Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3139342e33342e3233322e302f32342d3332203d3e203531313637.roa
File:                     3139342e33342e3233322e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          h5UYdBC2t4CqEXzSQbIdytoe5XmrvbR+n9vGIRZ/gOs=
Subject key identifier:   69:59:D1:0A:25:23:C4:AE:D1:50:70:F8:E4:80:BE:F9:55:31:74:38
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       7A8A1EB80E4BB376F2DC8040194BCED6ED721EBD
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e33342e3233322e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:27 +0000
ROA not before:           Sat 22 Oct 2022 04:28:27 +0000
ROA not after:            Sat 21 Oct 2023 04:33:27 +0000
asID:                     51167
IP address blocks:        194.34.232.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:8a:1e:b8:0e:4b:b3:76:f2:dc:80:40:19:4b:ce:d6:ed:72:1e:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:27 2022 GMT
            Not After : Oct 21 04:33:27 2023 GMT
        Subject: CN=6959D10A2523C4AED15070F8E480BEF955317438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4c:23:9e:48:39:fa:46:47:57:59:06:c0:5d:
                    67:ad:6a:db:c2:09:40:2b:7b:f0:75:89:1e:3b:2c:
                    df:b6:db:4c:49:b7:ef:35:5e:32:89:e5:ee:27:5b:
                    fe:b7:a7:69:a7:62:10:d9:e5:b0:76:57:21:1a:fa:
                    d2:e6:22:73:92:9f:f8:de:a7:ea:18:4a:13:e7:ed:
                    80:68:8d:40:e8:7c:ba:89:de:c2:64:40:76:13:48:
                    5b:d4:80:40:4d:c9:08:0d:5e:e0:a9:8d:8c:0b:5a:
                    ae:7f:2b:b2:f2:96:c1:46:51:3b:fe:31:4d:50:f2:
                    22:a7:bb:d7:72:9b:2a:79:95:2b:a4:94:65:95:89:
                    f3:88:b5:81:fb:80:a0:09:ac:28:b0:08:a9:82:21:
                    7e:ea:85:db:42:2d:1b:85:95:0a:1f:79:be:29:8e:
                    20:9e:6d:76:06:cb:62:01:0a:85:0b:93:9e:6a:85:
                    13:99:b3:28:07:9c:2e:9b:12:85:cb:42:08:8b:0b:
                    a2:9b:3b:e0:58:55:62:fc:55:5b:9c:d8:c4:31:15:
                    a5:2a:83:eb:91:9a:a8:ee:20:d8:d3:e7:11:4f:a3:
                    2b:f9:06:19:b0:f2:87:0c:0d:88:5f:ad:0b:74:43:
                    a0:6c:6a:cf:99:1c:1c:3a:93:09:46:d1:e7:98:97:
                    b2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:59:D1:0A:25:23:C4:AE:D1:50:70:F8:E4:80:BE:F9:55:31:74:38
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3139342e33342e3233322e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.34.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:dd:d1:6b:08:86:10:9e:a9:5a:b6:d0:2c:a7:b1:9d:0e:65:
         84:7f:4e:6f:a7:f8:09:40:b6:44:12:7e:a3:f0:60:03:0c:a4:
         8b:e9:cb:23:0b:13:27:28:95:0f:37:30:0b:0f:f1:71:15:6e:
         7f:21:1b:b9:43:9b:ac:37:10:d4:25:bf:31:c2:cb:5c:68:03:
         6c:6f:35:d6:82:60:75:b8:2e:50:9c:3b:78:f2:69:1b:88:91:
         cd:c1:a6:8d:0c:e2:c5:30:61:5a:8e:50:08:0f:4f:61:89:46:
         f5:6b:bb:4f:db:db:b1:22:a1:9d:1f:88:99:d9:14:92:db:85:
         ae:04:ba:b7:fa:e9:b7:d8:a5:81:15:e0:f1:77:cf:bc:3a:e8:
         b7:93:7b:fe:00:b4:8e:df:a3:4f:56:fa:60:04:bf:75:3d:65:
         c4:d0:99:0f:f9:70:d0:72:15:25:95:f8:a8:64:fb:e4:ea:e1:
         bd:a7:19:ab:7b:2f:4d:49:6a:d9:b7:02:90:c4:80:f0:10:7e:
         58:7a:4f:36:24:d5:1c:f1:f4:ea:55:45:c0:37:96:4e:35:67:
         72:60:d5:70:bc:7d:2f:bd:95:87:ee:a8:71:e5:24:f6:f3:a7:
         23:09:8b:bb:19:1c:45:27:e5:c5:42:57:91:60:1f:18:9d:ba:
         aa:8a:f7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----