Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/34352e3133302e3130372e302f32342d3332203d3e203536383736.roa
File:                     34352e3133302e3130372e302f32342d3332203d3e203536383736.roa (raw, json)
Hash identifier:          pCNRiqYwh+pvr4D1KiMLhxapctrTMu0wde8QCqAU2hE=
Subject key identifier:   E5:C1:62:10:52:85:D1:01:3B:B3:5B:C9:07:28:7F:DA:4B:2A:4F:42
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       1DA3C00AD1AFF348A3CFE68055A803C4B41A197B
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e3133302e3130372e302f32342d3332203d3e203536383736.roa
Signing time:             Sat 22 Oct 2022 04:33:45 +0000
ROA not before:           Sat 22 Oct 2022 04:28:45 +0000
ROA not after:            Sat 21 Oct 2023 04:33:45 +0000
asID:                     56876
IP address blocks:        45.130.107.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:a3:c0:0a:d1:af:f3:48:a3:cf:e6:80:55:a8:03:c4:b4:1a:19:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Oct 22 04:28:45 2022 GMT
            Not After : Oct 21 04:33:45 2023 GMT
        Subject: CN=E5C162105285D1013BB35BC907287FDA4B2A4F42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:dc:6b:7f:2e:68:1d:a9:d3:01:59:02:fc:a9:
                    5d:87:05:9d:69:ab:8c:06:64:c3:d8:c7:16:db:91:
                    11:8a:d0:57:04:22:dd:c6:0b:41:56:b1:a6:32:88:
                    a0:33:72:12:44:05:9a:fe:b2:b2:db:b9:f8:9f:39:
                    15:47:04:ba:45:0a:8b:4b:37:e6:65:39:05:a0:a3:
                    cc:b3:bb:bd:2c:2f:69:88:52:d5:4b:78:32:59:68:
                    69:03:e2:2f:b7:1d:c0:4a:c1:89:3e:f1:b9:61:de:
                    bc:51:d6:cc:e8:e6:93:09:70:ef:ce:d3:09:c5:4c:
                    94:df:99:25:b8:3a:86:7b:79:06:56:39:71:b2:3c:
                    14:79:d1:b1:ce:97:2e:ea:b8:ef:05:d4:f8:02:3e:
                    9d:05:88:8e:d0:1d:14:25:bc:68:58:0d:d4:49:4c:
                    11:1e:b2:ac:c1:e5:6d:e1:b9:99:0f:78:d3:fd:60:
                    fd:63:15:b9:b7:7f:d0:5b:d5:e0:2a:65:69:b4:b4:
                    cc:68:b5:87:f5:14:98:ce:bd:f1:8c:ae:45:37:64:
                    38:97:63:5c:ef:59:41:67:94:1e:e6:09:9d:43:12:
                    1d:4a:d9:3c:55:fc:6a:8e:20:ab:11:a3:7e:4f:dd:
                    fd:59:3c:d9:f2:b9:4a:72:f6:ef:9f:76:fe:1b:42:
                    87:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C1:62:10:52:85:D1:01:3B:B3:5B:C9:07:28:7F:DA:4B:2A:4F:42
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e3133302e3130372e302f32342d3332203d3e203536383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.130.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:f4:24:e5:2a:6f:ad:0a:ff:df:ee:cb:b6:75:33:4d:ca:ac:
         ae:b3:78:40:d8:02:57:b4:9f:fb:62:ca:ee:5d:f9:de:77:8a:
         08:4b:1e:d9:31:50:b9:1e:be:16:57:1d:67:33:67:b7:f3:c4:
         73:1f:d1:cd:99:a0:75:b8:e5:7b:f4:f6:55:7d:5e:2f:46:56:
         b8:8c:0f:f0:34:b9:36:e4:90:df:b6:3d:91:d1:6d:2c:d9:a8:
         7e:44:c3:c3:ef:9c:30:72:56:be:3f:d9:19:d6:13:b0:d5:c4:
         9f:6f:ae:04:34:94:35:aa:20:9e:7a:20:c7:f4:66:f1:18:35:
         39:95:1e:18:93:ca:ec:d1:f8:29:6e:b8:85:cb:b1:45:09:3b:
         9b:c0:3e:2a:a5:71:ca:94:51:76:49:42:db:92:62:17:ac:29:
         2c:ae:a3:f2:7b:c5:19:2f:10:2a:28:d9:61:9c:38:cd:d9:c5:
         c2:e3:13:1e:45:ce:5d:95:fe:a1:57:9c:49:d1:b0:b0:22:73:
         b4:91:c3:43:75:9a:14:eb:7f:39:4c:e2:88:d4:94:19:04:0d:
         c8:4f:15:28:25:13:f5:9c:e3:14:20:29:be:b3:41:cf:81:b7:
         b7:37:a7:cd:bc:5f:be:f4:12:75:71:54:28:1f:6c:a3:82:67:
         14:39:56:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----