Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e3133322e3135382e302f32342d3332203d3e203531313637.roa
File:                     34352e3133322e3135382e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          +0Tj6gKqpqWjw+UgefiesLW0Bbr+/AU5WrXNbFgVLl8=
Subject key identifier:   AB:52:EB:4B:16:CD:A1:DA:C1:74:AA:D7:40:6B:6F:68:6F:F5:F6:87
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       18A31A2EB8F912307831FFBDF555EE7A4C742984
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3133322e3135382e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:36 +0000
ROA not before:           Sat 22 Oct 2022 04:28:36 +0000
ROA not after:            Sat 21 Oct 2023 04:33:36 +0000
asID:                     51167
IP address blocks:        45.132.158.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a3:1a:2e:b8:f9:12:30:78:31:ff:bd:f5:55:ee:7a:4c:74:29:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:36 2022 GMT
            Not After : Oct 21 04:33:36 2023 GMT
        Subject: CN=AB52EB4B16CDA1DAC174AAD7406B6F686FF5F687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4d:77:f6:57:07:c1:51:50:01:50:cb:c4:b8:
                    b1:82:b3:6c:52:15:3f:4b:da:c6:84:d9:26:0e:c3:
                    7d:4b:7b:a9:31:e8:5a:06:c5:e2:dd:01:3e:c6:89:
                    f6:64:a0:3a:15:db:b1:2d:02:6b:64:9a:bf:56:3d:
                    93:9e:de:89:8a:8e:ff:3d:c0:22:4f:ba:13:24:7c:
                    1c:db:1b:2d:5f:bf:7b:fe:18:e3:0c:c8:32:02:92:
                    a3:2f:46:c3:01:d5:45:7c:06:da:26:ce:3e:1e:79:
                    84:df:01:85:06:c3:65:de:6b:d4:39:c0:1b:2a:e7:
                    a2:ad:dd:3e:16:23:44:8e:b0:7b:6b:06:78:a5:f1:
                    b6:77:ac:80:c2:70:8e:c9:96:3c:ee:47:92:d2:6c:
                    3d:09:ad:c7:e5:59:ed:ab:23:ec:21:e7:be:30:ab:
                    5f:e4:7f:ca:95:dd:6e:0d:ae:70:8e:20:83:3f:5b:
                    8c:0e:b9:57:76:54:ed:0d:84:3e:3b:eb:a2:fa:36:
                    eb:d5:9b:8f:aa:0e:f7:91:08:9f:f3:78:98:d2:cb:
                    bc:24:23:04:6a:57:43:5b:a1:09:c6:1f:61:a4:fd:
                    3d:4c:19:a6:24:c8:76:18:91:ee:39:97:06:40:58:
                    65:e4:be:f1:44:75:49:2e:70:e0:21:9e:17:04:f4:
                    62:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:52:EB:4B:16:CD:A1:DA:C1:74:AA:D7:40:6B:6F:68:6F:F5:F6:87
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3133322e3135382e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:d8:02:ea:a3:cd:84:41:cf:10:8b:0f:61:ff:8b:c5:ba:6a:
         8b:f5:de:87:e2:9b:61:f5:5b:27:b2:46:b4:f6:8b:a8:18:53:
         b3:d9:c2:2f:00:d8:de:6b:7e:a6:ba:67:98:c2:ab:a6:86:76:
         6b:d3:96:e9:3c:f4:e4:7a:d6:29:1c:27:dd:e0:3a:30:79:ab:
         0a:34:a1:30:e6:f4:aa:fd:1a:76:da:ad:90:44:43:fd:e9:b8:
         25:b3:f9:ee:aa:57:77:c7:d5:bd:ff:0f:44:02:7d:a5:2f:30:
         21:ac:10:bb:1a:e3:c5:2b:5e:a1:00:c0:fc:92:e7:92:f2:d5:
         41:f1:e7:b7:eb:67:47:fb:83:3a:b9:9b:ff:47:81:46:e3:1a:
         c7:f1:1d:84:4d:7b:67:13:0c:36:4c:06:46:11:91:dc:c7:42:
         a5:e8:61:ef:e6:8a:9e:a4:7e:5b:97:0a:b1:ff:9c:3a:df:c9:
         7a:e9:60:d4:19:89:70:c0:af:b0:03:06:af:a8:5d:9c:2c:50:
         e7:e9:8d:4c:98:37:13:00:10:4c:e7:e8:bc:c5:05:d6:77:0a:
         14:3e:49:07:33:a6:0e:17:ca:e4:49:35:12:3d:ab:db:a4:7b:
         1a:7d:e2:7a:9b:67:b0:e7:92:b5:8a:43:c6:93:15:28:71:2f:
         bb:2a:43:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----