Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/34352e3135312e3132302e302f32332d3233203d3e203437353833.roa
File:                     34352e3135312e3132302e302f32332d3233203d3e203437353833.roa (raw, json)
Hash identifier:          3yx/F55IauFkxbChIxdZehIFxAAqzbQPlUd48taK1uQ=
Subject key identifier:   F5:F7:E9:E5:A7:00:2C:21:5A:1E:D1:D2:12:F7:E9:B1:01:DF:41:C7
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       2F8DA3D65E376E507A2E29ACA49EE4474F6191E3
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e3135312e3132302e302f32332d3233203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:33:45 +0000
ROA not before:           Sat 22 Oct 2022 04:28:45 +0000
ROA not after:            Sat 21 Oct 2023 04:33:45 +0000
asID:                     47583
IP address blocks:        45.151.120.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:8d:a3:d6:5e:37:6e:50:7a:2e:29:ac:a4:9e:e4:47:4f:61:91:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Oct 22 04:28:45 2022 GMT
            Not After : Oct 21 04:33:45 2023 GMT
        Subject: CN=F5F7E9E5A7002C215A1ED1D212F7E9B101DF41C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:03:cf:f6:56:f6:59:da:de:e4:db:29:bb:f5:
                    07:d2:4e:79:e0:9a:03:ce:d7:4e:a7:63:c8:af:4f:
                    01:3e:7e:15:0f:e2:a3:0a:ad:5c:a8:19:8f:97:c7:
                    d1:1e:8e:ff:5f:a1:e9:80:3d:13:99:ba:07:e8:73:
                    58:8a:9e:d0:13:72:62:95:33:30:45:21:20:cf:be:
                    15:96:99:6e:a3:f2:48:2d:46:97:74:1e:c0:cc:c9:
                    ed:4d:90:40:a7:b0:d3:f6:6c:9d:29:c4:08:48:ba:
                    2d:76:2d:73:7f:95:b7:ac:54:02:0a:46:0a:fe:99:
                    78:ae:21:c2:b0:25:4a:b3:be:ee:bf:6c:3d:9a:a8:
                    87:2f:a1:f3:3f:f0:b2:c4:7e:77:55:0f:d0:4c:64:
                    7d:07:80:38:3c:7a:ed:3c:2d:11:a5:d8:50:38:da:
                    25:8b:92:7c:62:5a:60:77:be:89:2a:ef:15:31:83:
                    1f:35:d7:cb:e7:be:25:49:98:f0:a3:3b:c1:3f:ac:
                    32:28:68:d6:48:a4:8c:8a:cc:e2:ab:2a:e7:77:a7:
                    b7:8f:e5:b5:c0:9d:e5:c2:4e:16:2e:35:14:5c:d2:
                    37:c5:e6:b9:7e:8e:f7:8c:a0:02:8a:7d:be:fb:16:
                    18:5d:43:9b:5b:74:42:50:51:f5:19:c9:b6:a3:5d:
                    7e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F7:E9:E5:A7:00:2C:21:5A:1E:D1:D2:12:F7:E9:B1:01:DF:41:C7
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e3135312e3132302e302f32332d3233203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.151.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:90:82:37:fb:8e:f7:18:4b:30:0d:03:c8:14:3c:56:a0:e4:
         68:fb:d2:3b:f0:ca:d6:11:06:af:9f:ad:e2:f0:c2:48:57:05:
         ce:70:73:1d:b1:e5:ca:90:59:99:d5:dd:25:cc:00:44:73:98:
         70:dc:f5:e7:af:3a:08:b7:5a:21:6c:90:9c:bd:71:37:50:91:
         6b:98:5e:4c:cb:8c:1c:cf:cb:6a:d2:1c:8e:e7:d9:4a:e9:1d:
         d7:ea:1e:d6:a0:8b:82:7a:31:36:35:bd:fa:a9:72:f3:69:53:
         07:d0:4e:de:04:39:3b:6c:a0:c0:e7:8d:c7:35:2f:78:ed:8c:
         65:0b:99:c4:2b:14:9c:92:16:95:44:c8:55:b9:a2:21:0c:56:
         6a:02:07:e0:5b:27:b2:81:47:5c:10:30:4f:36:76:c1:03:aa:
         43:86:e8:d1:7e:35:b9:3d:31:54:80:d9:28:5d:85:2f:1b:1a:
         d6:35:31:fd:3e:8d:6d:f3:1d:a7:0e:d6:a1:5c:c1:5c:6c:f3:
         e6:65:97:b1:45:13:9c:75:8b:cb:68:27:d5:cd:02:33:e7:93:
         e9:f0:7b:7b:91:58:a6:fe:f2:90:99:74:2d:bc:fb:35:12:ff:
         41:50:ac:c3:5e:02:66:a5:84:49:8b:4b:80:4c:83:f0:77:fa:
         6d:f8:d0:74
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUL42j1l43blB6LimspJ7kR09hkeMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWRjOTcwNzU1ODI0Y2I5NjdjYWQ2ZjNiOTY0NzA5YjA5
MmQ0MzA2OTAeFw0yMjEwMjIwNDI4NDVaFw0yMzEwMjEwNDMzNDVaMDMxMTAvBgNV
BAMTKEY1RjdFOUU1QTcwMDJDMjE1QTFFRDFEMjEyRjdFOUIxMDFERjQxQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOA8/2VvZZ2t7k2ym79QfSTnng
mgPO106nY8ivTwE+fhUP4qMKrVyoGY+Xx9Eejv9foemAPROZugfoc1iKntATcmKV
MzBFISDPvhWWmW6j8kgtRpd0HsDMye1NkECnsNP2bJ0pxAhIui12LXN/lbesVAIK
Rgr+mXiuIcKwJUqzvu6/bD2aqIcvofM/8LLEfndVD9BMZH0HgDg8eu08LRGl2FA4
2iWLknxiWmB3vokq7xUxgx8118vnviVJmPCjO8E/rDIoaNZIpIyKzOKrKud3p7eP
5bXAneXCThYuNRRc0jfF5rl+jveMoAKKfb77FhhdQ5tbdEJQUfUZybajXX4nAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQU9ffp5acALCFaHtHSEvfpsQHfQccwHwYDVR0j
BBgwFoAUXclwdVgky5Z8rW87lkcJsJLUMGkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzcvNURDOTcwNzU1ODI0Q0I5NjdDQUQ2RjNCOTY0NzA5QjA5
MkQ0MzA2OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hjbHdkVmdreTVaOHJX
ODdsa2NKc0pMVU1Hay5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Ny8zNDM1MmUzMTM1MzEyZTMxMzIzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM0
MzczNTM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtl3gwDQYJKoZIhvcNAQELBQADggEBABCQgjf7
jvcYSzANA8gUPFag5Gj70jvwytYRBq+freLwwkhXBc5wcx2x5cqQWZnV3SXMAERz
mHDc9eevOgi3WiFskJy9cTdQkWuYXkzLjBzPy2rSHI7n2UrpHdfqHtagi4J6MTY1
vfqpcvNpUwfQTt4EOTtsoMDnjcc1L3jtjGULmcQrFJySFpVEyFW5oiEMVmoCB+Bb
J7KBR1wQME82dsEDqkOG6NF+Nbk9MVSA2ShdhS8bGtY1Mf0+jW3zHacO1qFcwVxs
8+Zll7FFE5x1i8toJ9XNAjPnk+nwe3uRWKb+8pCZdC28+zUS/0FQrMNeAmalhEmL
S4BMg/B3+m340HQ=
-----END CERTIFICATE-----