Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/34352e3135312e3132332e302f32342d3332203d3e203531313637.roa
File:                     34352e3135312e3132332e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          v2CDgLyHyodjoPQeyojFpmEa/rp7wqsXRw02nsXh7Kw=
Subject key identifier:   FF:A5:FF:36:E7:D6:AA:0B:23:96:8D:EE:D5:29:6C:A0:83:5C:37:4C
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       40898CF3E523A1CE5CD0A8D4111594BB7A6AFFB1
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e3135312e3132332e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:43 +0000
ROA not before:           Sat 22 Oct 2022 04:28:43 +0000
ROA not after:            Sat 21 Oct 2023 04:33:43 +0000
asID:                     51167
IP address blocks:        45.151.123.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:89:8c:f3:e5:23:a1:ce:5c:d0:a8:d4:11:15:94:bb:7a:6a:ff:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Oct 22 04:28:43 2022 GMT
            Not After : Oct 21 04:33:43 2023 GMT
        Subject: CN=FFA5FF36E7D6AA0B23968DEED5296CA0835C374C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e9:b0:ee:98:56:ad:f9:7c:8c:8b:79:0f:a5:
                    9e:4e:e7:a3:68:9b:99:fd:9c:1b:12:96:de:81:1f:
                    6d:11:c0:38:c8:79:e9:be:4c:ea:92:e3:31:99:34:
                    10:57:bd:ce:20:51:47:3b:04:d9:1f:fa:91:0f:8d:
                    b4:58:05:5d:38:93:47:e7:22:4e:30:1c:30:55:0c:
                    34:ff:9b:1c:c1:41:d3:f4:49:32:75:fe:4f:2d:3b:
                    ba:44:13:50:b6:23:b4:de:b8:24:6c:4b:2a:e3:e5:
                    35:da:a2:e7:ad:ca:c4:ab:af:6d:15:9f:62:bb:88:
                    f0:0f:4c:ba:46:d4:34:24:3d:9e:73:c2:d2:e6:99:
                    73:0e:8b:2c:3b:42:8c:4b:d6:f7:04:77:b6:df:1b:
                    e3:aa:b0:eb:12:8c:29:24:9f:70:de:22:12:7e:0a:
                    5a:eb:46:2b:dd:8c:36:cb:0c:8f:87:8c:2e:9b:62:
                    58:61:4d:30:1c:82:8d:4e:e0:bf:34:a0:50:91:12:
                    0c:c1:df:b7:de:b9:a2:95:c3:2e:ce:8a:bb:75:e8:
                    e0:a6:77:ea:92:bf:1e:6d:d6:ad:cc:a4:90:87:a6:
                    44:0d:a5:df:d0:2e:14:4f:d3:68:52:e3:a3:14:8b:
                    8f:d7:80:bd:a1:93:71:4a:b3:a1:2c:81:d8:ea:27:
                    5d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A5:FF:36:E7:D6:AA:0B:23:96:8D:EE:D5:29:6C:A0:83:5C:37:4C
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/34352e3135312e3132332e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.151.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:7d:85:3f:2d:00:8b:26:d2:ad:a9:c6:5b:ea:67:62:2a:26:
         de:16:db:26:eb:32:2f:f9:82:be:5d:fb:60:f9:74:67:8d:66:
         52:4f:b4:eb:c6:a2:21:56:3d:e8:8e:4b:40:dd:1b:67:8b:70:
         e6:eb:b9:9e:15:53:38:7a:83:ca:df:aa:07:ab:da:65:21:f1:
         6f:08:a6:72:6d:55:f3:29:20:c6:6c:1a:02:29:2f:0f:9e:a1:
         c1:52:3f:6a:bd:e6:56:88:69:b1:18:aa:c2:a9:95:3d:a1:b3:
         01:2f:8f:b7:7c:32:d9:60:81:b1:d9:9c:37:85:74:06:c2:1d:
         3a:8e:d1:a5:49:84:54:50:46:de:d6:37:9c:6f:95:ef:d7:e3:
         01:e0:78:a8:ff:f3:c5:a5:56:bf:a8:2e:20:f4:75:77:c4:a4:
         68:17:64:62:11:4d:9c:cc:cc:52:08:09:37:31:86:f8:96:14:
         f2:2b:32:46:c5:ba:10:21:30:83:22:7b:f2:e1:75:7c:e0:64:
         f5:0d:a9:93:e5:98:85:83:2b:14:7b:ec:37:ae:4d:76:6d:99:
         ba:ae:8a:a5:f0:e3:4e:15:46:07:66:8b:7b:48:4a:b4:21:e8:
         64:4e:a4:c1:8f:2f:86:6e:96:73:57:57:9d:42:db:de:f0:78:
         b1:f1:20:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----