Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e3133372e3139342e302f32342d3332203d3e203430303231.roa
File:                     34352e3133372e3139342e302f32342d3332203d3e203430303231.roa (raw, json)
Hash identifier:          gQ2d2mKu5sX9VEZWDXvhZMgGMoc32yglRL3cuY9f9W8=
Subject key identifier:   FA:55:7B:CF:AE:CA:23:6A:4C:E4:29:FF:73:87:78:B9:7E:49:51:27
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       146A50A6BEBEC6B02EE1FF51830F96DA147E6C2D
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3133372e3139342e302f32342d3332203d3e203430303231.roa
Signing time:             Sat 19 Nov 2022 09:17:17 +0000
ROA not before:           Sat 19 Nov 2022 09:12:17 +0000
ROA not after:            Sat 18 Nov 2023 09:17:17 +0000
asID:                     40021
IP address blocks:        45.137.194.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:6a:50:a6:be:be:c6:b0:2e:e1:ff:51:83:0f:96:da:14:7e:6c:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Nov 19 09:12:17 2022 GMT
            Not After : Nov 18 09:17:17 2023 GMT
        Subject: CN=FA557BCFAECA236A4CE429FF738778B97E495127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:94:52:61:c1:8b:a5:a5:cf:b8:a2:6b:9c:ec:
                    0a:45:23:28:4c:84:57:64:d6:cb:b9:7d:f7:bd:05:
                    00:c5:f5:8f:45:48:93:7f:ed:52:ac:ae:15:59:56:
                    52:f3:9b:1f:09:b5:a8:4c:b9:df:3b:12:3c:f4:cc:
                    f9:91:88:46:f7:f6:19:bc:dd:29:ec:ae:0a:f5:26:
                    30:39:f4:69:49:77:53:b6:59:59:2a:22:27:a8:97:
                    a6:2f:93:48:8b:ed:08:32:0c:40:44:54:77:4c:02:
                    a3:f1:98:a1:25:be:9b:73:46:44:be:1c:51:37:08:
                    46:fa:1a:18:fc:a1:cc:d2:c1:5b:9a:95:63:6e:b2:
                    e9:e1:2e:b4:6e:a7:43:79:82:6f:77:9c:18:e8:a1:
                    9b:e9:d3:89:bb:d1:12:90:d3:fd:a4:19:9b:17:a9:
                    b3:59:39:ac:9b:c9:f0:0f:19:91:c2:df:5a:ff:c7:
                    84:ec:22:1a:3e:7c:22:7f:cc:cc:81:45:33:1c:9b:
                    50:18:9d:6b:c1:72:52:45:03:fc:6f:8b:51:2a:50:
                    07:e9:31:bb:34:3a:fc:ce:a0:56:e9:68:7c:a8:57:
                    b3:4d:6b:13:f2:c0:49:f5:08:29:82:1f:6c:51:fd:
                    a8:a2:0b:dd:5e:f3:9d:0a:10:4e:61:96:96:0d:b8:
                    c3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:55:7B:CF:AE:CA:23:6A:4C:E4:29:FF:73:87:78:B9:7E:49:51:27
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3133372e3139342e302f32342d3332203d3e203430303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:63:3c:18:83:2d:41:82:17:8e:d1:32:c2:9c:50:c7:27:66:
         a8:c6:1c:aa:fb:e0:a3:95:a8:14:86:c9:22:fe:0d:b7:3f:df:
         d7:9d:17:61:3a:9d:aa:f0:cc:dc:87:ed:46:1a:a3:e8:da:12:
         77:c7:b7:24:3a:4e:eb:ac:20:9a:12:29:7e:82:9d:fc:cb:1f:
         62:6e:3b:ce:b3:1a:30:14:04:b4:9f:49:2b:b0:0d:40:d7:ae:
         06:d4:29:df:e1:11:ac:5b:57:36:10:f7:49:68:66:f8:c5:31:
         ca:85:58:97:e6:73:32:fe:ba:2c:6f:6e:b6:4d:b7:82:c7:e0:
         5b:f3:b8:8e:b6:48:c0:5a:71:a4:3b:5c:c9:52:8a:a6:e4:45:
         fc:54:7e:fd:73:a0:32:35:d8:21:bf:87:2f:46:2a:0c:b3:11:
         e3:1d:de:aa:02:cc:7d:85:fb:02:7b:17:d5:a6:da:30:68:ec:
         be:ad:e5:2d:7d:f6:e4:d5:b3:24:58:92:80:3f:00:48:e8:1e:
         10:f7:51:3f:51:67:a3:f8:16:1d:7d:0e:f4:5f:c9:90:af:c4:
         e4:3b:c3:69:d2:64:36:4c:0d:3a:fc:ff:af:c6:53:84:26:55:
         8a:02:43:5c:46:3f:9f:0e:c0:15:68:bb:9b:71:8b:2e:a6:3e:
         83:40:4d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----