Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e31332e35372e302f32342d3234203d3e203631333137.roa
File:                     34352e31332e35372e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          B/4g4p8zefVGDsAu80Tl4qjWZtmlApFSYqbi6v41PTU=
Subject key identifier:   EE:C4:B5:1B:35:41:1E:70:34:EC:16:9F:08:93:9B:39:C3:03:AB:BD
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       0B083A6DBA4A1D869E241B53B0D01194BF48AA0F
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e31332e35372e302f32342d3234203d3e203631333137.roa
Signing time:             Sat 22 Oct 2022 04:33:35 +0000
ROA not before:           Sat 22 Oct 2022 04:28:35 +0000
ROA not after:            Sat 21 Oct 2023 04:33:35 +0000
asID:                     61317
IP address blocks:        45.13.57.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:08:3a:6d:ba:4a:1d:86:9e:24:1b:53:b0:d0:11:94:bf:48:aa:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:35 2022 GMT
            Not After : Oct 21 04:33:35 2023 GMT
        Subject: CN=EEC4B51B35411E7034EC169F08939B39C303ABBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:34:2e:f4:99:47:ec:a5:8d:99:d9:d4:df:ec:
                    ae:11:41:f2:30:cd:8d:76:cf:43:4c:3a:44:a9:3b:
                    3d:d4:f9:53:5e:0d:51:1f:2f:e8:bc:eb:b9:fc:0a:
                    4d:3a:5b:d5:64:95:58:50:fe:13:21:d3:9e:9a:b0:
                    93:56:22:57:93:e5:b1:85:7d:62:68:37:0c:f8:a6:
                    f4:89:f5:90:61:86:cc:3c:2b:8a:ee:77:c4:ef:70:
                    65:1e:5a:7f:ae:0e:ff:aa:8e:18:b8:2e:06:4b:cd:
                    df:e3:b9:f4:00:a5:76:c2:f6:c8:c1:3e:5a:8b:86:
                    1d:cf:6a:c0:72:83:5a:d8:76:37:dd:c3:db:b0:3a:
                    cc:cf:19:e0:96:79:f7:24:48:f2:91:59:f4:1f:c8:
                    db:f3:c6:e2:f8:69:38:2a:6d:77:42:27:3d:ad:0f:
                    34:1c:cf:bc:6a:23:58:82:82:8f:d6:39:53:7a:67:
                    9c:0a:88:d1:dd:52:4f:d4:89:1b:1f:97:34:26:71:
                    93:a9:70:43:4e:d4:6d:0b:c5:77:12:1d:62:e5:fa:
                    42:87:7f:58:9d:b5:c6:64:10:79:dc:0c:df:bc:de:
                    cd:29:51:f6:1e:f6:e8:12:b6:05:44:51:0f:ef:52:
                    58:10:6c:64:d2:34:fe:f4:fb:f6:1d:4d:41:c4:12:
                    20:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C4:B5:1B:35:41:1E:70:34:EC:16:9F:08:93:9B:39:C3:03:AB:BD
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e31332e35372e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:e3:28:03:90:60:4e:c8:9b:11:17:ca:08:a1:1c:7e:dc:15:
