Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e38372e302f32342d3234203d3e203631333137.roa
File:                     3139342e36302e38372e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          ZjAf7kTalm9Sa93JYuqh58HtK1p06Vleno243CUMZVI=
Subject key identifier:   3D:4A:CC:F3:E9:89:2B:46:09:FB:20:A3:30:6B:AC:E1:4C:20:C8:7E
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       231895C0136517516EA7FC9CBD586D2D62526EC0
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e38372e302f32342d3234203d3e203631333137.roa
Signing time:             Sat 22 Oct 2022 04:33:44 +0000
ROA not before:           Sat 22 Oct 2022 04:28:44 +0000
ROA not after:            Sat 21 Oct 2023 04:33:44 +0000
asID:                     61317
IP address blocks:        194.60.87.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:18:95:c0:13:65:17:51:6e:a7:fc:9c:bd:58:6d:2d:62:52:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Oct 22 04:28:44 2022 GMT
            Not After : Oct 21 04:33:44 2023 GMT
        Subject: CN=3D4ACCF3E9892B4609FB20A3306BACE14C20C87E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:08:5f:b5:8c:6e:1b:f4:64:53:34:5f:84:07:
                    17:d7:34:5d:3e:f7:8a:49:d2:4e:a4:c4:b6:c2:98:
                    50:e5:73:fd:0d:d6:6d:39:94:17:b6:ec:81:e2:14:
                    e7:50:36:2e:bf:8f:c0:73:3f:98:96:29:bf:6c:8b:
                    6d:48:8e:a7:85:be:39:50:2d:93:fc:e5:85:85:98:
                    51:0b:d8:73:ee:3f:c4:e3:6f:79:b7:a1:0f:11:4e:
                    d7:71:c9:59:fa:26:25:65:d7:5b:7f:2c:be:90:a7:
                    a2:75:4c:ff:69:7c:8f:61:e1:c7:fc:dd:d3:53:74:
                    45:86:9d:71:2b:9e:14:18:69:ea:2e:8a:8b:cd:cc:
                    1c:fe:17:35:49:7d:bf:be:7d:95:b2:11:b1:c1:81:
                    c0:91:6d:88:e9:f4:a0:24:42:92:47:1b:e4:ee:68:
                    6c:4d:6f:6f:43:72:de:ba:fc:77:ce:fe:17:0f:77:
                    d8:8d:ba:91:12:36:5e:7a:40:0d:3a:9d:f9:4b:f0:
                    9f:aa:82:6f:0d:52:bb:a5:39:5a:ed:00:c7:74:6a:
                    d8:0a:92:46:86:ee:68:e1:e1:20:5c:37:2d:bb:49:
                    51:b7:87:1e:d7:0d:cb:8e:a9:9d:07:5a:04:9a:08:
                    ad:3b:34:8f:fd:a6:78:da:b3:21:d3:f4:20:28:5e:
                    2e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:4A:CC:F3:E9:89:2B:46:09:FB:20:A3:30:6B:AC:E1:4C:20:C8:7E
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e38372e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.60.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:30:2d:1f:ba:96:b8:30:13:3d:6b:22:87:51:e5:31:b9:4e:
         5b:2f:53:5e:8a:f2:95:fe:41:d6:81:72:31:34:8e:00:fb:cf:
         f3:36:5f:c1:b3:74:43:05:9f:ca:2a:0f:92:d7:da:89:b5:39:
         b6:f9:80:27:ee:dd:67:90:d9:09:93:f3:93:6b:40:fa:d9:83:
         e1:78:de:be:b5:f7:2e:14:88:50:77:22:cb:60:3a:92:58:c8:
         90:b8:d2:d4:6f:99:3e:62:fa:37:0d:8c:8a:f0:3c:d1:9e:7d:
         9d:6f:4c:af:f8:e8:ef:6e:1b:54:d9:2b:df:f9:3f:d5:a9:71:
         0b:62:e2:37:af:f4:a9:10:fe:9b:00:a7:f4:c9:5a:93:0f:13:
         29:9f:c5:3c:05:ed:c9:0e:3f:29:95:9d:35:22:36:5a:5d:2c:
         28:2f:ee:05:0f:23:e7:06:bf:4e:b8:a8:50:28:1d:2e:d0:31:
         c0:fe:bd:1c:99:93:6a:5a:5b:7d:1f:97:8f:3e:92:8d:43:18:
         47:cf:04:50:cf:85:9b:9c:a4:ac:f5:10:8f:a4:01:a0:87:97:
         f1:dc:71:25:9b:d4:03:ce:85:14:3e:9d:be:fd:a2:f7:48:06:
         81:1e:d8:da:ec:0f:0e:f2:92:6f:4e:46:ed:5e:6a:e2:ca:60:
         3d:d8:47:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----