Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/352e3138302e3135312e302f32342d3332203d3e203430303231.roa
File:                     352e3138302e3135312e302f32342d3332203d3e203430303231.roa (raw, json)
Hash identifier:          nbxUNtu1azQ19PRZ7OyTWua68VZJaixK7B5gHbHmiME=
Subject key identifier:   87:AB:93:37:F8:E7:1D:5F:33:42:CD:6A:DF:61:B0:E0:F3:2B:74:CD
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       6489CCFCC4D430FAD8AE484815B05717BDABA61A
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/352e3138302e3135312e302f32342d3332203d3e203430303231.roa
Signing time:             Sat 22 Oct 2022 04:33:28 +0000
ROA not before:           Sat 22 Oct 2022 04:28:28 +0000
ROA not after:            Sat 21 Oct 2023 04:33:28 +0000
asID:                     40021
IP address blocks:        5.180.151.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:89:cc:fc:c4:d4:30:fa:d8:ae:48:48:15:b0:57:17:bd:ab:a6:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:28 2022 GMT
            Not After : Oct 21 04:33:28 2023 GMT
        Subject: CN=87AB9337F8E71D5F3342CD6ADF61B0E0F32B74CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:17:83:5f:f1:c1:b7:df:c5:f3:16:45:17:d9:
                    33:57:0e:bd:d6:05:35:9d:d5:43:de:a9:e3:79:f4:
                    44:0e:18:ec:f9:f2:2f:89:24:a1:23:cc:b5:2b:ad:
                    11:32:3a:e7:e4:36:ff:2f:75:03:f6:a1:b7:7a:63:
                    0f:55:02:57:62:f5:7e:d6:10:6a:76:70:2f:ff:4a:
                    30:05:c6:96:6f:04:21:62:44:ca:1a:4e:21:df:8e:
                    d3:38:ed:c9:9b:d6:77:bd:af:37:53:1a:c8:92:78:
                    61:69:32:d0:79:4c:d6:e4:1a:cb:f4:14:b7:60:90:
                    44:1b:a3:95:a5:55:4c:63:9d:46:95:6a:c3:8c:79:
                    72:5c:c8:2d:a9:32:e8:78:4c:4c:bd:d5:76:ba:26:
                    73:27:28:53:42:ce:6e:0f:75:d7:49:e4:aa:47:13:
                    b5:44:50:2c:bd:35:2c:5e:4a:b3:2a:c9:ad:f6:92:
                    f5:67:68:27:bc:af:13:07:a5:25:d8:80:0a:b1:a8:
                    bb:98:4c:84:f2:78:38:ed:71:c9:99:21:c9:60:63:
                    23:35:b6:e2:6f:ca:3c:aa:a3:b7:a6:77:99:4e:1a:
                    01:90:db:bf:8d:88:3b:67:90:3e:cc:b8:8b:89:bd:
                    ed:2d:08:54:b4:a0:82:78:b0:6e:62:a7:a3:48:bc:
                    dd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:AB:93:37:F8:E7:1D:5F:33:42:CD:6A:DF:61:B0:E0:F3:2B:74:CD
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/352e3138302e3135312e302f32342d3332203d3e203430303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:33:ec:3a:20:8a:0c:95:b1:b9:78:42:88:67:35:a3:48:dc:
         41:17:1c:1f:74:0b:81:2e:72:83:fa:01:b7:e8:92:b7:df:29:
         6e:72:b8:fd:94:be:17:3f:3f:93:a3:fc:91:0f:26:4e:c5:d0:
         c1:a2:6c:90:79:29:8f:46:7a:fa:5e:2f:c6:51:30:f8:c9:2d:
         a0:f5:32:be:57:77:c7:fd:88:a3:31:90:b3:9b:c6:16:4f:b6:
         35:19:30:22:04:e3:f8:3f:30:20:87:c2:fe:a5:36:80:93:e0:
         d9:b6:ab:52:d2:f1:14:44:8f:7a:15:cb:2e:f3:9c:08:d5:a0:
         be:58:92:a1:41:d7:e0:df:47:96:c4:a5:76:82:79:1a:3f:79:
         7d:05:b2:0a:a0:a9:25:c6:06:c5:c0:f5:69:1a:eb:f5:4c:bb:
         3a:92:96:74:02:b3:14:f0:97:1b:1f:1c:1a:b2:20:69:b1:7d:
         12:2c:70:d7:e1:7f:76:2a:1c:47:eb:a2:2c:96:fa:65:b4:01:
         c7:76:4b:8d:5a:47:b7:5f:51:51:69:d8:6d:ff:69:10:75:ee:
         27:50:f7:e0:1b:5e:77:51:a1:d2:0c:02:bf:03:5f:83:fa:4f:
         30:d8:b6:41:71:fe:43:49:59:20:47:9c:e0:26:8b:d1:8a:33:
         82:eb:84:93
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUZInM/MTUMPrYrkhIFbBXF72rphowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdhOGFmMmI1ZmU4MzFmZjU4OWViMzhhZTNjMDI1Y2U4
NzFmMjNlNzAeFw0yMjEwMjIwNDI4MjhaFw0yMzEwMjEwNDMzMjhaMDMxMTAvBgNV
BAMTKDg3QUI5MzM3RjhFNzFENUYzMzQyQ0Q2QURGNjFCMEUwRjMyQjc0Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5F4Nf8cG338XzFkUX2TNXDr3W
BTWd1UPeqeN59EQOGOz58i+JJKEjzLUrrREyOufkNv8vdQP2obd6Yw9VAldi9X7W
EGp2cC//SjAFxpZvBCFiRMoaTiHfjtM47cmb1ne9rzdTGsiSeGFpMtB5TNbkGsv0
FLdgkEQbo5WlVUxjnUaVasOMeXJcyC2pMuh4TEy91Xa6JnMnKFNCzm4PdddJ5KpH
E7VEUCy9NSxeSrMqya32kvVnaCe8rxMHpSXYgAqxqLuYTITyeDjtccmZIclgYyM1
tuJvyjyqo7emd5lOGgGQ27+NiDtnkD7MuIuJve0tCFS0oIJ4sG5ip6NIvN1vAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUh6uTN/jnHV8zQs1q32Gw4PMrdM0wHwYDVR0j
BBgwFoAUB6ivK1/oMf9YnrOK48AlzocfI+cwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzIvMDdBOEFGMkI1RkU4MzFGRjU4OUVCMzhBRTNDMDI1Q0U4
NzFGMjNFNy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0I2aXZLMV9vTWY5WW5y
T0s0OEFsem9jZkktYy5jZXIwgYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4Zq
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Mi8zNTJlMzEzODMwMmUzMTM1MzEyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNDMw
MzAzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQABbSXMA0GCSqGSIb3DQEBCwUAA4IBAQDOM+w6IIoM
lbG5eEKIZzWjSNxBFxwfdAuBLnKD+gG36JK33ylucrj9lL4XPz+To/yRDyZOxdDB
omyQeSmPRnr6Xi/GUTD4yS2g9TK+V3fH/YijMZCzm8YWT7Y1GTAiBOP4PzAgh8L+
pTaAk+DZtqtS0vEURI96Fcsu85wI1aC+WJKhQdfg30eWxKV2gnkaP3l9BbIKoKkl
xgbFwPVpGuv1TLs6kpZ0ArMU8JcbHxwasiBpsX0SLHDX4X92KhxH66IslvpltAHH
dkuNWke3X1FRadht/2kQde4nUPfgG153UaHSDAK/A1+D+k8w2LZBcf5DSVkgR5zg
JovRijOC64ST
-----END CERTIFICATE-----