Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/34352e39332e302e302f32322d3234203d3e20323033303631.roa
File:                     34352e39332e302e302f32322d3234203d3e20323033303631.roa (raw, json)
Hash identifier:          PlXrWfbg34n8GKuiNvbZlnO4mvAEqKtEuPF6m0L0qsc=
Subject key identifier:   19:F9:95:75:9B:EC:98:61:43:56:17:7D:A9:69:DB:86:C9:54:3C:2E
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       49DD281A082C3EC687D9A649B8020F6D63C400FC
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e39332e302e302f32322d3234203d3e20323033303631.roa
Signing time:             Sat 22 Oct 2022 04:33:33 +0000
ROA not before:           Sat 22 Oct 2022 04:28:33 +0000
ROA not after:            Sat 21 Oct 2023 04:33:33 +0000
asID:                     203061
IP address blocks:        45.93.0.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:dd:28:1a:08:2c:3e:c6:87:d9:a6:49:b8:02:0f:6d:63:c4:00:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:33 2022 GMT
            Not After : Oct 21 04:33:33 2023 GMT
        Subject: CN=19F995759BEC98614356177DA969DB86C9543C2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bc:09:ce:e4:9f:89:e2:15:c8:6e:45:43:c4:
                    d0:68:d3:e7:49:a8:22:76:86:68:59:d6:58:c7:7a:
                    c5:99:ed:a3:c2:d1:cb:ad:72:2d:9a:1d:54:fd:e4:
                    f5:0a:03:14:ba:8d:db:2f:d4:89:47:49:d1:35:18:
                    85:22:d9:4a:ca:df:31:ad:9b:4c:e1:48:1e:b6:b2:
                    c9:d8:b2:43:58:a9:b6:12:6d:fc:6d:65:e8:60:ae:
                    df:17:41:44:f6:01:8d:29:f1:5b:27:89:81:0b:52:
                    c1:df:32:b5:80:37:5d:e1:f8:26:fc:f0:27:8c:fc:
                    ac:b5:e3:fb:91:b6:d3:6a:34:02:ea:b4:3f:d7:61:
                    81:d7:df:1a:90:91:5a:23:71:db:bf:e6:3f:a0:c2:
                    4d:1d:9a:9b:54:cd:63:2b:cc:55:a3:98:d1:5e:a6:
                    05:62:65:84:86:f1:78:a2:d6:83:d3:e4:bc:73:00:
                    7d:cb:7b:4d:c3:4d:d3:88:2f:97:54:79:e8:04:84:
                    4f:0f:4d:70:86:8f:3f:8d:38:6f:f9:1b:7c:82:63:
                    6d:81:53:fc:98:db:8f:24:c0:b1:91:67:87:8a:de:
                    da:56:26:b4:3e:e4:dd:63:6e:88:9a:40:d3:2e:54:
                    e4:88:42:14:f6:7f:44:20:0b:25:aa:c7:99:bb:30:
                    4f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F9:95:75:9B:EC:98:61:43:56:17:7D:A9:69:DB:86:C9:54:3C:2E
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/34352e39332e302e302f32322d3234203d3e20323033303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.93.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:b4:31:b2:a7:89:90:4e:11:8f:52:07:5b:03:ca:6e:86:1f:
         f2:35:a9:02:d2:a3:b3:fd:4c:7d:74:1f:8f:7d:b7:ad:6f:08:
         5c:74:72:22:50:fa:16:d4:62:42:d4:10:5e:d4:d5:b9:82:4d:
         4a:df:39:8d:5c:f7:80:ad:c4:ca:53:4e:a2:66:8d:27:41:c0:
         ce:3e:30:3d:bf:83:7e:6f:af:64:d4:53:f4:f3:7a:a3:eb:af:
         91:d5:12:4d:ac:4c:69:f5:96:b6:20:d0:9e:06:7c:3a:53:f5:
         9b:d5:62:51:79:2a:01:0d:19:2e:c3:62:26:f4:5d:9a:da:54:
         d6:60:d0:77:4f:6b:06:10:87:bb:67:b4:4e:21:5d:34:e6:72:
         3e:d6:83:69:52:f0:5c:90:df:d1:cb:7c:67:83:71:64:d8:07:
         93:18:ef:4e:e7:14:0c:f5:a6:9f:2d:f8:59:d9:f5:84:13:a7:
         f1:64:a4:36:fc:78:7b:83:10:0c:b4:99:53:b1:c8:a3:c2:bb:
         9f:9b:4f:c4:6d:08:ea:2f:a5:64:1c:bd:fd:1c:48:bf:61:38:
         e0:4b:05:4b:05:f6:c8:fb:65:a5:b3:3a:41:96:7d:41:6a:28:
         0e:5f:e4:9b:2f:6f:62:bc:fa:a8:68:79:97:8f:d9:61:53:79:
         d9:79:0a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----