Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139342e3234322e35372e302f32342d3332203d3e203531313637.roa
File:                     3139342e3234322e35372e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          VZBlbyfBfS9EYNt8QmUht5h66S5f5wKBi6MdB/xVlto=
Subject key identifier:   FF:9E:2C:D0:28:45:4B:53:F3:A4:58:FA:E5:32:4A:6E:9E:76:ED:71
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       05EA955517C9A40E7F0C26F7EFC1B3E45AB225E7
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e3234322e35372e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:32 +0000
ROA not before:           Sat 22 Oct 2022 04:28:32 +0000
ROA not after:            Sat 21 Oct 2023 04:33:32 +0000
asID:                     51167
IP address blocks:        194.242.57.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ea:95:55:17:c9:a4:0e:7f:0c:26:f7:ef:c1:b3:e4:5a:b2:25:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:32 2022 GMT
            Not After : Oct 21 04:33:32 2023 GMT
        Subject: CN=FF9E2CD028454B53F3A458FAE5324A6E9E76ED71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3e:7e:d5:c4:a3:77:af:43:57:bc:80:ad:2d:
                    05:6b:4f:f0:0b:35:d4:50:91:a0:62:2c:04:2f:27:
                    70:bc:5a:aa:33:c7:2f:34:43:1d:ee:67:98:81:6a:
                    55:91:ba:e1:96:00:bf:57:36:f8:90:80:2d:59:f2:
                    f1:da:34:83:98:e2:cb:bc:4f:29:d0:ac:c1:5a:42:
                    66:8f:f1:44:5e:61:3f:6e:03:b4:fd:a4:3f:14:1a:
                    0a:7d:94:c6:cc:98:30:f3:50:71:20:fa:48:1f:d2:
                    84:ad:b0:e4:71:0a:8f:87:ea:a7:dc:8b:2f:ae:19:
                    9f:51:ec:2f:a6:d4:2c:f1:cf:67:f4:d3:24:bc:ba:
                    2b:d3:5f:c1:22:1b:d5:dd:28:82:2e:12:a4:b5:c8:
                    70:b9:b0:72:7a:a6:ca:57:65:38:d3:e1:f4:06:3d:
                    9e:e7:f0:a7:99:da:94:ce:e0:1c:ab:c7:c9:de:03:
                    d8:ea:e9:e6:53:cd:4f:a3:47:87:e6:3a:9a:12:12:
                    6a:a8:22:e0:31:42:52:e8:43:41:e8:f6:d5:24:25:
                    f0:18:dd:63:0e:63:85:2d:60:06:e6:ad:36:d1:a7:
                    28:ce:f2:96:bd:8b:cd:95:23:7e:34:5b:01:bd:fa:
                    fe:e9:87:55:f1:8c:11:39:1d:66:f6:04:3b:03:9e:
                    5a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9E:2C:D0:28:45:4B:53:F3:A4:58:FA:E5:32:4A:6E:9E:76:ED:71
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e3234322e35372e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.242.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:6e:d7:99:c5:99:2e:18:b1:64:0e:2d:02:8d:4d:97:e7:a0:
         ad:94:a9:86:b3:63:a2:58:31:1f:99:22:f9:db:da:26:53:50:
         b5:7e:74:3a:55:77:c3:f3:90:f7:1b:cb:26:0d:01:5c:cc:2d:
         ba:e5:52:7c:9e:bc:ae:12:ab:6a:eb:e3:d5:22:80:5a:81:9a:
         e7:a0:79:ce:9b:c8:ab:03:dd:a9:ad:2f:5c:ae:25:f1:4d:57:
         6c:25:db:35:5c:ac:0d:cb:55:45:ca:1b:c6:e7:40:38:d5:47:
         31:5b:90:d2:10:69:10:66:18:fd:c1:d4:02:5d:4b:c8:2e:9c:
         2c:b4:ef:fe:f4:8f:ca:69:2c:e2:11:fe:47:dc:f4:57:ba:7b:
         d3:f6:dd:e1:72:d1:e7:f1:ec:68:40:5e:4d:82:ac:0b:bf:cb:
         e3:17:03:9a:9f:49:c7:df:cd:bd:f5:ba:bc:a2:b9:c8:52:87:
         f4:a4:b5:60:27:12:8f:15:e6:2e:a7:a1:69:00:d4:42:7e:10:
         0d:97:30:62:df:25:07:02:0b:26:50:31:e3:40:71:19:a3:4d:
         7c:93:86:af:71:20:02:91:00:24:00:82:09:d4:01:48:2d:b6:
         cb:0c:49:8e:32:1d:f6:34:51:5e:b3:71:f8:d0:b6:72:5e:22:
         2b:c6:75:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----