Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/34352e3134312e32312e302f32342d3234203d3e20323132383738.roa
File:                     34352e3134312e32312e302f32342d3234203d3e20323132383738.roa (raw, json)
Hash identifier:          sh+WOW9A/dJbdgwnP2Sadw76MwVzzM1XcrYwyDkJ2BI=
Subject key identifier:   96:AF:C5:38:6F:21:47:DC:B3:39:E5:92:C1:F1:92:F3:7C:88:77:53
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       31457215F4FDD8411538B3815A993D608CF54168
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e3134312e32312e302f32342d3234203d3e20323132383738.roa
Signing time:             Sat 22 Oct 2022 04:33:40 +0000
ROA not before:           Sat 22 Oct 2022 04:28:40 +0000
ROA not after:            Sat 21 Oct 2023 04:33:40 +0000
asID:                     212878
IP address blocks:        45.141.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:45:72:15:f4:fd:d8:41:15:38:b3:81:5a:99:3d:60:8c:f5:41:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Oct 22 04:28:40 2022 GMT
            Not After : Oct 21 04:33:40 2023 GMT
        Subject: CN=96AFC5386F2147DCB339E592C1F192F37C887753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e5:00:16:0d:8a:29:3c:ff:3f:94:aa:ed:62:
                    c4:43:ea:c5:42:88:9f:5b:3a:4f:9b:62:06:7e:d2:
                    cf:ff:d8:09:27:d8:da:1b:bd:81:1b:75:08:ac:ff:
                    9f:1e:d4:d9:f4:b8:33:af:d8:f5:6f:f8:52:6c:50:
                    fc:15:e8:88:8f:c1:51:86:d3:70:7d:4b:3a:f0:f9:
                    8e:a5:0a:af:39:02:8d:8a:af:49:96:e1:aa:41:4b:
                    40:d2:ca:e8:10:ca:63:e4:c3:bf:de:d4:76:da:71:
                    c1:71:fb:8a:97:9b:52:26:3c:fc:06:75:11:9f:f4:
                    34:69:56:76:1a:50:83:78:68:f4:ac:13:00:db:75:
                    be:a4:4e:23:da:de:0d:94:09:ee:a3:f4:de:bb:50:
                    b2:68:b3:82:03:0f:b5:3d:2f:d5:e7:95:00:fe:d1:
                    06:d0:63:18:78:ed:58:b4:ae:49:05:52:d0:bd:fe:
                    37:59:2e:88:cd:8f:2e:ce:82:59:b3:e8:42:8f:09:
                    ba:81:e0:35:f3:7f:2b:95:91:cf:a4:52:a1:fb:a6:
                    54:6b:00:58:8b:d1:3c:3e:dc:1b:b6:3b:b3:b3:34:
                    65:39:3c:8a:ae:ed:a1:da:20:ca:48:62:a0:40:c2:
                    59:a5:88:0e:5c:01:ec:3f:31:68:54:ea:1f:4c:12:
                    76:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AF:C5:38:6F:21:47:DC:B3:39:E5:92:C1:F1:92:F3:7C:88:77:53
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e3134312e32312e302f32342d3234203d3e20323132383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.141.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:64:72:7c:84:44:28:c7:c0:28:48:d0:17:87:0e:6e:38:0a:
         ec:b2:c5:f9:2a:e4:a9:95:f5:57:ce:ea:43:9b:27:50:26:3a:
         15:24:9f:fd:76:27:d7:5f:cb:47:1b:9f:09:8f:cf:a6:5e:3c:
         90:65:39:31:3c:e1:c4:ce:91:6a:09:44:59:75:1f:29:11:b8:
         4d:e6:60:65:10:91:58:71:55:fc:ab:6c:a4:fb:b5:bc:b7:2f:
         bd:a5:65:5a:83:83:0d:12:cc:c8:c5:3b:1f:97:51:23:04:c2:
         c2:76:31:a7:07:a7:2a:9f:06:70:a4:ea:c7:cd:77:03:3b:fd:
         ce:95:5c:c2:4c:c5:74:25:41:95:52:21:95:00:d9:80:5b:3b:
         ee:9c:dc:da:60:be:93:c7:24:48:16:18:59:cb:10:74:76:84:
         9f:32:5a:93:0f:08:ae:21:ae:e8:ca:ca:5e:8f:5a:0a:48:63:
         4e:79:ab:3f:47:18:2b:09:7d:da:4c:2a:db:1f:3d:e1:51:27:
         1e:33:9d:27:4c:f5:8d:43:4f:7d:a6:d4:aa:88:25:2a:70:a2:
         88:86:14:88:4d:6f:2f:c0:12:83:bd:4b:2d:36:36:f8:7e:15:
         f3:33:d9:74:32:6e:2e:88:c7:48:4f:34:95:08:a7:d0:c4:8a:
         fc:f4:8c:b2
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUMUVyFfT92EEVOLOBWpk9YIz1QWgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWRjOTcwNzU1ODI0Y2I5NjdjYWQ2ZjNiOTY0NzA5YjA5
MmQ0MzA2OTAeFw0yMjEwMjIwNDI4NDBaFw0yMzEwMjEwNDMzNDBaMDMxMTAvBgNV
BAMTKDk2QUZDNTM4NkYyMTQ3RENCMzM5RTU5MkMxRjE5MkYzN0M4ODc3NTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy5QAWDYopPP8/lKrtYsRD6sVC
iJ9bOk+bYgZ+0s//2Akn2NobvYEbdQis/58e1Nn0uDOv2PVv+FJsUPwV6IiPwVGG
03B9Szrw+Y6lCq85Ao2Kr0mW4apBS0DSyugQymPkw7/e1HbaccFx+4qXm1ImPPwG
dRGf9DRpVnYaUIN4aPSsEwDbdb6kTiPa3g2UCe6j9N67ULJos4IDD7U9L9XnlQD+
0QbQYxh47Vi0rkkFUtC9/jdZLojNjy7Oglmz6EKPCbqB4DXzfyuVkc+kUqH7plRr
AFiL0Tw+3Bu2O7OzNGU5PIqu7aHaIMpIYqBAwlmliA5cAew/MWhU6h9MEnYPAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUlq/FOG8hR9yzOeWSwfGS83yId1MwHwYDVR0j
BBgwFoAUXclwdVgky5Z8rW87lkcJsJLUMGkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzcvNURDOTcwNzU1ODI0Q0I5NjdDQUQ2RjNCOTY0NzA5QjA5
MkQ0MzA2OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hjbHdkVmdreTVaOHJX
ODdsa2NKc0pMVU1Hay5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Ny8zNDM1MmUzMTM0MzEyZTMyMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMx
MzIzODM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtjRUwDQYJKoZIhvcNAQELBQADggEBADBkcnyE
RCjHwChI0BeHDm44Cuyyxfkq5KmV9VfO6kObJ1AmOhUkn/12J9dfy0cbnwmPz6Ze
PJBlOTE84cTOkWoJRFl1HykRuE3mYGUQkVhxVfyrbKT7tby3L72lZVqDgw0SzMjF
Ox+XUSMEwsJ2MacHpyqfBnCk6sfNdwM7/c6VXMJMxXQlQZVSIZUA2YBbO+6c3Npg
vpPHJEgWGFnLEHR2hJ8yWpMPCK4hrujKyl6PWgpIY055qz9HGCsJfdpMKtsfPeFR
Jx4znSdM9Y1DT32m1KqIJSpwooiGFIhNby/AEoO9Sy02Nvh+FfMz2XQybi6Ix0hP
NJUIp9DEivz0jLI=
-----END CERTIFICATE-----