Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e3134302e3138352e302f32342d3332203d3e203531313637.roa
File:                     34352e3134302e3138352e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          HoRkbOnUolBQTVXFTgMExMQRJUaRi3XnhLk/C9oLTrQ=
Subject key identifier:   26:9D:44:7E:E4:3C:5D:75:57:6F:B5:1B:34:71:77:54:C4:5C:E8:94
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       5B87FD1C6674C19C41E7F6AB183B32DE8DDBF38C
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3134302e3138352e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:30 +0000
ROA not before:           Sat 22 Oct 2022 04:28:30 +0000
ROA not after:            Sat 21 Oct 2023 04:33:30 +0000
asID:                     51167
IP address blocks:        45.140.185.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:87:fd:1c:66:74:c1:9c:41:e7:f6:ab:18:3b:32:de:8d:db:f3:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:30 2022 GMT
            Not After : Oct 21 04:33:30 2023 GMT
        Subject: CN=269D447EE43C5D75576FB51B34717754C45CE894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7c:f5:01:98:04:02:cf:88:2a:18:20:bf:a2:
                    09:9b:97:f3:2c:18:15:aa:ad:cc:bb:0f:a5:0f:b6:
                    d3:3e:c4:48:58:f2:c6:7a:99:25:3f:af:2b:16:80:
                    47:f5:d5:52:18:fe:2f:c1:03:15:8b:5d:6b:ac:67:
                    60:e5:6e:dd:f9:f0:2a:36:62:f7:62:7f:7c:8e:22:
                    23:e3:b3:aa:89:dd:62:ce:2c:00:57:3d:fd:71:d5:
                    35:cc:52:61:cc:d5:7c:8f:3c:2f:23:f7:03:bd:f8:
                    1c:57:8a:d3:f4:1c:4e:da:95:13:29:45:26:3b:19:
                    33:3c:09:07:a8:0c:f2:e2:a9:06:2d:a9:46:48:7b:
                    13:38:38:6b:40:e3:7c:51:ef:32:4c:ba:6a:49:fb:
                    d7:db:5b:c6:c4:73:c4:9e:5b:79:74:b1:d5:1e:80:
                    f6:cd:99:cf:22:ca:f6:de:18:58:eb:7b:ab:fe:f5:
                    2c:e3:65:ba:d2:05:02:d3:aa:70:98:75:2f:85:5d:
                    83:69:51:40:c4:0a:5a:6c:f5:af:d3:cf:eb:98:ec:
                    2c:9b:e9:8a:9f:db:46:54:c5:3c:67:9c:c9:c4:79:
                    fd:99:14:9e:61:11:f1:48:e8:75:9b:fa:60:7f:5e:
                    bb:33:a9:b4:d8:b7:c1:8a:32:23:43:a0:0d:ee:4d:
                    13:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9D:44:7E:E4:3C:5D:75:57:6F:B5:1B:34:71:77:54:C4:5C:E8:94
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e3134302e3138352e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.140.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:1a:1f:02:9c:df:4c:94:63:3d:dc:e5:62:09:ca:87:04:15:
         d3:83:39:ff:46:df:eb:07:d8:bb:93:6b:88:bf:81:46:e3:5f:
         f8:6b:70:e8:67:dd:93:31:37:f3:7c:f7:5a:95:37:e7:77:ed:
         9a:dc:a2:00:7f:d6:9f:79:1e:30:d6:03:fd:eb:9e:a1:bc:dd:
         cc:14:0f:d9:28:d3:01:11:4a:ea:c5:80:bb:b1:4a:0f:32:b7:
         b2:f6:8c:2e:3c:69:00:c9:72:f3:d4:2c:cc:9c:1b:5d:9e:11:
         d5:e9:1e:39:ac:58:2a:2b:0e:86:99:c5:dd:7e:71:b2:14:95:
         d8:67:e5:81:bc:9e:7a:dd:d5:67:45:8a:20:20:72:6d:02:ea:
         d2:87:63:74:d3:b4:20:82:b8:f1:95:5f:ff:d7:cf:1f:11:fb:
         ae:55:8c:14:e1:6a:90:36:e9:b5:d5:ab:7d:e0:d4:34:6c:2e:
         a9:2b:5d:43:fe:0f:df:46:92:29:24:57:7a:a0:b7:a3:ab:29:
         1f:eb:37:f4:88:34:14:2e:32:31:f9:50:4f:17:c7:69:5d:1e:
         0b:39:f6:f5:dd:15:f4:51:a8:d5:a3:df:55:4d:8a:3b:16:e0:
         13:40:1e:b9:a5:0e:55:d6:3e:58:92:32:b5:b3:85:64:e9:0b:
         88:64:c3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----