Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/8/3231332e3139302e352e302f32342d3234203d3e203437353833.roa
File:                     3231332e3139302e352e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier:          a+1Z1Haixz9gQxszQi2n8/x+2/0RJ5q4HWDV6PxphX8=
Subject key identifier:   D9:42:84:C7:AE:5F:9B:FA:93:E5:76:76:8E:B4:C5:6C:95:E9:6F:99
Certificate issuer:       /CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
Certificate serial:       7D7AA6BAD53AB1016FDFB60D1C13E4B39CA7D49C
Authority key identifier: 1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/8/3231332e3139302e352e302f32342d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:34:01 +0000
ROA not before:           Sat 22 Oct 2022 04:29:01 +0000
ROA not after:            Sat 21 Oct 2023 04:34:01 +0000
asID:                     47583
IP address blocks:        213.190.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:7a:a6:ba:d5:3a:b1:01:6f:df:b6:0d:1c:13:e4:b3:9c:a7:d4:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e793b5c1239231e08dedd6fb8060732cd063f4d
        Validity
            Not Before: Oct 22 04:29:01 2022 GMT
            Not After : Oct 21 04:34:01 2023 GMT
        Subject: CN=D94284C7AE5F9BFA93E576768EB4C56C95E96F99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:de:3f:95:ff:80:8a:cb:46:41:9b:5a:91:d8:
                    10:8a:79:84:1f:1e:19:ab:62:58:f1:92:68:ac:5c:
                    04:94:36:a4:f2:f2:37:df:29:28:09:98:30:2e:db:
                    36:8a:69:c8:bc:80:fb:41:74:0e:8e:84:59:87:59:
                    3d:32:9b:4f:42:d1:79:b9:73:3c:fe:ea:40:ca:5f:
                    30:0b:09:56:13:c2:b9:5c:bf:64:8b:6b:80:0a:ca:
                    58:4b:8f:11:ee:12:df:3d:36:ac:9a:ff:09:b4:96:
                    48:d0:70:76:16:2b:46:66:61:7e:2d:e8:38:4b:f4:
                    06:b2:23:55:a6:3d:8f:77:ee:dc:d8:d9:d4:5d:a1:
                    f4:22:a0:41:87:5f:58:27:84:b3:69:92:63:ea:50:
                    ee:07:20:12:a5:cd:7c:a4:31:5a:6c:d8:52:e2:82:
                    d5:bd:0e:75:dc:ee:8b:d0:5c:f0:1f:84:a6:67:05:
                    3a:50:63:ae:4e:ad:e7:1f:e1:66:ef:e9:26:f5:71:
                    37:f1:6b:4f:e0:64:8c:bf:bb:0a:6f:c1:30:38:94:
                    08:08:54:f6:bd:d5:9f:63:b1:e4:6b:9d:5c:b4:b3:
                    9f:9d:17:f3:9c:f4:eb:91:b2:99:da:20:bd:f3:d1:
                    f8:0b:6a:62:25:db:e4:2c:40:9e:b6:39:c1:27:ea:
                    87:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:42:84:C7:AE:5F:9B:FA:93:E5:76:76:8E:B4:C5:6C:95:E9:6F:99
            X509v3 Authority Key Identifier:
