Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139332e3230332e31352e302f32342d3332203d3e203531313637.roa
File:                     3139332e3230332e31352e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          WeytVIezG79hLOszuM72IKU5Y/a7UI3kQvH3kdT0HV8=
Subject key identifier:   83:C3:00:F4:71:6B:31:1A:EA:C7:37:A8:C9:03:3D:32:D0:50:1E:96
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       2687D79C1F8DCC9B3F25FCBEB2C9DBC4E42E6FDB
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e3230332e31352e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:35 +0000
ROA not before:           Sat 22 Oct 2022 04:28:35 +0000
ROA not after:            Sat 21 Oct 2023 04:33:35 +0000
asID:                     51167
IP address blocks:        193.203.15.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:87:d7:9c:1f:8d:cc:9b:3f:25:fc:be:b2:c9:db:c4:e4:2e:6f:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:35 2022 GMT
            Not After : Oct 21 04:33:35 2023 GMT
        Subject: CN=83C300F4716B311AEAC737A8C9033D32D0501E96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7a:33:a0:cd:b5:43:0a:02:c8:50:24:05:24:
                    30:48:f9:81:c2:e0:41:73:1f:43:f4:fc:9f:19:18:
                    9d:b7:bc:3e:fd:5a:2c:bd:43:88:f0:cb:1f:a5:ae:
                    0e:c6:5e:e8:42:a1:48:09:01:0c:f6:66:5d:50:e9:
                    7d:b1:b8:24:be:b4:90:e5:ff:29:5f:3b:88:8b:fe:
                    d7:82:fd:c3:98:97:f4:05:e7:45:71:14:d9:23:3c:
                    3e:f4:64:38:09:e8:e8:8c:18:ff:49:39:f3:76:fb:
                    57:ed:49:b8:22:3d:de:19:69:e8:d8:91:57:fa:51:
                    a6:b5:e3:1e:14:3c:07:6e:93:86:45:23:85:a8:b3:
                    2d:8a:42:9f:51:6e:f4:9d:1b:8a:17:f6:c8:22:fa:
                    d9:76:a3:85:0a:da:c8:cc:d1:8a:fb:cf:16:4e:b1:
                    b3:d8:44:1b:99:a9:0c:49:a6:e6:a6:4a:d7:85:9d:
                    48:ef:54:68:89:d2:c0:38:d6:4f:da:82:04:2b:a4:
                    ba:09:e5:42:d1:e4:0b:85:2e:f3:d6:4b:cb:b6:5e:
                    90:4c:ae:92:c2:e1:41:83:9a:fb:92:c3:80:93:51:
                    a4:b8:97:99:34:e8:50:0e:71:0e:b6:6d:43:2c:a5:
                    71:c7:40:cc:79:6a:4b:b5:d2:60:e1:15:95:2b:a5:
                    74:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C3:00:F4:71:6B:31:1A:EA:C7:37:A8:C9:03:3D:32:D0:50:1E:96
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e3230332e31352e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.203.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:5a:72:18:35:29:9a:f3:09:1f:a0:93:3e:28:73:bd:fd:8b:
         3c:8c:be:d2:19:e8:98:ae:d3:81:e7:cf:bf:31:66:7b:40:5f:
         3f:50:b3:f2:72:ec:19:8b:c7:db:18:a5:a6:96:03:a5:d4:08:
         4b:f6:32:10:cd:a5:44:25:0c:7e:17:fb:73:54:53:3f:84:fa:
         98:6e:24:e0:63:73:53:81:bd:25:b4:fd:b9:dd:0e:64:eb:6c:
         36:48:3b:c8:57:7a:21:d8:28:fe:ee:df:64:79:0e:08:da:d9:
         71:44:17:08:1c:87:61:ec:2d:68:17:f2:a3:76:6c:c5:18:57:
         ad:19:5f:85:d2:e5:cf:3a:f3:f6:b8:ae:a5:6c:46:f0:cf:0c:
         c8:a2:2c:cb:03:81:60:97:cc:0c:52:b8:e4:59:98:2f:b6:58:
         d9:c3:5e:58:eb:94:dc:4e:9a:10:2e:0f:b9:42:80:19:b6:58:
         49:b9:cd:16:d1:f5:2f:b0:92:d3:10:bc:65:e3:4f:a2:49:49:
         3a:d1:31:05:be:92:03:ce:eb:08:60:23:a0:b6:20:16:be:72:
         cf:34:16:3a:db:fb:a2:ce:af:6e:be:a8:1c:57:7d:97:5e:db:
         f7:4e:83:4a:0b:01:7b:1c:2b:a6:87:45:7a:9b:41:ca:c3:1c:
         f8:9b:98:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----