         e5:0c:2c:3a:b2:f0:d0:18:ec:d3:b5:9f:1d:43:93:13:98:cd:
         b3:a6:c4:3a:04:74:08:8e:b6:cc:60:68:05:af:c2:4d:f2:08:
         62:bd:51:97:a0:fe:b5:c9:e9:a5:d5:15:8e:f8:04:b0:d6:40:
         c4:bd:6b:34:53:68:54:bb:1b:b4:69:ff:36:4a:5b:3d:c0:bf:
         43:31:e1:a7:4b:d8:c4:b7:f6:6c:56:d9:82:ca:6c:74:71:ff:
         65:e3:ad:73:98:71:96:09:0d:74:23:b8:dd:d4:99:85:f5:ec:
         d8:60:98:d3:59:39:83:7b:e4:e6:d5:50:30:6a:dd:7b:04:69:
         a6:89:26:6f:17:2f:41:f1:13:e1:9d:cf:8b:50:df:e0:7e:9d:
         6c:89:b8:10:b8:7d:e1:36:c7:d2:af:fb:14:81:4c:5e:ae:e6:
         63:45:99:e0:ca:9c:79:52:50:a3:97:46:85:da:61:ae:d5:a2:
         48:1f:3e:99:fd:d7:9b:f1:03:64:3b:3d:90:31:bb:b1:a0:48:
         c8:e4:88:e7:74:b3:75:02:c1:1f:cb:09:f3:f1:23:2f:f1:20:
         e7:bf:62:cc:c2:d5:1b:2c:68:90:15:89:ea:a6:f9:6e:bf:88:
         a4:b7:14:40
-----BEGIN CERTIFICATE-----
MIIE4zCCA8ugAwIBAgIUCwg6bbpKHYaeJBtTsNARlL9Iqg8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdhOGFmMmI1ZmU4MzFmZjU4OWViMzhhZTNjMDI1Y2U4
NzFmMjNlNzAeFw0yMjEwMjIwNDI4MzVaFw0yMzEwMjEwNDMzMzVaMDMxMTAvBgNV
BAMTKEVFQzRCNTFCMzU0MTFFNzAzNEVDMTY5RjA4OTM5QjM5QzMwM0FCQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmNC70mUfspY2Z2dTf7K4RQfIw
zY12z0NMOkSpOz3U+VNeDVEfL+i867n8Ck06W9VklVhQ/hMh056asJNWIleT5bGF
fWJoNwz4pvSJ9ZBhhsw8K4rud8TvcGUeWn+uDv+qjhi4LgZLzd/jufQApXbC9sjB
PlqLhh3PasByg1rYdjfdw9uwOszPGeCWefckSPKRWfQfyNvzxuL4aTgqbXdCJz2t
DzQcz7xqI1iCgo/WOVN6Z5wKiNHdUk/UiRsflzQmcZOpcENO1G0LxXcSHWLl+kKH
f1idtcZkEHncDN+83s0pUfYe9ugStgVEUQ/vUlgQbGTSNP70+/YdTUHEEiADAgMB
AAGjggHtMIIB6TAdBgNVHQ4EFgQU7sS1GzVBHnA07BafCJObOcMDq70wHwYDVR0j
BBgwFoAUB6ivK1/oMf9YnrOK48AlzocfI+cwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzIvMDdBOEFGMkI1RkU4MzFGRjU4OUVCMzhBRTNDMDI1Q0U4
NzFGMjNFNy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0I2aXZLMV9vTWY5WW5y
T0s0OEFsem9jZkktYy5jZXIwgYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4Zo
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Mi8zNDM1MmUzMTMzMmUzNTM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTMz
MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC0NOTANBgkqhkiG9w0BAQsFAAOCAQEADuMoA5BgTsib
ERfKCKEcftwV5QwsOrLw0Bjs07WfHUOTE5jNs6bEOgR0CI62zGBoBa/CTfIIYr1R
l6D+tcnppdUVjvgEsNZAxL1rNFNoVLsbtGn/NkpbPcC/QzHhp0vYxLf2bFbZgsps
dHH/ZeOtc5hxlgkNdCO43dSZhfXs2GCY01k5g3vk5tVQMGrdewRppokmbxcvQfET
4Z3Pi1Df4H6dbIm4ELh94TbH0q/7FIFMXq7mY0WZ4MqceVJQo5dGhdphrtWiSB8+
mf3Xm/EDZDs9kDG7saBIyOSI53SzdQLBH8sJ8/EjL/Eg579izMLVGyxokBWJ6qb5
br+IpLcUQA==
-----END CERTIFICATE-----