Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139332e32322e3135342e302f32332d3332203d3e203536383736.roa
File:                     3139332e32322e3135342e302f32332d3332203d3e203536383736.roa (raw, json)
Hash identifier:          tbjsHnk2SCTNkRrqBickNH/653pEcuC0wk8fWl48hSU=
Subject key identifier:   96:D3:CC:44:35:3A:6B:F4:3D:C4:43:F8:AF:C9:54:2C:05:9B:D7:83
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       3ECE4DDA1B5C33EFCEF47DC1E12BC9E6D0ADAB30
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e32322e3135342e302f32332d3332203d3e203536383736.roa
Signing time:             Sat 22 Oct 2022 04:33:32 +0000
ROA not before:           Sat 22 Oct 2022 04:28:32 +0000
ROA not after:            Sat 21 Oct 2023 04:33:32 +0000
asID:                     56876
IP address blocks:        193.22.154.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ce:4d:da:1b:5c:33:ef:ce:f4:7d:c1:e1:2b:c9:e6:d0:ad:ab:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:32 2022 GMT
            Not After : Oct 21 04:33:32 2023 GMT
        Subject: CN=96D3CC44353A6BF43DC443F8AFC9542C059BD783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:91:35:40:69:5e:54:3b:30:58:7f:95:13:4d:
                    a0:8c:e2:0c:95:87:00:28:11:28:58:41:25:b7:66:
                    b6:77:ce:43:3d:48:c1:eb:40:98:f9:a3:2f:98:fd:
                    5c:f6:70:06:0d:b9:b2:00:a8:c2:db:19:7e:29:35:
                    4f:42:a9:f3:79:fd:2d:ce:cc:c8:df:13:4a:bd:40:
                    fb:2a:c4:77:e6:e2:3e:0d:e3:d9:a3:e1:15:48:df:
                    8f:92:06:a5:c3:4c:29:05:a7:6b:ee:e1:27:c4:6f:
                    59:a7:ad:63:3a:3e:22:1d:43:c9:f8:6f:77:90:83:
                    3e:07:e7:cc:ae:2e:17:7e:8a:6f:c7:3f:e0:40:86:
                    43:9b:ea:2c:c7:a5:f4:09:b7:9a:2e:08:0c:03:ed:
                    e4:60:fc:de:ed:04:ff:63:4a:d6:a4:33:77:bd:52:
                    d4:4f:fa:09:dd:5e:86:81:79:9f:ba:83:cb:30:e6:
                    85:45:2d:3f:e9:26:43:43:23:08:90:ad:64:a7:e1:
                    d1:d9:71:d9:f7:62:57:35:d5:4f:c8:94:30:e1:66:
                    cf:e8:f3:69:29:27:56:a1:18:8b:58:1f:8f:41:4d:
                    5c:f9:6c:03:62:e7:fd:16:74:33:af:cc:f4:ad:e6:
                    d7:5d:8c:30:dc:eb:c3:c3:a4:5a:56:ad:66:9d:6c:
                    67:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D3:CC:44:35:3A:6B:F4:3D:C4:43:F8:AF:C9:54:2C:05:9B:D7:83
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139332e32322e3135342e302f32332d3332203d3e203536383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.22.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:fd:fb:35:b3:23:fb:83:1c:b4:17:8a:26:05:5e:73:28:3b:
         b8:5c:b3:b0:cc:fa:79:b9:cc:14:4f:24:94:79:d4:12:83:b7:
         f5:d6:6d:31:82:30:a9:88:93:f3:fc:d5:92:60:cd:ea:c9:3c:
         55:d8:ff:c9:23:6a:a7:42:17:e8:16:b8:71:46:9d:e7:9b:80:
         c5:8f:97:3c:03:00:71:19:ad:2a:b7:95:5c:0a:58:18:9e:dc:
         69:a3:5d:20:8f:40:e4:0f:62:32:59:0c:74:63:3c:a9:e9:8d:
         17:9c:4e:6e:bd:e9:c8:1c:7d:18:f0:fe:0c:8a:71:ba:74:b5:
         45:be:cf:1a:ce:01:ba:a9:eb:31:a0:02:f3:62:d8:aa:00:3a:
         dd:ed:03:ca:3b:e6:f1:99:9c:d0:24:65:39:46:58:88:09:3a:
         1b:40:56:57:d8:1c:6b:b8:28:c2:6d:11:a9:34:0f:eb:b5:57:
         ed:8f:3b:d7:92:3f:69:72:56:0f:9e:54:84:a5:11:f1:aa:e7:
         2a:b4:22:ba:aa:6d:94:dc:1a:eb:10:5e:71:c9:d1:09:cf:8a:
         49:52:90:b8:7b:00:d8:96:fd:66:b7:a9:b7:ff:e9:93:e9:11:
         2c:3e:e1:a6:1a:4b:4a:5b:ba:01:ee:a9:e0:83:39:6a:15:0c:
         82:b7:73:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----