Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3138352e3234392e3232372e302f32342d3332203d3e203531313637.roa
File:                     3138352e3234392e3232372e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          pEh9bycM6QRYee/fZYPVVAgKbVvyRo8HDYBkEmrX2VI=
Subject key identifier:   31:D7:3E:E9:C3:35:BB:0C:6E:3C:25:69:89:27:54:A7:04:2E:CF:C7
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       4A748D086359253A83806209096C175A2306146A
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3138352e3234392e3232372e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:41 +0000
ROA not before:           Sat 22 Oct 2022 04:28:41 +0000
ROA not after:            Sat 21 Oct 2023 04:33:41 +0000
asID:                     51167
IP address blocks:        185.249.227.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:74:8d:08:63:59:25:3a:83:80:62:09:09:6c:17:5a:23:06:14:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Oct 22 04:28:41 2022 GMT
            Not After : Oct 21 04:33:41 2023 GMT
        Subject: CN=31D73EE9C335BB0C6E3C2569892754A7042ECFC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f7:a8:27:25:c7:eb:93:59:85:b3:9b:d7:d0:
                    b4:cb:09:71:2d:b4:b3:94:67:d3:de:33:e5:94:56:
                    70:82:5e:d9:15:f0:29:16:ec:53:30:00:59:a8:a4:
                    ba:bb:06:18:9f:14:9b:6e:cc:25:78:38:fd:7f:79:
                    90:01:60:3e:6a:fb:5a:b8:01:d1:bd:59:83:47:9c:
                    cc:06:8a:c9:3a:8f:a6:f5:56:1a:70:bd:ac:29:43:
                    f6:61:01:a1:d6:aa:7e:db:5d:0b:47:8e:7c:89:67:
                    da:63:96:b7:d6:15:6d:dd:f7:bd:6d:34:5f:87:6b:
                    53:fd:84:d2:f4:11:63:cd:2d:21:6d:3a:fa:d9:59:
                    0f:f6:f0:1a:99:a0:5e:2c:f6:85:89:9b:9f:a6:74:
                    ff:71:d8:df:4b:b6:a3:7d:60:bf:40:95:12:40:37:
                    76:f4:91:4f:08:a2:a2:d0:2a:38:a7:c8:5d:dc:89:
                    46:6e:12:dd:0d:89:21:60:38:c4:83:31:98:17:03:
                    b3:d5:cb:cd:6a:22:2a:cf:7a:05:8e:7a:64:4d:7e:
                    bb:e6:fc:b5:26:21:b4:c5:ed:c7:77:1e:a1:85:fa:
                    19:23:d7:86:36:ee:ff:5a:4a:b2:30:de:3b:32:22:
                    4c:33:4a:e3:9d:81:90:b0:9e:c9:71:c8:a4:0a:aa:
                    6d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D7:3E:E9:C3:35:BB:0C:6E:3C:25:69:89:27:54:A7:04:2E:CF:C7
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3138352e3234392e3232372e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.249.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:ff:dc:9c:d2:a8:67:8f:b6:b8:2b:34:66:ee:40:14:60:2e:
         23:a9:50:fe:58:ab:99:a9:a6:4d:7c:e7:87:91:0c:a1:51:d9:
         36:b5:fe:f1:e3:19:9b:e1:82:78:74:4f:5b:0d:14:53:ff:9b:
         28:03:62:8a:aa:9f:e5:c0:f2:ab:1d:f0:c0:2f:1f:d4:28:0b:
         5f:f3:02:32:d7:da:7c:91:99:24:01:fe:52:c3:b4:42:69:23:
         c5:67:a2:ee:78:c5:08:c9:7f:46:1c:22:3d:02:c6:44:ca:83:
         2e:d1:b7:7b:d1:77:4c:13:93:41:30:0c:8f:8e:8e:1d:9b:56:
         ff:24:db:f8:1b:d0:07:8f:b8:3d:ef:3c:41:84:b3:e6:81:4b:
         f6:a8:19:4b:82:f2:28:85:ac:29:c9:f9:9e:db:2b:fd:5f:e4:
         88:9a:a8:2b:62:5c:ca:0f:e9:ac:dd:63:45:0f:43:22:36:1c:
         06:64:22:0b:78:45:d6:78:dd:45:c5:31:c7:9b:45:43:46:62:
         0c:00:10:c2:b4:67:e6:ed:fe:ff:6a:3b:f8:53:78:82:19:b9:
         40:13:15:e6:76:ff:e5:4f:a8:af:0a:b8:fe:66:94:1a:94:fa:
         dd:a5:2b:bb:0c:ed:45:15:53:e2:d4:d6:8d:12:d7:03:d6:b4:
         3a:d4:0c:66
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUSnSNCGNZJTqDgGIJCWwXWiMGFGowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWRjOTcwNzU1ODI0Y2I5NjdjYWQ2ZjNiOTY0NzA5YjA5
MmQ0MzA2OTAeFw0yMjEwMjIwNDI4NDFaFw0yMzEwMjEwNDMzNDFaMDMxMTAvBgNV
BAMTKDMxRDczRUU5QzMzNUJCMEM2RTNDMjU2OTg5Mjc1NEE3MDQyRUNGQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK96gnJcfrk1mFs5vX0LTLCXEt
tLOUZ9PeM+WUVnCCXtkV8CkW7FMwAFmopLq7BhifFJtuzCV4OP1/eZABYD5q+1q4
AdG9WYNHnMwGisk6j6b1VhpwvawpQ/ZhAaHWqn7bXQtHjnyJZ9pjlrfWFW3d971t
NF+Ha1P9hNL0EWPNLSFtOvrZWQ/28BqZoF4s9oWJm5+mdP9x2N9LtqN9YL9AlRJA
N3b0kU8IoqLQKjinyF3ciUZuEt0NiSFgOMSDMZgXA7PVy81qIirPegWOemRNfrvm
/LUmIbTF7cd3HqGF+hkj14Y27v9aSrIw3jsyIkwzSuOdgZCwnslxyKQKqm2DAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUMdc+6cM1uwxuPCVpiSdUpwQuz8cwHwYDVR0j
BBgwFoAUXclwdVgky5Z8rW87lkcJsJLUMGkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzcvNURDOTcwNzU1ODI0Q0I5NjdDQUQ2RjNCOTY0NzA5QjA5
MkQ0MzA2OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hjbHdkVmdreTVaOHJX
ODdsa2NKc0pMVU1Hay5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Ny8zMTM4MzUyZTMyMzQzOTJlMzIzMjM3MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIw
MzUzMTMxMzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALn54zANBgkqhkiG9w0BAQsFAAOCAQEAl//c
nNKoZ4+2uCs0Zu5AFGAuI6lQ/lirmammTXznh5EMoVHZNrX+8eMZm+GCeHRPWw0U
U/+bKANiiqqf5cDyqx3wwC8f1CgLX/MCMtfafJGZJAH+UsO0QmkjxWei7njFCMl/
RhwiPQLGRMqDLtG3e9F3TBOTQTAMj46OHZtW/yTb+BvQB4+4Pe88QYSz5oFL9qgZ
S4LyKIWsKcn5ntsr/V/kiJqoK2Jcyg/prN1jRQ9DIjYcBmQiC3hF1njdRcUxx5tF
Q0ZiDAAQwrRn5u3+/2o7+FN4ghm5QBMV5nb/5U+orwq4/maUGpT63aUruwztRRVT
4tTWjRLXA9a0OtQMZg==
-----END CERTIFICATE-----