Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3138352e3234392e3232362e302f32342d3332203d3e203536383736.roa
File:                     3138352e3234392e3232362e302f32342d3332203d3e203536383736.roa (raw, json)
Hash identifier:          +Vns2wCqjZkb9686tzZ2sFRB2GgpffGbD0SbmeUBt/o=
Subject key identifier:   EC:D5:1F:3C:12:52:E4:42:E9:F2:FA:7B:3B:51:B6:77:38:F2:8A:D8
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       7657D153230B9C4F6CF379BF29637D9AAF07C762
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3138352e3234392e3232362e302f32342d3332203d3e203536383736.roa
Signing time:             Sat 22 Oct 2022 04:33:45 +0000
ROA not before:           Sat 22 Oct 2022 04:28:45 +0000
ROA not after:            Sat 21 Oct 2023 04:33:45 +0000
asID:                     56876
IP address blocks:        185.249.226.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:57:d1:53:23:0b:9c:4f:6c:f3:79:bf:29:63:7d:9a:af:07:c7:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Oct 22 04:28:45 2022 GMT
            Not After : Oct 21 04:33:45 2023 GMT
        Subject: CN=ECD51F3C1252E442E9F2FA7B3B51B67738F28AD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8a:c1:9f:99:c6:41:af:9e:af:6f:a2:23:2d:
                    87:0c:20:23:01:28:14:bb:bb:02:0e:90:55:2a:93:
                    38:8c:a5:06:7d:63:13:35:86:8c:06:79:8a:8e:77:
                    bc:c2:92:51:87:3c:42:54:df:32:26:08:a3:b3:55:
                    70:39:dc:9a:5c:a3:59:4f:51:6b:26:e5:31:2d:87:
                    4f:c0:4f:c6:a4:d4:bc:9e:e9:98:39:ff:a6:92:04:
                    90:57:67:ec:01:1e:b1:fc:cf:05:09:0b:96:d1:f6:
                    37:4a:ea:82:19:64:34:fd:0e:92:03:64:da:72:37:
                    27:01:73:34:a4:0c:b6:66:f5:96:36:be:a3:2b:ce:
                    44:18:da:ba:43:d1:06:fb:dc:9c:b2:16:2f:2c:4e:
                    cb:a1:aa:97:46:0e:3e:ce:6f:39:2c:14:45:91:91:
                    28:26:29:7f:a5:19:f0:90:90:33:fd:09:50:22:ff:
                    27:7c:e6:36:ed:8e:af:d5:70:47:48:1d:12:77:64:
                    43:0a:fe:f8:30:35:33:7e:24:1c:37:7f:91:47:bf:
                    00:dd:b1:c1:f0:e8:9a:cc:e9:a8:86:4e:db:c7:43:
                    98:f3:b8:bf:82:3a:9b:4d:19:45:0c:94:29:41:ac:
                    47:a0:13:55:38:35:b1:a5:3d:f7:fc:05:1e:01:66:
                    89:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D5:1F:3C:12:52:E4:42:E9:F2:FA:7B:3B:51:B6:77:38:F2:8A:D8
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3138352e3234392e3232362e302f32342d3332203d3e203536383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.249.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:08:99:64:cb:9f:41:09:c6:60:30:ef:45:65:1b:ab:9c:c3:
         d8:06:a9:61:93:07:fe:9c:2f:f7:60:68:05:1a:c6:cd:2f:59:
         27:cb:f4:74:1d:c9:33:24:59:1f:5d:ae:03:24:05:5c:fd:3c:
         f2:46:d9:c7:7e:c6:6c:96:cf:c7:6c:8d:8e:32:a2:2b:18:d9:
         c3:47:18:b3:b9:f1:8d:c2:73:42:4d:35:bf:94:47:ae:77:23:
         e3:84:ea:88:28:ec:93:e2:45:52:f6:71:cf:39:c8:84:e6:a8:
         28:50:2f:fc:99:dd:83:b9:1c:eb:68:fe:cb:32:09:92:04:61:
         fd:c3:37:66:76:c3:34:7c:01:00:47:5f:d7:1b:92:f0:28:71:
         70:4e:b5:76:6f:0e:1a:1b:54:b7:41:c1:13:5f:74:d3:97:a5:
         a5:e2:c1:e2:9e:d0:de:0a:3c:e1:c7:a2:d7:98:59:18:1c:62:
         bd:6f:3f:e8:67:27:e4:86:c1:ae:b8:92:33:25:67:ac:15:d0:
         0b:f1:54:58:49:42:c1:e6:53:db:6e:9f:d8:e7:f7:c4:99:29:
         f4:4f:51:2f:b9:32:87:c1:cb:5b:f3:14:b4:cc:ad:55:70:cd:
         14:8f:55:1f:ea:8e:8e:75:07:ab:f3:c6:6a:f3:1b:a1:2d:d9:
         36:24:8f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----