Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139342e33352e3132302e302f32342d3332203d3e203531313637.roa
File:                     3139342e33352e3132302e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          C9bphA6YRk71DPdOWz8lu2Dbkbownx6tPbAZ2LzjEKM=
Subject key identifier:   FC:17:A0:1C:AE:F5:66:4A:8B:F2:0E:B8:12:0E:DA:4E:10:98:31:48
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       48AE54F6B8C14EA74094C7FB0F925F857DFAB6EE
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e33352e3132302e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:44 +0000
ROA not before:           Sat 22 Oct 2022 04:28:44 +0000
ROA not after:            Sat 21 Oct 2023 04:33:44 +0000
asID:                     51167
IP address blocks:        194.35.120.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ae:54:f6:b8:c1:4e:a7:40:94:c7:fb:0f:92:5f:85:7d:fa:b6:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Oct 22 04:28:44 2022 GMT
            Not After : Oct 21 04:33:44 2023 GMT
        Subject: CN=FC17A01CAEF5664A8BF20EB8120EDA4E10983148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:64:04:32:03:c2:b9:1f:ee:42:f5:29:73:0c:
                    8c:2d:a6:d0:f8:21:8b:ba:3a:95:7f:c2:7a:1b:8c:
                    b9:32:dd:8d:3d:de:c3:ef:d8:37:a9:ab:81:a5:11:
                    bc:38:ff:19:bd:c8:cb:e0:54:74:d3:74:c2:c0:73:
                    2d:a0:07:11:ec:b9:ea:3b:6d:49:97:8e:a7:8a:59:
                    cd:f0:65:fa:2f:aa:5b:5b:e0:d9:01:e3:d8:b2:65:
                    01:a3:71:24:b9:46:fb:23:63:21:7b:f8:0e:0d:14:
                    a8:a7:f4:70:52:1f:e2:19:de:66:e2:73:90:27:f3:
                    61:68:31:89:ad:b0:49:ce:3b:30:e3:b6:a1:ea:ed:
                    3f:81:b1:3f:c8:3f:ab:11:b1:92:87:82:4f:83:77:
                    08:3c:8f:d7:26:40:2c:ae:99:15:21:6b:6f:5d:e9:
                    4f:bb:2e:6b:80:1d:ae:af:3e:b5:e3:8f:f1:d0:59:
                    b2:0d:d6:70:ad:93:f9:0f:1a:77:aa:1e:1b:31:72:
                    6e:20:24:10:f2:aa:80:78:76:de:72:23:20:df:1c:
                    be:16:48:ca:fe:0b:7a:18:ff:55:23:80:a4:69:c7:
                    6b:b6:d1:57:a9:ed:45:1d:af:41:09:83:1b:11:8c:
                    75:20:9d:20:2b:e1:24:2b:9c:f2:a3:43:d1:a4:a2:
                    3b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:17:A0:1C:AE:F5:66:4A:8B:F2:0E:B8:12:0E:DA:4E:10:98:31:48
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e33352e3132302e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.35.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:e8:23:7f:50:da:0f:f4:0c:1c:4f:ef:54:a0:bd:e1:5d:7f:
         31:8a:43:54:09:11:13:f9:c8:69:9d:5b:07:c0:89:dd:93:a2:
         3c:71:2b:48:d1:64:e2:4a:42:d2:85:80:3e:10:f3:9a:5d:e4:
         52:fa:39:ef:f6:b4:49:0c:7c:11:41:0f:5a:3a:5e:27:09:52:
         07:91:28:67:bf:ae:3c:85:03:8b:51:77:1d:44:9e:30:05:c9:
         e5:a1:78:be:71:3b:42:79:8a:b3:b8:0c:69:5d:4c:b5:23:a0:
         dc:71:b1:27:3f:f2:30:bb:93:84:f2:d9:ed:e3:f4:ed:86:fb:
         5a:c3:9a:8c:98:83:4b:54:de:f5:c4:dc:dc:a4:69:96:ac:28:
         46:a4:3f:20:66:60:12:f6:b7:ce:72:28:4f:03:09:0e:b6:bd:
         b3:80:6c:d2:7d:3f:ee:1e:c9:81:9e:13:b7:8c:71:9a:37:0d:
         cb:89:3a:d8:02:53:29:17:91:ad:cc:ba:73:78:0e:50:28:e0:
         8b:02:5b:fc:15:c4:77:dc:08:38:d3:45:da:36:f9:d0:58:6a:
         d6:60:39:80:8d:59:23:a3:23:16:59:f9:cb:e4:2c:9a:33:3d:
         ae:4d:75:ea:18:a5:75:5b:28:9a:f7:37:d2:35:94:5d:c9:a9:
         5f:af:13:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----