Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/34352e3134312e32312e302f32342d3234203d3e20323131383330.roa
File:                     34352e3134312e32312e302f32342d3234203d3e20323131383330.roa (raw, json)
Hash identifier:          t7GJW8hIb9VnZYZzpyHJFV1hkxZMwCPMbRi5kAYJx0M=
Subject key identifier:   CD:AC:02:58:87:09:B8:86:08:ED:02:6E:98:2C:C2:37:AD:15:D6:E3
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       67EA310197779158556EB142869C3148E5EAD099
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e3134312e32312e302f32342d3234203d3e20323131383330.roa
Signing time:             Sat 22 Oct 2022 04:33:42 +0000
ROA not before:           Sat 22 Oct 2022 04:28:42 +0000
ROA not after:            Sat 21 Oct 2023 04:33:42 +0000
asID:                     211830
IP address blocks:        45.141.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ea:31:01:97:77:91:58:55:6e:b1:42:86:9c:31:48:e5:ea:d0:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Oct 22 04:28:42 2022 GMT
            Not After : Oct 21 04:33:42 2023 GMT
        Subject: CN=CDAC02588709B88608ED026E982CC237AD15D6E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:78:05:39:24:16:15:20:2c:20:22:6d:52:b7:
                    b9:92:b3:90:0e:9e:79:4a:96:32:53:04:5d:e6:7f:
                    3f:e6:1f:9e:5f:e9:a6:1f:ed:d2:ec:67:84:b6:d7:
                    d7:f7:1c:af:f7:8d:34:d8:eb:56:9f:75:e4:53:aa:
                    4f:a5:4d:40:33:25:bc:f5:54:bf:a9:3e:bb:b7:85:
                    72:16:f5:5b:70:73:a1:c5:61:4b:95:f5:14:74:9b:
                    84:36:7e:fc:ef:b2:61:f6:43:7a:80:e0:6b:f4:0c:
                    18:aa:38:0b:77:fc:fe:bb:3a:0b:a6:40:d5:53:6b:
                    d5:47:ad:3c:b5:2a:c7:ea:7c:7c:51:8d:94:bd:fc:
                    6f:7a:fd:38:9c:5b:c3:b3:b3:45:29:6d:ef:50:79:
                    b0:fa:0a:9f:42:5b:1a:0b:15:b3:a0:bf:73:46:f2:
                    0c:76:5b:92:57:8c:86:c4:18:1c:3d:36:e7:d0:89:
                    33:fc:3b:82:dc:d4:e2:18:ec:d0:f9:ec:67:42:fe:
                    fb:52:ea:ce:8d:b8:ba:68:7c:ec:41:40:eb:bb:98:
                    17:84:a1:f4:c3:ba:b2:0f:5e:c8:80:37:ba:bd:52:
                    d9:09:62:33:c9:3a:f3:65:18:93:61:6a:c6:19:15:
                    c5:cd:d7:93:18:58:7b:b5:72:70:56:42:74:90:b6:
                    26:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:AC:02:58:87:09:B8:86:08:ED:02:6E:98:2C:C2:37:AD:15:D6:E3
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e3134312e32312e302f32342d3234203d3e20323131383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.141.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:72:87:0f:9d:de:b6:f4:29:2a:11:66:ff:c5:e1:f1:07:78:
         41:6c:51:85:25:c9:39:ba:ab:22:d1:2e:10:fd:f4:e4:71:3d:
         6f:9e:c4:01:1b:3f:93:d5:f6:26:c3:76:6b:f7:62:71:ea:8f:
         ac:88:d4:76:d2:f3:94:dd:62:b9:01:43:1d:a1:2b:6e:2d:dc:
         ef:d3:a7:08:f4:f2:39:8e:65:da:b2:02:0b:43:df:bf:46:48:
         ad:c4:9d:24:ad:de:f6:fb:93:0e:a3:43:54:59:23:1c:3d:4b:
         69:f6:c9:c8:46:8d:e2:7a:8a:45:a1:3b:bf:ba:0c:0f:c5:51:
         d4:d5:16:70:14:ac:41:f5:13:6b:e2:0e:84:d0:7c:98:0b:6e:
         ba:d5:66:dd:1f:fe:7d:3d:93:3a:92:bb:39:55:fb:e6:c8:4a:
         30:83:65:18:62:fe:4c:3b:11:c7:ac:4a:17:01:6f:fd:8f:c2:
         7c:b6:0a:72:18:63:ce:eb:5c:75:a7:64:90:64:83:4c:6d:11:
         2f:32:c1:3d:9e:c2:53:56:8e:ba:f6:b5:d1:a9:df:01:a5:a1:
         d6:d5:1e:7d:c4:75:83:f9:fc:d9:ea:84:80:37:36:e9:75:ad:
         0a:c0:e4:af:49:2b:28:17:0f:82:22:0d:24:56:6e:70:98:89:
         bd:85:8e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----