Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3231332e3233322e38362e302f32342d3332203d3e20313336373837.roa
File:                     3231332e3233322e38362e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          l1Di3jUmbhZbazyfve8xuHESjkv0ifwPodln0ofFuec=
Subject key identifier:   E7:23:76:9A:D3:9D:3F:B1:AF:09:95:03:ED:07:26:40:85:74:85:28
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       5FAC6CAAC4174F95EACC61BDC02485E289B02854
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3231332e3233322e38362e302f32342d3332203d3e20313336373837.roa
Signing time:             Wed 28 Dec 2022 09:27:15 +0000
ROA not before:           Wed 28 Dec 2022 09:22:15 +0000
ROA not after:            Wed 27 Dec 2023 09:27:15 +0000
asID:                     136787
IP address blocks:        213.232.86.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ac:6c:aa:c4:17:4f:95:ea:cc:61:bd:c0:24:85:e2:89:b0:28:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Dec 28 09:22:15 2022 GMT
            Not After : Dec 27 09:27:15 2023 GMT
        Subject: CN=E723769AD39D3FB1AF099503ED07264085748528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b3:cf:f9:7c:25:49:44:60:d6:c1:8b:10:69:
                    c8:fc:90:46:4a:91:64:7c:ee:b7:55:de:d1:d5:d8:
                    5c:8d:10:3a:c1:34:19:fe:cb:51:fb:ec:f6:35:9a:
                    9f:39:e6:b1:b9:bc:62:3a:a1:00:05:9a:c6:00:23:
                    80:d4:ef:a2:41:2e:80:ab:b4:a8:bb:75:fa:56:3b:
                    4e:c1:b5:49:07:b4:ba:74:d2:0d:96:3b:4d:55:d5:
                    28:eb:32:bd:cd:61:f3:9e:a1:bc:17:ef:32:80:92:
                    2a:60:6a:26:35:63:44:58:40:a1:f9:f3:1a:99:c4:
                    77:fc:1f:ed:79:ba:ea:c7:88:63:81:67:34:6f:65:
                    fd:93:cb:2e:37:bd:e7:bf:c8:eb:bd:2b:29:31:2c:
                    c3:30:2a:f9:70:39:00:ce:ff:90:07:0a:b3:b4:e9:
                    3d:44:dc:a3:81:4e:46:7d:41:b3:b0:bc:7b:18:b0:
                    4a:0c:19:83:f7:83:87:6f:1a:8c:2d:98:88:cb:91:
                    d5:fc:8b:23:42:d3:c9:8c:82:e4:d1:1a:93:f6:91:
                    d6:08:d7:7c:c1:e5:a9:ef:9e:87:4a:27:ad:c3:8f:
                    40:fb:ef:58:d6:b1:59:b5:cf:47:e2:3b:8b:f2:ac:
                    40:dd:96:e7:00:5d:d5:1c:5f:38:ee:13:23:23:39:
                    ce:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:23:76:9A:D3:9D:3F:B1:AF:09:95:03:ED:07:26:40:85:74:85:28
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3231332e3233322e38362e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.232.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:cb:bd:c6:4e:a4:88:9b:5d:39:3d:01:d1:c3:0a:31:70:26:
         7e:c4:58:a4:14:8b:da:30:db:8a:8a:2a:d0:9a:d8:d3:c4:9e:
         d3:03:84:be:06:06:23:e0:ac:5c:ca:5e:77:b4:a1:7a:d4:01:
         0a:33:12:1a:2b:23:5b:e6:77:fd:74:ba:53:54:8b:21:b7:0c:
         15:77:8a:7a:7d:3f:ec:ac:0e:b9:91:99:2f:c8:fd:f2:17:14:
         be:85:0b:01:74:27:80:bf:da:33:0e:ad:4c:61:56:78:f9:32:
         af:da:85:d9:48:22:11:05:29:11:73:94:51:29:6a:f4:24:a8:
         58:bb:78:8d:4d:ba:17:20:dd:a1:96:c5:69:44:45:83:f4:f7:
         df:14:2d:bf:c6:23:a0:60:94:f0:f3:fb:e5:c8:bd:0d:8f:0f:
         11:c8:53:fd:48:01:1c:6a:ef:8b:71:6c:7b:1f:73:d2:78:f6:
         f3:53:db:d8:9e:40:db:b0:50:f5:47:6d:b5:b9:6b:2d:c0:59:
         fc:6e:65:60:34:04:8a:12:71:a5:05:df:4b:fd:a7:0d:ea:d5:
         b8:e3:8e:50:1d:2c:a4:4f:7a:60:7c:08:2e:4e:fa:fd:01:4b:
         bf:24:e2:2f:bd:52:63:ed:91:3b:a8:f9:88:0e:1d:49:08:04:
         5b:92:16:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----