Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e38362e302f32342d3332203d3e203133323133.roa
File:                     3139342e36302e38362e302f32342d3332203d3e203133323133.roa (raw, json)
Hash identifier:          qrsYhPkPNtPMwUmHBP0y8L+Ga/BBuUpm4fyHxrQHJuY=
Subject key identifier:   79:81:0E:31:3D:41:59:61:AB:A4:4B:BA:CE:84:4B:7F:61:B4:02:55
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       16F9CF4B2EF06BF4B75766182BF34C25210A6592
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e38362e302f32342d3332203d3e203133323133.roa
Signing time:             Wed 28 Dec 2022 09:37:33 +0000
ROA not before:           Wed 28 Dec 2022 09:32:33 +0000
ROA not after:            Wed 27 Dec 2023 09:37:33 +0000
asID:                     13213
IP address blocks:        194.60.86.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:f9:cf:4b:2e:f0:6b:f4:b7:57:66:18:2b:f3:4c:25:21:0a:65:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Dec 28 09:32:33 2022 GMT
            Not After : Dec 27 09:37:33 2023 GMT
        Subject: CN=79810E313D415961ABA44BBACE844B7F61B40255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:df:e1:22:72:d1:2e:d8:7a:3c:e6:81:49:fe:
                    88:72:31:a8:dd:8f:c0:97:30:a4:c4:78:f4:a0:e7:
                    6b:a5:6a:97:dc:bd:0d:eb:fe:b3:0c:14:a0:99:78:
                    7e:a5:93:cd:0b:80:e8:e4:44:3b:94:cf:61:85:7c:
                    2a:44:e8:50:04:10:77:18:89:b0:4b:3a:98:26:4e:
                    4e:88:69:f2:97:6a:51:eb:3b:9a:b5:68:97:78:e6:
                    a4:64:ef:47:d1:e4:3e:ba:6d:9a:fb:26:1f:d6:88:
                    c3:56:56:43:d9:0c:90:ec:fd:12:ac:79:af:e9:18:
                    d3:51:24:fd:a2:be:4c:04:9f:d0:ed:33:bf:6c:3b:
                    f2:a3:b8:3f:63:2c:81:b5:a5:cd:d7:fd:33:a4:5a:
                    4c:e1:f0:23:93:7d:6f:8d:e2:84:d0:11:f4:9e:d1:
                    07:31:15:05:53:50:db:ac:04:3b:3e:e6:ef:0e:ac:
                    df:36:41:58:f4:9e:71:29:6a:0d:9c:37:28:dd:d3:
                    a8:3b:26:45:11:47:a4:c0:90:d1:e5:4b:20:40:b0:
                    9b:7c:25:31:52:0d:99:fc:75:7b:fb:e4:ef:40:9c:
                    cd:35:d9:18:d0:41:2a:5a:f0:3a:13:5f:59:12:85:
                    7a:13:c7:95:70:64:fe:c5:5a:b5:f9:64:04:da:b6:
                    d6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:81:0E:31:3D:41:59:61:AB:A4:4B:BA:CE:84:4B:7F:61:B4:02:55
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e38362e302f32342d3332203d3e203133323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.60.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:53:b1:67:ef:3a:a1:bb:98:57:15:2e:f1:06:88:d6:21:f6:
         57:92:a5:75:5b:dc:a8:58:3b:f2:20:95:f5:b7:02:bd:25:ed:
         07:6b:2b:ec:9a:98:ff:c4:92:10:42:db:82:63:bc:20:a4:3d:
         79:fb:52:ce:22:2f:93:cf:56:74:de:71:d2:83:e5:57:e7:41:
         1c:db:ce:1d:d0:61:e7:bb:59:2f:aa:1b:eb:be:06:00:1f:fe:
         e1:f3:3a:f0:9c:f9:61:ff:86:00:4b:d6:63:c4:49:c2:ab:d7:
         89:73:21:e8:0d:ab:0f:e2:56:f7:30:38:2c:58:1c:34:5e:8e:
         a4:d5:24:c1:3d:f6:1b:cb:f6:63:8c:88:27:66:3b:be:21:eb:
         5a:9e:58:6d:05:4d:8b:99:f7:84:d7:2e:94:de:7f:49:77:e1:
         29:e3:7c:5a:a6:37:4a:86:32:96:47:77:86:95:b8:0e:fb:56:
         ff:9b:ef:4c:12:7d:cc:26:15:5b:e8:9b:2f:c3:37:e3:14:ba:
         49:f1:b0:98:b7:b3:72:56:ac:a6:0a:1e:6c:29:7b:d2:0c:38:
         82:b4:69:b2:2c:d3:36:0c:17:75:7a:34:c3:08:8d:8b:c8:7e:
         2a:30:36:bd:5c:ba:8c:b3:a7:a1:a4:dc:41:59:cd:8a:bf:77:
         a7:7d:f9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----