Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e3133342e3232362e302f32342d3332203d3e203531313637.roa
File:                     34352e3133342e3232362e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          Ry2ZXUyxrc5U9Z+lbml6qqo63FT4kPsyGtdhbsdoRQg=
Subject key identifier:   37:AB:F5:71:C1:4A:3B:94:0D:3D:DC:05:56:78:7C:23:3D:8E:1B:DD
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       1793339F1D511D1D7D8711C7D1052DFDF842B230
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3133342e3232362e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:29 +0000
ROA not before:           Sat 22 Oct 2022 04:28:29 +0000
ROA not after:            Sat 21 Oct 2023 04:33:29 +0000
asID:                     51167
IP address blocks:        45.134.226.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:93:33:9f:1d:51:1d:1d:7d:87:11:c7:d1:05:2d:fd:f8:42:b2:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:29 2022 GMT
            Not After : Oct 21 04:33:29 2023 GMT
        Subject: CN=37ABF571C14A3B940D3DDC0556787C233D8E1BDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a5:42:1f:a3:ab:f6:55:df:ce:38:98:b7:6b:
                    dc:d3:ad:96:eb:b5:e1:2c:d2:52:6b:2b:7f:39:3d:
                    92:f7:45:d0:77:a9:6f:e6:f3:bc:7d:49:a4:7f:4d:
                    14:79:3a:a6:35:01:41:f2:bb:05:a5:0e:1f:e7:b7:
                    71:8f:46:ce:fb:34:ca:36:82:93:60:28:72:96:95:
                    ae:06:36:5a:0d:fc:2e:cf:21:b0:ae:a8:2f:ef:67:
                    7c:ee:e7:8c:74:3c:69:ea:ad:ff:8b:3d:d5:db:00:
                    22:33:60:bd:9c:24:5c:83:65:1d:96:39:4a:5a:82:
                    34:70:c6:a7:4c:63:7a:b1:d2:1d:4e:a0:b0:c0:af:
                    69:11:3a:d8:7a:a2:ca:6d:d6:9f:61:b1:77:bd:a0:
                    e6:cd:c7:40:19:9a:4e:9a:32:de:0b:94:bb:44:92:
                    d1:2c:9a:90:bc:f7:b5:86:f3:f0:7e:b1:ce:7a:25:
                    a3:20:b5:5b:83:60:71:be:fe:9b:07:ea:d3:48:63:
                    fd:1a:4c:6f:cd:43:3d:c7:fd:e2:1b:aa:03:a1:68:
                    5f:02:e6:58:33:f9:6a:3b:e2:44:5c:e9:f1:a5:48:
                    12:18:90:5c:ea:a5:1a:81:d5:20:25:43:7e:0a:2c:
                    32:e5:5b:01:59:38:1f:fa:0d:34:00:cb:fb:6e:ee:
                    a7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AB:F5:71:C1:4A:3B:94:0D:3D:DC:05:56:78:7C:23:3D:8E:1B:DD
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3133342e3232362e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.134.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:31:20:08:dd:3b:59:cd:e9:2c:c4:ab:a8:b1:48:25:53:13:
         2f:57:58:61:3f:55:60:2d:59:6a:0d:97:51:b2:3b:7f:5c:90:
         18:d1:5c:f1:c1:07:95:67:29:9a:a5:9a:7f:94:a1:e7:84:cd:
         18:b2:cc:b3:10:0f:3e:c5:a8:ef:76:75:2c:ac:9d:26:1a:c2:
         60:21:c8:13:0f:ad:05:6c:92:9d:b7:79:91:e4:98:eb:d9:ac:
         71:4a:87:18:e9:3f:53:9a:3c:69:d8:1a:56:33:f0:ff:c5:ae:
         86:a5:40:c0:a3:57:5d:f1:b8:db:e5:76:14:7b:57:fa:c5:cf:
         2a:29:41:d0:6e:e8:7b:ed:12:3c:99:f3:c4:25:cc:93:2d:fc:
         b9:5e:40:3c:e3:16:8a:82:18:78:e2:ee:56:3e:bb:1d:03:10:
         8b:1a:af:9d:81:11:55:15:9f:6a:0f:83:38:8e:b0:c8:2e:5b:
         2d:22:e4:2e:26:c5:99:a5:df:96:2d:50:64:7e:4e:9e:a0:9d:
         6c:37:88:a0:3c:90:22:80:eb:ce:e6:28:5e:89:6a:fb:36:f9:
         ef:ae:04:4b:fa:c7:82:be:6d:38:c8:62:51:8a:d0:35:f5:a7:
         e7:14:6b:33:76:26:07:a3:5a:82:02:81:cd:97:a0:47:dc:8f:
         5f:6e:a8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----