Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e3133372e3139322e302f32342d3332203d3e203430303231.roa
File:                     34352e3133372e3139322e302f32342d3332203d3e203430303231.roa (raw, json)
Hash identifier:          HEt/blyrHFHu5X+KfOQRh//isqWgNdO3MwsA5Mo9oOc=
Subject key identifier:   1B:C8:51:AD:9E:35:DF:C7:77:4B:20:96:99:C8:84:13:74:71:B5:33
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       565AAA894E6D8269A2C00DD4467A67E68E2AF3B2
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3133372e3139322e302f32342d3332203d3e203430303231.roa
Signing time:             Sat 22 Oct 2022 04:33:31 +0000
ROA not before:           Sat 22 Oct 2022 04:28:31 +0000
ROA not after:            Sat 21 Oct 2023 04:33:31 +0000
asID:                     40021
IP address blocks:        45.137.192.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:5a:aa:89:4e:6d:82:69:a2:c0:0d:d4:46:7a:67:e6:8e:2a:f3:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:31 2022 GMT
            Not After : Oct 21 04:33:31 2023 GMT
        Subject: CN=1BC851AD9E35DFC7774B209699C884137471B533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ca:31:25:1c:fe:b6:b2:73:9f:c5:24:7e:9b:
                    65:87:9a:e4:93:7d:79:3b:9b:48:6e:85:62:f2:d4:
                    6c:9e:2b:b7:19:a2:60:00:66:d5:2a:95:4f:fc:6e:
                    b5:83:1c:9b:97:01:8c:77:0d:a7:20:e6:08:ee:f9:
                    15:5c:d9:86:88:bf:11:56:a2:a2:47:33:0c:5c:00:
                    3c:18:3f:62:5a:21:53:86:6d:d6:30:9f:65:34:0c:
                    3a:95:30:6c:5f:fd:06:74:f9:0a:9c:d9:8b:ca:6e:
                    7b:a1:3c:7d:8e:95:82:03:c3:1d:9c:50:9d:bb:c8:
                    2f:a0:59:71:64:65:80:de:cb:4a:bd:a8:5c:23:6f:
                    61:68:3e:a0:56:de:ba:d1:ef:15:95:8e:51:e7:ac:
                    73:af:64:05:ff:6a:a1:85:4d:56:32:f2:61:05:10:
                    45:ab:03:68:7e:36:fc:24:13:84:91:ea:5b:c0:a7:
                    5c:24:36:f8:97:20:22:35:d8:2a:0d:d3:f3:56:68:
                    47:ae:e4:d3:c8:d7:c6:86:e9:00:86:18:e2:18:5a:
                    bb:c1:ad:24:d6:a8:c9:67:da:c1:0d:13:54:23:23:
                    da:81:e2:de:6e:50:b4:a9:fe:67:3e:70:af:3e:47:
                    7b:50:aa:81:1c:9a:f1:6f:e1:3e:57:df:95:ab:fd:
                    dd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C8:51:AD:9E:35:DF:C7:77:4B:20:96:99:C8:84:13:74:71:B5:33
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3133372e3139322e302f32342d3332203d3e203430303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:f1:e8:2c:4b:5d:d7:9e:1c:b0:dc:68:16:69:d4:2a:de:2b:
         7c:7f:66:89:b9:69:78:ec:f6:39:5a:bb:6c:e6:53:ec:05:d8:
         79:b3:67:87:1c:aa:95:d3:df:07:38:c5:90:ff:c7:96:c3:e6:
         09:ed:41:33:5e:14:b6:77:0f:e2:1a:4a:b2:ac:e6:b5:4c:87:
         b4:1d:9c:3b:ab:8c:e9:a6:18:6b:4e:6b:15:dc:0a:22:34:67:
         84:e6:12:23:3d:54:4f:55:8c:9a:cb:3d:19:fd:12:d4:1b:d6:
         27:08:0d:59:fa:fe:71:48:7f:86:93:a7:49:fe:cd:a0:fe:3b:
         3a:5e:86:86:2f:80:6f:f0:63:93:13:90:b9:64:c3:cc:77:45:
         c7:c5:4e:ae:dc:95:14:b6:27:f8:2e:f9:70:c4:74:c0:5a:00:
         34:94:45:dd:ca:77:28:a8:1c:19:0b:7d:6e:84:b8:02:23:46:
         26:19:76:d2:5b:3b:ea:64:4d:d5:d3:53:bf:15:b6:1f:31:0a:
         42:65:07:fc:a4:b9:fd:5b:04:84:46:3b:89:1c:09:a9:bf:e8:
         46:a3:92:3d:1d:df:f4:6a:ff:ab:f4:e0:3d:fb:9c:fe:d9:eb:
         32:d2:0e:c0:de:e0:b3:a8:89:21:c5:00:84:10:32:53:22:b6:
         87:9c:fc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----