Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3231332e3233322e38352e302f32342d3332203d3e20313336373837.roa
File:                     3231332e3233322e38352e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          SmBtCAnz99TQo6NX/OWGmXzoyjFMxr7qPMS1+azfQjs=
Subject key identifier:   37:73:50:5E:AC:53:16:E2:49:EF:51:AE:3D:30:02:4C:70:5F:F3:66
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       256E531F006CBF4303E0835FE310FF4C47A3FE26
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3231332e3233322e38352e302f32342d3332203d3e20313336373837.roa
Signing time:             Wed 28 Dec 2022 09:35:38 +0000
ROA not before:           Wed 28 Dec 2022 09:30:38 +0000
ROA not after:            Wed 27 Dec 2023 09:35:38 +0000
asID:                     136787
IP address blocks:        213.232.85.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:6e:53:1f:00:6c:bf:43:03:e0:83:5f:e3:10:ff:4c:47:a3:fe:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Dec 28 09:30:38 2022 GMT
            Not After : Dec 27 09:35:38 2023 GMT
        Subject: CN=3773505EAC5316E249EF51AE3D30024C705FF366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9a:02:a7:5f:aa:62:c1:7b:5e:18:a3:75:06:
                    fc:d6:30:b1:23:89:ef:24:3b:fe:f3:90:60:c3:1a:
                    e2:77:86:8d:fb:be:95:b2:c2:67:f0:75:9c:ba:1e:
                    d0:e7:fe:bb:7a:75:34:2b:7b:d1:15:30:94:c2:17:
                    26:24:38:f6:15:72:d0:0d:1b:6d:fb:c0:17:54:3e:
                    c5:f9:a3:cf:99:ae:c1:d6:15:3c:7d:95:e5:76:4c:
                    2a:3b:a4:9d:1d:ce:2a:97:99:9c:fc:f0:56:c0:6c:
                    f7:8c:91:1a:b5:4a:37:24:e1:e4:0a:18:09:af:31:
                    28:6b:c5:3b:73:89:aa:55:61:5d:94:80:f4:45:53:
                    4f:7f:5f:e0:f7:60:e5:1a:e6:4a:b7:f5:12:67:c0:
                    ee:23:2c:db:72:18:34:64:5f:25:02:9e:22:fd:40:
                    b7:6c:8b:1a:c8:c8:8b:e6:92:5c:f9:5d:87:d4:02:
                    6e:e3:d4:c4:bb:7b:5f:9d:78:66:84:db:8d:bd:71:
                    93:3b:2b:8f:0b:6d:58:86:5c:f1:ab:99:bc:cc:6c:
                    94:2c:36:85:90:b8:9e:db:47:b0:b7:b6:84:59:b7:
                    0a:f7:84:3d:69:11:eb:f6:91:0e:e6:ad:6a:76:d1:
                    da:d7:60:1b:1c:39:6a:c7:35:ff:8e:7f:94:15:5e:
                    89:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:73:50:5E:AC:53:16:E2:49:EF:51:AE:3D:30:02:4C:70:5F:F3:66
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3231332e3233322e38352e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.232.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:5b:67:62:1d:58:38:ba:46:40:7d:39:cd:cb:3e:99:91:97:
         ee:ca:82:73:34:35:6b:47:72:a2:92:4f:d7:52:dc:6b:55:88:
         e1:d5:12:50:a1:c2:38:26:f0:93:3b:7b:2a:17:4a:22:f9:96:
         56:83:78:ba:ef:b2:de:f2:b2:08:c8:24:6d:f2:24:bd:3b:00:
         a4:7f:4d:39:a8:35:20:dd:d5:90:59:40:bd:4f:25:e5:3e:ad:
         e9:5f:25:6a:05:a4:0c:88:4e:96:d4:66:32:f9:01:6d:f1:f1:
         fc:c5:7e:82:5c:4d:bc:1c:76:fd:d5:17:1b:c6:05:9a:6b:db:
         74:fd:04:33:7b:4e:44:b8:e3:b6:b5:6d:8b:69:2a:d8:d2:d0:
         1c:8a:3e:1c:c2:80:94:d7:eb:87:86:06:c6:c1:ba:cb:9c:75:
         19:f6:f3:b6:f0:f0:c8:a1:ef:e5:f0:53:ce:04:01:f4:85:32:
         f8:e3:d9:be:b2:b5:bd:39:e7:41:45:3a:5b:35:03:4f:fb:ef:
         ef:13:43:22:4a:09:f7:0c:c5:07:42:3a:15:a4:91:8d:2a:c4:
         79:10:12:61:01:9c:e3:93:64:47:57:8b:e7:80:59:43:28:6f:
         e1:a3:a8:20:06:dc:73:88:cd:aa:be:31:84:db:7e:e8:c9:8c:
         dd:bd:e0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----