0e:45:33:5e:32:a6:21:44:ff:9c:6e:3a:94:d6:90:7e:14:3c:
         03:48:3b:2b:e1:b6:39:0b:c5:dc:a4:82:6e:e7:55:87:c4:77:
         17:2a:aa:c4:54:65:db:2e:59:48:dd:9c:d4:b5:31:4e:b7:33:
         f6:47:98:4e:3e:25:8f:b0:04:34:9e:42:f7:a9:e1:b2:22:27:
         8e:d6:60:5f:5f:8b:55:fd:41:cd:9d:31:dc:84:79:e4:58:e0:
         39:a0:a7:1a:ad:36:a2:6b:06:17:10:3f:19:f6:13:04:e4:3c:
         5e:a3:96:68:cd:72:74:58:59:5e:38:ed:d7:0f:8d:2c:44:ed:
         5e:32:0d:34:e7:95:0c:16:75:89:70:7c:60:28:1f:63:ea:94:
         58:04:d6:5c:99:a1:95:13:16:dd:f5:a6:77:7c:32:81:c5:f8:
         97:0b:7e:df:bf:3d:13:3d:2c:e7:f5:2a:be:48:94:9e:27:1f:
         5b:bd:20:35:d0:e9:ba:94:c6:08:74:44:5b:ed:cb:e7:40:9b:
         76:4a:05:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----