Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/34352e3135312e3132322e302f32342d3332203d3e203531313637.roa
File:                     34352e3135312e3132322e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          xHbirXdCHXoc2LHvdrlwSttxXi15RCEPjcakJpN/DJ4=
Subject key identifier:   A2:0E:96:74:40:5F:88:70:B9:31:17:DD:32:03:52:F3:B0:EE:17:C9
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       13A21EC2481FE5D776CDBC898FC94DD481FBCC18
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e3135312e3132322e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:45 +0000
ROA not before:           Sat 22 Oct 2022 04:28:45 +0000
ROA not after:            Sat 21 Oct 2023 04:33:45 +0000
asID:                     51167
IP address blocks:        45.151.122.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a2:1e:c2:48:1f:e5:d7:76:cd:bc:89:8f:c9:4d:d4:81:fb:cc:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Oct 22 04:28:45 2022 GMT
            Not After : Oct 21 04:33:45 2023 GMT
        Subject: CN=A20E9674405F8870B93117DD320352F3B0EE17C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d2:2b:89:11:77:12:69:b3:80:1f:c5:b6:44:
                    6d:c8:e0:1c:49:b6:56:bc:66:b2:c3:b2:c8:87:5a:
                    51:c5:7c:9a:84:88:50:be:aa:9a:88:95:ba:12:2e:
                    c6:c3:b3:fa:7b:1e:77:fb:c5:b3:92:ea:3e:a4:73:
                    6a:c4:08:d8:5d:fc:36:0a:10:1e:9c:ee:7d:7b:dd:
                    33:f8:21:d9:6c:c6:ae:ee:7a:f8:0a:b8:3d:79:d8:
                    d6:97:c7:24:71:06:1a:3b:8d:95:e5:ac:6e:b0:61:
                    ca:21:4c:a9:15:fb:4e:27:f9:4f:84:54:39:f0:14:
                    06:57:ab:e9:cb:09:c7:87:74:7b:ca:04:47:b2:72:
                    80:b2:f0:8a:a4:d8:a6:69:ed:1b:2d:b4:77:0d:fd:
                    5d:6e:e3:02:9f:43:7c:5b:52:59:e3:6c:a0:cb:a8:
                    a5:f7:2e:8b:a7:b6:d1:a9:33:65:ea:39:18:57:c0:
                    e2:14:e9:37:49:6a:88:07:60:4c:4b:58:12:4e:7c:
                    2d:c2:2f:de:62:e8:85:bb:42:e0:e4:37:64:12:54:
                    be:6b:7f:60:c3:28:7e:7c:c8:a9:7a:c3:ea:c9:6e:
                    3f:32:e0:19:80:e5:8a:e3:c9:84:05:66:75:a3:2f:
                    df:24:e5:00:f1:05:7d:ec:a0:4b:41:ac:42:71:0a:
                    1e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:0E:96:74:40:5F:88:70:B9:31:17:DD:32:03:52:F3:B0:EE:17:C9
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e3135312e3132322e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.151.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:42:32:00:b7:00:11:2a:5a:0a:44:30:32:fa:08:9b:e4:5d:
         fe:4a:54:cd:18:e0:af:f4:a0:78:9d:d1:82:43:df:be:a9:a0:
         03:8d:76:92:32:4d:69:03:54:8c:bb:51:8e:87:95:f2:ef:ab:
         7e:9a:3a:14:ed:40:e7:50:83:28:63:03:bf:57:cd:22:7f:ba:
         96:85:0a:85:d2:ac:ca:a1:da:9f:d3:4f:a4:38:c0:4c:ea:42:
         c4:56:ab:2e:b3:f9:7b:46:26:82:6e:b2:3f:5c:f4:11:13:51:
         3a:15:e7:e2:ed:e6:fc:67:80:8e:64:08:63:13:73:cd:24:df:
         e2:48:a3:b5:10:39:a9:21:70:fb:bf:6a:ec:54:84:3d:73:5c:
         d4:85:2d:de:28:84:e0:39:ae:fe:7d:41:3e:69:b6:b7:06:92:
         6b:e6:6e:a0:35:f4:74:7d:27:ff:4b:05:d6:27:c0:a3:19:77:
         a3:f2:43:96:81:fc:8f:ba:bd:bc:21:51:98:b2:09:fe:15:fd:
         05:1d:69:60:05:5e:5c:cd:ef:ce:24:fc:d7:fb:ce:bd:c2:a3:
         d7:88:01:04:ec:0b:40:05:b9:52:67:80:d0:c8:d0:56:df:14:
         6e:48:d4:83:a6:ed:d5:46:dc:c2:a3:22:49:90:5c:21:46:93:
         a2:ff:58:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----