Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139342e3131332e36362e302f32332d3234203d3e203631333137.roa
File:                     3139342e3131332e36362e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          k+pQwDgwYh0tOXTgtLIGpJAl73CDu/6XQgsGGZzF8lM=
Subject key identifier:   77:E4:E8:1B:99:FD:E9:43:B1:58:55:51:C9:BF:E4:58:A3:DA:F7:E5
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       0789DDF6FFEA415DA7CCD17907644A76A9887EE8
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e3131332e36362e302f32332d3234203d3e203631333137.roa
Signing time:             Tue 28 Jun 2022 04:41:01 +0000
ROA not before:           Tue 28 Jun 2022 04:36:01 +0000
ROA not after:            Tue 27 Jun 2023 04:41:01 +0000
asID:                     61317
IP address blocks:        194.113.66.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:89:dd:f6:ff:ea:41:5d:a7:cc:d1:79:07:64:4a:76:a9:88:7e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Jun 28 04:36:01 2022 GMT
            Not After : Jun 27 04:41:01 2023 GMT
        Subject: CN=77E4E81B99FDE943B1585551C9BFE458A3DAF7E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a5:cf:97:74:1f:2e:33:46:11:6b:6c:44:5b:
                    9e:bd:53:46:d8:aa:00:6c:50:63:11:7d:90:0a:f0:
                    26:4e:52:97:d8:1b:3e:27:84:4e:86:25:62:5f:4a:
                    e7:fb:9d:b8:e4:d7:9a:fa:b5:16:03:7d:e0:2d:fe:
                    56:a3:df:e5:74:b8:da:75:fa:d5:ee:34:33:5b:54:
                    77:f1:ce:fb:c4:6e:78:4c:03:4d:57:ca:0b:14:22:
                    d8:25:d1:f5:65:f9:9c:b3:9c:b7:6b:71:9b:67:b5:
                    0a:02:62:00:74:53:bf:03:a9:7d:00:4f:9c:83:a0:
                    41:97:80:3e:6b:d2:1d:c7:0b:a2:6c:71:9c:3f:12:
                    ff:f2:31:ac:a8:9d:8d:18:a9:f8:11:76:43:10:ef:
                    49:6c:91:2d:90:1a:41:2d:ef:0b:75:e9:29:6d:0e:
                    f4:74:9d:a5:d0:17:a9:2b:fe:fe:06:cd:e3:4c:a3:
                    8e:f4:c4:c5:67:66:33:0e:69:75:35:76:9c:59:a0:
                    9b:c7:e8:ff:27:00:1a:bc:ff:cf:7f:97:42:d7:0d:
                    b9:5c:6f:91:23:ab:02:81:5f:bd:66:6e:c2:3f:27:
                    fe:a1:ad:a8:64:4c:56:35:f0:e7:02:9c:c8:c3:7f:
                    67:32:b3:dc:00:bc:af:b4:63:cc:aa:af:35:c8:b4:
                    a3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E4:E8:1B:99:FD:E9:43:B1:58:55:51:C9:BF:E4:58:A3:DA:F7:E5
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e3131332e36362e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.113.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:11:91:48:b7:3a:15:46:6e:61:59:1e:ed:7b:de:7b:cc:5e:
         c5:de:75:37:97:24:1a:27:ce:c6:4d:74:38:25:a9:2b:32:d8:
         15:29:b2:85:d3:ee:27:70:e5:7d:46:9a:99:89:2a:d5:25:f4:
         b9:47:08:28:86:e5:6a:d1:0b:e3:21:61:36:2b:62:fc:c2:fd:
         dc:f3:e5:f7:7e:28:30:cc:d3:a4:b5:7a:a7:19:f3:1f:67:51:
         41:48:b5:5a:9f:67:d4:29:3d:a6:51:52:f4:9d:ef:f2:f0:67:
         71:e9:37:fa:63:10:79:0a:c6:1e:fb:3d:ce:26:de:99:f9:5f:
         14:d8:f5:3d:a0:f8:7b:6b:78:58:53:03:83:f6:78:17:e5:8c:
         7e:c4:1f:68:2f:86:5e:60:06:95:88:ce:91:bc:69:77:3d:a1:
         1e:24:73:0f:4d:af:64:5c:79:b4:4f:fc:07:79:ed:d1:92:58:
         5c:2b:fb:a0:cf:36:6c:1e:23:61:30:d3:8f:88:47:07:1b:dc:
         b4:4b:c6:2c:5c:bf:0c:68:19:d3:3d:1e:2a:85:c6:6a:23:8f:
         0a:c9:95:d3:2e:73:7b:10:37:61:d7:46:c6:ce:1a:3d:71:75:
         19:17:a9:5f:c8:12:5f:cf:57:aa:1d:a9:93:7f:56:0e:b5:78:
         fa:d2:2b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----