Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3138352e3235352e3133312e302f32342d3332203d3e203531313637.roa
File:                     3138352e3235352e3133312e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          eg0k0djQRD2R1KgQCj5STxnQXznV9Zlk6E8OaGmIsvc=
Subject key identifier:   2A:0A:B6:2F:0F:7D:18:28:88:56:56:70:74:C8:EA:80:90:56:CE:54
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       5124ACAFB7FF081D12AA1F0E1E1423D98F9707F0
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3138352e3235352e3133312e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:25 +0000
ROA not before:           Sat 22 Oct 2022 04:28:25 +0000
ROA not after:            Sat 21 Oct 2023 04:33:25 +0000
asID:                     51167
IP address blocks:        185.255.131.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:24:ac:af:b7:ff:08:1d:12:aa:1f:0e:1e:14:23:d9:8f:97:07:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:25 2022 GMT
            Not After : Oct 21 04:33:25 2023 GMT
        Subject: CN=2A0AB62F0F7D18288856567074C8EA809056CE54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:04:56:4d:be:c1:0d:9c:84:8e:34:e6:43:07:
                    35:60:2e:4b:df:d9:ed:d5:e7:f6:af:96:ab:25:9d:
                    f3:5a:42:63:3e:ca:6c:f8:54:60:ad:88:31:4f:1d:
                    df:66:df:ed:9a:03:0d:e7:34:bd:b5:9e:86:de:bf:
                    1f:e1:38:f3:2f:8f:c2:7a:ab:0e:76:e1:b3:a6:33:
                    ae:e8:af:b6:8a:9c:81:26:b2:a9:7e:23:cf:86:fc:
                    d4:97:a6:54:41:71:4a:e9:0c:dc:db:51:4c:b9:40:
                    26:43:8b:26:b0:ff:aa:d8:76:a6:6b:51:d6:58:bf:
                    9b:da:43:c6:21:67:3d:2d:21:a2:ec:41:b2:13:65:
                    e0:72:62:b2:cc:d6:8c:47:39:5c:8b:cb:b7:99:a5:
                    8d:c5:16:40:ae:08:95:c2:82:94:3e:f6:9b:5a:36:
                    d6:42:27:91:35:13:d9:5c:6a:d5:ae:8e:f8:d3:cb:
                    e8:90:95:93:1c:11:6b:e2:3d:b1:b4:2c:7e:ee:ec:
                    f6:8c:3b:84:bc:05:4d:43:7c:ea:a0:9d:5e:0b:12:
                    bf:c2:13:dc:f8:a5:63:44:99:07:5c:a6:90:c8:92:
                    6a:93:50:30:06:f3:89:fe:ed:ef:f8:61:2e:8d:2c:
                    32:fc:cd:21:fe:c8:6f:2d:92:0a:16:23:fe:ee:da:
                    c4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0A:B6:2F:0F:7D:18:28:88:56:56:70:74:C8:EA:80:90:56:CE:54
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3138352e3235352e3133312e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.255.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:63:1e:e8:5c:9b:89:4f:82:37:b6:04:99:75:8c:aa:6a:96:
         f2:d7:39:ef:cd:7f:24:31:4e:f7:9b:9c:0e:2a:80:c7:cf:14:
         2f:26:da:46:cc:15:29:bd:58:88:e8:c5:ff:34:2c:38:66:6e:
         df:fd:dd:11:94:8d:33:83:e0:b3:8a:2e:7d:0f:54:f5:1d:2b:
         54:16:08:7d:fa:77:51:eb:a1:17:cf:7c:3a:2c:19:89:db:f9:
         00:aa:4d:27:15:3f:1c:a5:6d:01:93:25:b8:c3:eb:9f:d6:7c:
         33:08:a9:0c:0f:0a:0e:58:03:03:e7:4e:b8:ad:1f:31:70:b6:
         8e:b6:d1:b4:5b:6c:34:da:6e:51:2d:61:a5:51:75:79:5c:ca:
         bd:57:bc:0d:dc:89:74:3d:29:d3:ce:ce:75:bd:c2:f2:e9:05:
         4d:72:2b:ec:da:b4:1f:2d:bc:9d:1b:d4:15:24:d1:3a:f4:f4:
         e4:55:c5:77:00:c6:54:53:8f:2d:b6:46:27:f5:fc:10:9b:f1:
         68:2d:b1:5e:41:24:a2:6b:c2:0e:94:ba:30:1e:91:00:79:bb:
         7c:ba:5d:c0:4a:f6:d9:4e:93:0e:5a:9b:da:40:58:57:4d:9f:
         56:57:07:53:1b:85:78:16:43:76:b0:ee:40:64:3b:ff:9c:d5:
         a3:d4:d3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----