Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139332e33322e3137332e302f32342d3234203d3e20323031333431.roa
File:                     3139332e33322e3137332e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier:          r9tGw5hlRACyto8mDz1MJkB7xo+E4rySl9jZMRpBzpU=
Subject key identifier:   9E:71:62:A1:54:EF:C7:A6:70:19:A9:D3:21:05:49:FC:1F:6D:35:2E
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       685C525646F96678BAA2CA3D7D36EF4F62B4B327
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139332e33322e3137332e302f32342d3234203d3e20323031333431.roa
Signing time:             Sat 22 Oct 2022 04:33:43 +0000
ROA not before:           Sat 22 Oct 2022 04:28:43 +0000
ROA not after:            Sat 21 Oct 2023 04:33:43 +0000
asID:                     201341
IP address blocks:        193.32.173.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:5c:52:56:46:f9:66:78:ba:a2:ca:3d:7d:36:ef:4f:62:b4:b3:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Oct 22 04:28:43 2022 GMT
            Not After : Oct 21 04:33:43 2023 GMT
        Subject: CN=9E7162A154EFC7A67019A9D3210549FC1F6D352E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:61:d7:10:80:5b:df:df:11:f5:99:9e:bd:97:
                    2e:03:ae:6f:72:6a:5f:ed:eb:9b:d6:46:33:7c:32:
                    93:96:79:f4:cf:99:f6:5c:d5:26:3a:21:f5:ab:22:
                    b6:e1:5b:87:0d:63:37:20:f2:95:5d:36:69:27:68:
                    5b:ab:0f:2c:af:b7:82:e6:80:3b:05:d6:d8:9e:ae:
                    0c:28:83:59:a8:ea:ba:a8:5a:6b:d7:72:88:5c:9a:
                    fa:fc:b5:d4:e4:56:dd:4b:1d:68:19:9a:3c:1c:dc:
                    75:13:27:fb:1f:3c:ef:d4:11:d7:38:13:fd:1a:8a:
                    01:e9:0a:96:0b:f3:33:60:9a:fa:9c:2c:eb:77:e1:
                    c8:e4:d1:3a:ef:92:09:60:71:dc:a1:7e:fe:78:e6:
                    71:83:60:94:bf:e1:40:7e:85:b0:47:94:a7:fb:3c:
                    b2:56:4d:4e:24:d7:06:fb:cb:6d:93:ab:94:65:90:
                    06:97:4f:07:13:6a:7e:89:ce:b0:87:66:cd:54:f1:
                    a4:61:e3:a7:a6:a3:4e:80:51:b6:3d:f0:21:20:5b:
                    73:d0:df:00:27:07:84:81:b6:9d:b3:21:0c:dd:f9:
                    b4:c1:8d:8d:e4:70:da:88:a1:27:79:ac:a2:ba:fb:
                    e3:b6:77:2a:6b:eb:2e:05:8b:52:4e:64:40:11:9e:
                    e0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:71:62:A1:54:EF:C7:A6:70:19:A9:D3:21:05:49:FC:1F:6D:35:2E
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139332e33322e3137332e302f32342d3234203d3e20323031333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.32.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:6f:ee:ad:48:62:47:e8:68:f5:41:0f:36:c1:41:16:b6:47:
         db:e9:36:8a:d2:13:cf:d9:39:6d:32:1a:e8:b6:38:1c:0d:c6:
         47:ec:d4:70:0d:85:b6:2d:03:f5:68:1b:ec:3f:41:2a:b0:81:
         68:91:00:a1:4a:ea:05:de:19:2a:14:cf:1c:c1:13:1a:24:aa:
         a0:bc:38:d8:05:bb:b4:3f:c1:85:d1:02:19:1c:7a:3c:e8:a8:
         e4:7b:ca:5b:ae:07:4b:b5:2d:a0:0d:cd:aa:d4:67:02:0d:51:
         df:f0:c8:e9:0b:f1:6d:a1:dd:9e:b4:64:90:32:03:12:0f:38:
         cc:38:6f:26:1e:50:9c:34:0a:2f:e8:af:ac:d7:bb:35:69:9d:
         63:f7:9e:25:89:ae:0c:23:82:18:1e:0b:74:a2:52:9b:b4:04:
         3c:46:7b:5f:13:80:e1:a5:d3:3f:c5:aa:68:71:a2:75:d1:55:
         c8:15:5f:ff:53:a6:eb:d9:43:39:42:af:fd:3f:89:ed:b4:01:
         63:b1:20:4e:96:7e:c5:d0:a3:c7:27:f8:99:43:96:d6:8b:da:
         da:6e:1b:ba:cd:97:b3:2a:77:19:05:18:57:5a:ee:7e:0c:f8:
         57:e2:fb:bd:b3:1d:a9:5a:d0:dc:56:75:dc:b5:02:e2:7c:ed:
         cf:ef:38:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----