                keyid:1E:79:3B:5C:12:39:23:1E:08:DE:DD:6F:B8:06:07:32:CD:06:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/1E793B5C1239231E08DEDD6FB8060732CD063F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hnk7XBI5Ix4I3t1vuAYHMs0GP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/8/3231332e3139302e352e302f32342d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.190.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:75:d2:40:5a:28:fb:3e:26:9b:c3:b1:5f:50:d7:d7:e2:7f:
         b5:b6:db:48:9b:d1:d0:05:ca:cd:82:4b:d3:5e:bd:e3:56:7b:
         03:d5:ec:1b:1b:e8:33:73:c5:b4:25:f4:ed:ee:f7:7c:e8:92:
         7b:7c:f0:07:6a:82:9b:9d:83:37:c1:8d:06:08:6c:fd:f6:d6:
         68:0d:e3:db:15:5e:6e:27:6c:c8:58:3f:60:8d:e6:af:c5:69:
         24:a8:38:d4:3f:98:1e:e9:d9:0c:43:d3:5e:03:06:b4:4c:b6:
         d0:37:6c:44:c1:60:1d:9c:02:f4:c7:0b:6e:d6:53:b4:d6:05:
         93:28:d2:e7:05:31:6a:73:3d:0b:73:62:a6:58:e7:49:7c:04:
         9d:78:0e:42:3d:30:9d:ea:64:69:9d:36:8b:97:2c:d9:a1:f5:
         51:b3:f5:68:38:99:c4:da:1f:b8:09:54:9f:f9:08:11:e6:ea:
         02:dc:c3:60:52:14:5e:f0:c7:95:2d:b6:48:62:d4:2f:f4:ee:
         da:52:0a:1d:f0:2d:97:5c:63:cb:a3:d0:17:2b:ea:05:ad:6c:
         94:8e:2e:ae:41:91:3d:ad:76:74:b2:90:92:1b:e4:62:21:1d:
         8e:9d:64:16:c2:ee:d0:a7:d4:ff:d4:20:00:2e:ca:62:b3:b7:
         11:98:f8:61
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUfXqmutU6sQFv37YNHBPks5yn1JwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWU3OTNiNWMxMjM5MjMxZTA4ZGVkZDZmYjgwNjA3MzJj
ZDA2M2Y0ZDAeFw0yMjEwMjIwNDI5MDFaFw0yMzEwMjEwNDM0MDFaMDMxMTAvBgNV
BAMTKEQ5NDI4NEM3QUU1RjlCRkE5M0U1NzY3NjhFQjRDNTZDOTVFOTZGOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD3j+V/4CKy0ZBm1qR2BCKeYQf
HhmrYljxkmisXASUNqTy8jffKSgJmDAu2zaKaci8gPtBdA6OhFmHWT0ym09C0Xm5
czz+6kDKXzALCVYTwrlcv2SLa4AKylhLjxHuEt89Nqya/wm0lkjQcHYWK0ZmYX4t
6DhL9AayI1WmPY937tzY2dRdofQioEGHX1gnhLNpkmPqUO4HIBKlzXykMVps2FLi
gtW9DnXc7ovQXPAfhKZnBTpQY65Orecf4Wbv6Sb1cTfxa0/gZIy/uwpvwTA4lAgI
VPa91Z9jseRrnVy0s5+dF/Oc9OuRspnaIL3z0fgLamIl2+QsQJ62OcEn6odtAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQU2UKEx65fm/qT5XZ2jrTFbJXpb5kwHwYDVR0j
BBgwFoAUHnk7XBI5Ix4I3t1vuAYHMs0GP00wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzgvMUU3OTNCNUMxMjM5MjMxRTA4REVERDZGQjgwNjA3MzJD
RDA2M0Y0RC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0huazdYQkk1SXg0STN0
MXZ1QVlITXMwR1AwMC5jZXIwgYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4Zq
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
OC8zMjMxMzMyZTMxMzkzMDJlMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM3
MzUzODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQA1b4FMA0GCSqGSIb3DQEBCwUAA4IBAQCHddJAWij7
Piabw7FfUNfX4n+1tttIm9HQBcrNgkvTXr3jVnsD1ewbG+gzc8W0JfTt7vd86JJ7
fPAHaoKbnYM3wY0GCGz99tZoDePbFV5uJ2zIWD9gjeavxWkkqDjUP5ge6dkMQ9Ne
Awa0TLbQN2xEwWAdnAL0xwtu1lO01gWTKNLnBTFqcz0Lc2KmWOdJfASdeA5CPTCd
6mRpnTaLlyzZofVRs/VoOJnE2h+4CVSf+QgR5uoC3MNgUhRe8MeVLbZIYtQv9O7a
Ugod8C2XXGPLo9AXK+oFrWyUji6uQZE9rXZ0spCSG+RiIR2OnWQWwu7Qp9T/1CAA
Lspis7cRmPhh
-----END CERTIFICATE-----