Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e36372e3232312e302f32342d3332203d3e203531313637.roa
File:                     34352e36372e3232312e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          Slf9pXC7PiOdbR7UwqWvr6YfppjlKUhDIU84iWXO2bA=
Subject key identifier:   71:B2:31:08:23:7F:15:A2:B4:05:B6:35:5B:F1:1B:75:9B:12:12:EB
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       7D578479699FFB625AE41297D28B783FDDCEF4AD
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e36372e3232312e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:35 +0000
ROA not before:           Sat 22 Oct 2022 04:28:35 +0000
ROA not after:            Sat 21 Oct 2023 04:33:35 +0000
asID:                     51167
IP address blocks:        45.67.221.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:57:84:79:69:9f:fb:62:5a:e4:12:97:d2:8b:78:3f:dd:ce:f4:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:35 2022 GMT
            Not After : Oct 21 04:33:35 2023 GMT
        Subject: CN=71B23108237F15A2B405B6355BF11B759B1212EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3e:8d:2c:f8:b6:74:c8:0e:1e:bd:b3:c2:a6:
                    49:c7:ea:44:f7:cc:f6:bc:87:d9:01:bf:32:01:74:
                    3d:f7:ed:4d:91:88:59:86:a5:bf:80:28:23:f8:14:
                    46:a5:5c:fe:4e:c8:d6:7b:f7:b1:d9:0d:f0:5b:b7:
                    ab:88:96:be:81:ce:3e:ad:57:ee:6b:0a:bf:7e:60:
                    c5:bf:ea:7f:b0:43:53:fb:42:7a:61:38:6b:3c:63:
                    51:82:0c:04:98:15:94:60:d1:55:90:49:b4:dd:56:
                    73:dd:c9:8f:a3:fd:21:37:df:8e:e3:55:45:e1:a1:
                    00:b4:10:70:dd:14:5b:d8:57:ae:ac:3a:64:0d:35:
                    97:2e:2b:f3:2f:37:a8:f5:9e:ae:a9:8b:25:50:f3:
                    88:c2:b2:a9:ef:1e:1c:5a:e2:bf:78:11:65:1c:2c:
                    aa:52:ea:35:fe:39:d5:ee:61:58:30:bd:78:81:98:
                    1f:98:43:08:e9:02:2d:9b:79:6d:8c:0f:8d:15:a4:
                    f4:65:e8:40:a5:59:67:04:95:9d:4b:bf:3c:f8:5b:
                    9a:7b:e2:58:73:f2:63:5c:57:21:e6:0f:e1:48:3a:
                    45:ea:d9:c3:30:a4:7a:cc:f0:52:7a:67:23:ae:1b:
                    1b:6f:24:b9:68:4f:b8:d9:99:d7:ab:f8:a4:08:b8:
                    e2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B2:31:08:23:7F:15:A2:B4:05:B6:35:5B:F1:1B:75:9B:12:12:EB
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e36372e3232312e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.67.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:49:b3:d5:d7:f9:0b:21:5e:fc:32:3d:a2:65:ad:18:ca:3c:
         6d:05:fe:d0:07:71:07:53:fc:f2:71:c4:9a:96:0e:f5:6a:61:
         91:53:43:5a:99:2d:4d:58:9b:63:df:ed:ea:44:25:c0:a5:90:
         b2:9f:81:6f:8d:ae:84:b7:dd:ce:23:06:55:ae:1e:b0:6b:13:
         e2:01:7c:99:06:a4:bb:d1:27:63:b1:96:a9:78:a5:fc:85:1e:
         7b:66:a3:9b:fd:74:61:08:33:01:4f:2d:81:52:a8:45:41:63:
         37:8f:49:05:1b:c7:95:83:20:75:42:0c:8d:a5:a3:81:3c:7b:
         0f:7f:7d:5d:ef:d4:da:95:f2:85:30:ef:2b:3c:d7:7c:61:df:
         79:04:d5:a8:70:26:8c:92:57:05:be:b1:d8:a3:1f:3b:9e:78:
         52:02:7e:05:12:c8:20:3f:31:81:1b:a9:c6:6f:02:17:98:30:
         a1:ae:27:5a:ce:a3:60:bf:08:4f:e0:a3:dc:aa:ff:94:ba:f1:
         07:29:96:f0:3f:09:6d:11:cb:24:23:a9:6f:43:4f:cd:b0:bd:
         2e:61:74:f1:9a:fa:e9:a1:42:e0:9f:17:71:54:8c:96:0b:d5:
         e3:3a:a7:31:b2:cf:1d:0e:f9:cd:e3:bc:68:1b:19:5c:85:f1:
         0a:ae:50:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----