Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139332e3138372e3132392e302f32342d3332203d3e203531313637.roa
File:                     3139332e3138372e3132392e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          oGRNrI6wG78CS9suebR26DJeOzToYvmDSKVVspoDVWA=
Subject key identifier:   CF:C2:40:B3:C5:73:15:7A:D0:3C:50:D1:10:C9:32:67:49:14:F8:06
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       568997CA43A19D70385017DF58DDDD0AB46CB46E
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e3138372e3132392e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:28 +0000
ROA not before:           Sat 22 Oct 2022 04:28:28 +0000
ROA not after:            Sat 21 Oct 2023 04:33:28 +0000
asID:                     51167
IP address blocks:        193.187.129.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:89:97:ca:43:a1:9d:70:38:50:17:df:58:dd:dd:0a:b4:6c:b4:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:28 2022 GMT
            Not After : Oct 21 04:33:28 2023 GMT
        Subject: CN=CFC240B3C573157AD03C50D110C932674914F806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:29:25:85:f3:d6:bf:7e:1b:b7:01:ac:bc:26:
                    cf:d0:97:52:f9:56:5d:fb:ce:82:24:7f:84:8a:6f:
                    37:8b:a0:92:57:14:aa:d4:48:06:3a:96:b2:50:55:
                    07:e8:91:b7:f7:ee:8b:7f:73:11:43:b7:6e:62:0e:
                    89:dc:20:cd:90:ef:43:a4:33:14:c9:46:fc:b5:ea:
                    b0:16:9a:97:1c:57:01:06:60:c0:c8:cc:5f:ad:b3:
                    9e:b3:4f:08:8b:22:30:22:22:88:03:e2:8e:7f:08:
                    0e:89:9b:97:58:88:97:90:df:1f:7d:f3:68:29:53:
                    91:fe:49:36:16:fc:d8:02:3c:63:23:09:a7:d9:72:
                    5d:b4:20:41:43:66:0f:01:2b:9c:bf:ae:ec:19:43:
                    4f:c8:13:c5:48:35:45:c2:49:d0:7c:b5:5e:7d:a2:
                    ce:d8:38:4a:15:92:6e:8b:c4:f5:ff:26:d4:f6:dc:
                    e4:ac:a6:ad:35:65:c7:57:cc:a2:aa:bc:81:eb:bf:
                    44:94:e1:33:49:b4:b1:44:0e:01:1c:e0:de:6d:e5:
                    ea:4f:c7:b9:e6:96:9a:15:34:e1:44:ab:23:ab:dc:
                    4b:f1:ed:2e:41:99:53:08:ce:0e:91:bf:36:ed:fc:
                    5c:74:c0:f1:da:68:30:1c:8a:f7:18:68:f9:5e:53:
                    c3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C2:40:B3:C5:73:15:7A:D0:3C:50:D1:10:C9:32:67:49:14:F8:06
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e3138372e3132392e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.187.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:90:99:2f:7a:ff:23:e7:c8:dd:6d:60:b9:a1:08:09:c5:e0:
         01:07:0d:30:09:75:c2:fc:5a:66:d5:38:d0:12:28:45:3e:56:
         77:a5:8d:f9:06:fb:4d:73:0e:4e:52:9f:61:36:fc:96:4d:f0:
         36:83:f9:e9:4d:34:a4:47:5f:3c:3b:59:b9:d0:08:4a:56:70:
         33:7b:0e:15:3b:53:5c:a8:89:81:eb:79:60:5b:4c:b5:aa:d1:
         e3:56:54:8b:a0:a6:27:7b:70:4c:cf:3f:aa:4c:54:6b:bc:16:
         51:60:fb:91:9e:3d:6c:61:5f:97:96:fb:2f:ca:56:e4:d6:01:
         0f:43:8b:23:da:73:d4:7b:a6:f3:a6:48:08:28:b0:42:e6:2a:
         65:6d:39:b8:af:8d:47:d4:d4:7e:98:d0:5b:76:2b:af:ac:ba:
         07:ec:64:c0:3a:d1:ba:ab:91:59:ff:36:aa:be:e3:af:bc:4b:
         ce:8b:10:3e:ac:76:cc:c5:bf:c8:b2:a5:e8:a2:57:3c:94:d1:
         0a:b5:82:19:c0:21:4c:ff:c9:51:32:96:68:29:3f:1d:94:9b:
         fa:9c:29:59:75:35:d7:a8:ae:1d:52:1e:da:96:c2:1f:3b:53:
         24:91:c9:eb:11:4c:5a:f1:45:4b:66:34:e1:d5:ee:a8:9f:45:
         7e:20:db:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----