Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3231332e3233322e38342e302f32342d3332203d3e2039303039.roa
File:                     3231332e3233322e38342e302f32342d3332203d3e2039303039.roa (raw, json)
Hash identifier:          Tz9XQDgxIkMc23NLYeBNwMEHFb9wIS3grisBwhn9pKY=
Subject key identifier:   A6:B3:04:E5:7F:40:8F:A6:61:B0:A6:D5:FF:F0:29:94:70:0F:CE:57
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       02F2E5A554CC9FDF3A74DF6478E211DB21669B57
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3231332e3233322e38342e302f32342d3332203d3e2039303039.roa
Signing time:             Wed 28 Dec 2022 09:26:50 +0000
ROA not before:           Wed 28 Dec 2022 09:21:50 +0000
ROA not after:            Wed 27 Dec 2023 09:26:50 +0000
asID:                     9009
IP address blocks:        213.232.84.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f2:e5:a5:54:cc:9f:df:3a:74:df:64:78:e2:11:db:21:66:9b:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Dec 28 09:21:50 2022 GMT
            Not After : Dec 27 09:26:50 2023 GMT
        Subject: CN=A6B304E57F408FA661B0A6D5FFF02994700FCE57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ef:87:c8:be:d3:c0:8c:96:10:ca:03:fd:10:
                    62:69:35:e8:9a:3a:43:a9:a4:d7:01:f4:94:93:78:
                    59:6a:e2:47:11:05:00:1c:d9:4f:04:81:1c:5a:e0:
                    d9:19:5f:68:38:93:58:6a:02:61:0d:d4:a5:bb:7f:
                    9f:17:cc:ba:f9:14:eb:a5:1a:cb:c7:0f:c2:95:aa:
                    81:7d:66:cf:75:de:26:b1:55:14:c2:b3:2d:34:00:
                    af:2d:39:60:e8:62:8c:ea:25:97:6f:86:be:ba:77:
                    65:63:f5:57:6e:82:9a:f8:e9:fe:9b:58:ae:94:42:
                    71:3a:a0:2e:27:4b:47:50:d6:3f:1f:47:fb:ff:12:
                    78:80:79:f2:07:28:5a:c0:6c:8c:f7:a0:99:1f:a3:
                    43:19:ef:de:07:5e:8f:91:e1:a6:98:ea:9d:7f:d9:
                    73:eb:78:3c:99:a1:01:64:82:ba:e8:22:39:4b:16:
                    04:e6:8b:d4:96:a2:a4:21:5b:47:43:9b:93:6f:04:
                    f2:79:12:c6:6f:79:c4:e9:b0:95:b0:33:f9:44:4c:
                    9d:02:37:db:5a:bc:05:c3:75:91:82:2f:34:7f:de:
                    58:07:d6:8c:32:ca:0f:1b:d1:61:e3:7b:d7:66:7a:
                    c5:a2:48:8b:e7:ee:2f:3e:c2:9b:9c:84:cd:17:5e:
                    66:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B3:04:E5:7F:40:8F:A6:61:B0:A6:D5:FF:F0:29:94:70:0F:CE:57
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3231332e3233322e38342e302f32342d3332203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.232.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:ce:bb:93:f0:7f:f3:de:42:7b:43:2c:d5:f7:20:9e:d3:64:
         aa:8d:85:12:cf:27:fb:15:6b:06:6c:fd:be:3c:0e:69:19:95:
         ee:75:5e:62:7e:78:28:64:9c:2f:b9:f0:d5:25:ec:62:96:4c:
         4c:c1:fe:c4:bc:a7:c7:43:74:0d:6b:c6:c2:10:b0:11:26:a1:
         3d:61:19:0d:42:70:5b:76:22:a6:2e:92:dc:1f:4b:54:97:70:
         8f:4d:69:8b:74:40:f1:1e:df:f1:e3:1c:15:b2:8e:f2:af:ff:
         49:9a:b5:92:91:f6:68:a0:13:49:63:df:28:83:ea:1b:41:28:
         0a:96:39:33:e2:69:25:49:06:a5:5e:1a:e1:e2:61:66:6b:0e:
         75:8b:b8:e5:94:26:97:f2:e4:37:f9:2f:9d:58:9b:6f:9f:56:
         c2:bf:06:c8:d1:89:19:44:7f:46:5d:26:93:5d:c5:fa:e0:3f:
         54:d0:95:8d:38:e7:02:20:e2:89:36:fa:cb:8b:43:6e:1e:ff:
         33:88:f8:f7:a5:09:15:3b:39:d5:39:49:33:38:e1:50:58:52:
         54:56:e1:db:88:23:c7:86:2f:c5:bd:8b:7d:77:5e:2f:85:a1:
         09:73:5f:3d:08:eb:72:cf:b0:6c:8b:3c:7a:bf:23:ec:f4:8e:
         f7:4f:ae:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----