Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/180/34352e3135322e3138382e302f32342d3234203d3e2033333536.roa
File:                     34352e3135322e3138382e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier:          /JAVmLk631lCWeUBryE/iXYnAYTxaMrwFbj//9XUHg8=
Subject key identifier:   69:A5:93:FF:C2:27:95:6D:B2:88:E3:E2:8E:B4:0B:8D:18:33:47:AA
Certificate issuer:       /CN=dfe89bf7daa0f8aa7d022df984e6ea37e6f60a3d
Certificate serial:       6148B633F7FA815F39700E38B52A3B0167AACF07
Authority key identifier: DF:E8:9B:F7:DA:A0:F8:AA:7D:02:2D:F9:84:E6:EA:37:E6:F6:0A:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3-ib99qg-Kp9Ai35hObqN-b2Cj0.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/180/34352e3135322e3138382e302f32342d3234203d3e2033333536.roa
Signing time:             Sat 22 Oct 2022 04:33:49 +0000
ROA not before:           Sat 22 Oct 2022 04:28:49 +0000
ROA not after:            Sat 21 Oct 2023 04:33:49 +0000
asID:                     3356
IP address blocks:        45.152.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:48:b6:33:f7:fa:81:5f:39:70:0e:38:b5:2a:3b:01:67:aa:cf:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe89bf7daa0f8aa7d022df984e6ea37e6f60a3d
        Validity
            Not Before: Oct 22 04:28:49 2022 GMT
            Not After : Oct 21 04:33:49 2023 GMT
        Subject: CN=69A593FFC227956DB288E3E28EB40B8D183347AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fb:d9:01:47:ee:b0:dc:f2:20:15:99:87:8f:
                    e7:ff:00:d0:94:be:47:0a:08:76:3f:50:17:03:47:
                    eb:b5:14:b5:97:b0:82:3e:63:0a:57:08:59:e3:f1:
                    85:4a:7d:a8:80:ec:c8:bb:c9:dc:cb:58:7f:d9:1a:
                    aa:b2:3e:51:5e:1b:3f:ca:86:75:82:ae:58:35:6c:
                    f1:63:ee:a1:eb:93:c1:17:99:c1:a9:97:03:50:36:
                    cc:08:a4:43:43:c3:c4:4c:63:22:6b:37:b1:83:42:
                    9e:9e:23:e8:5b:5b:79:8b:ec:f1:c4:f5:cc:5a:b7:
                    98:27:00:a3:e8:14:2a:d5:6f:ec:26:50:d6:d5:6c:
                    3f:fb:69:96:75:a1:23:97:86:da:0c:f4:ef:c9:25:
                    1c:a6:9a:30:62:fb:6e:c9:89:90:9a:af:f3:94:c8:
                    a9:61:20:15:5d:0e:02:73:09:0d:42:95:e4:6c:cc:
                    ca:10:55:53:57:d1:8c:55:18:43:d4:af:59:ee:4d:
                    3e:d2:b2:1f:44:ba:e6:af:5b:0d:2d:01:71:97:ee:
                    e8:a5:4b:d0:9d:e8:a3:db:a3:c7:00:a8:30:92:d5:
                    9b:ce:df:5a:ce:11:1c:37:45:18:fe:22:a6:f4:69:
                    c1:a6:88:71:fe:10:56:34:6d:26:7d:ea:ca:20:99:
                    b5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A5:93:FF:C2:27:95:6D:B2:88:E3:E2:8E:B4:0B:8D:18:33:47:AA
            X509v3 Authority Key Identifier:
                keyid:DF:E8:9B:F7:DA:A0:F8:AA:7D:02:2D:F9:84:E6:EA:37:E6:F6:0A:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/180/DFE89BF7DAA0F8AA7D022DF984E6EA37E6F60A3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-ib99qg-Kp9Ai35hObqN-b2Cj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/180/34352e3135322e3138382e302f32342d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.152.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:8b:5c:46:02:3d:a4:73:2d:62:6f:18:2c:11:f9:a0:1b:13:
         8c:17:67:dc:f3:c3:3e:03:a8:00:ed:df:6a:ff:cb:f6:50:7a:
         29:09:e8:8f:bb:e7:cd:a8:0d:aa:67:12:5c:b0:9a:b8:8c:4e:
         35:b8:92:42:be:8c:0d:10:f6:15:e3:3d:29:2d:db:8d:fa:c0:
         1d:f8:2c:1e:d4:f0:b8:e7:fe:4c:6e:b4:89:9d:ae:ef:4a:83:
         4f:a7:8f:b4:45:c7:8c:e7:06:b2:b1:66:12:2c:a7:8a:fc:0b:
         ab:ed:f5:d4:62:16:fb:5d:3d:41:95:51:d5:71:4d:40:ab:83:
         0a:07:9f:6d:12:9a:78:a4:c4:6f:5a:36:bc:d8:80:01:08:38:
         6a:28:2b:72:2b:9e:30:68:cb:6f:20:57:67:b5:b6:e3:c9:99:
         7e:82:06:6b:31:ce:09:a9:76:d6:ce:f8:7a:aa:dd:1f:26:54:
         24:bf:32:94:69:a0:16:0f:94:42:91:4b:58:d2:5e:23:75:68:
         4b:0f:eb:f7:f2:95:7d:13:fc:25:c4:39:2f:c1:0f:69:35:61:
         75:f1:57:eb:28:7e:ef:6d:87:4d:ef:30:01:86:aa:d2:2b:dd:
         5d:77:1f:08:d6:10:b7:cf:85:a6:60:1c:9a:55:0a:0d:db:30:
         a7:6a:49:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----