Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/37372e3234332e38352e302f32342d3234203d3e203437353833.roa
File:                     37372e3234332e38352e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier:          KzjGi8EwrA+JdyOxbLVRihfmgA2xdUuRVa7S3ly+Pes=
Subject key identifier:   5C:88:49:95:B0:5B:D9:14:5F:DC:A4:CB:26:C8:37:4E:C5:A1:92:7B
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       7DD9A7349D4C47BB84A085CCCA94E9214B7C859C
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/37372e3234332e38352e302f32342d3234203d3e203437353833.roa
Signing time:             Sat 22 Oct 2022 04:33:33 +0000
ROA not before:           Sat 22 Oct 2022 04:28:33 +0000
ROA not after:            Sat 21 Oct 2023 04:33:33 +0000
asID:                     47583
IP address blocks:        77.243.85.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d9:a7:34:9d:4c:47:bb:84:a0:85:cc:ca:94:e9:21:4b:7c:85:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Oct 22 04:28:33 2022 GMT
            Not After : Oct 21 04:33:33 2023 GMT
        Subject: CN=5C884995B05BD9145FDCA4CB26C8374EC5A1927B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b7:94:c7:8d:27:ab:23:db:f7:b2:b5:36:ce:
                    64:d3:93:47:99:ef:c3:17:66:5b:9c:3b:94:7f:f3:
                    73:0e:4e:f9:7e:97:9f:8d:c4:ad:03:49:76:aa:1e:
                    53:b2:49:2c:e3:3f:96:14:0f:81:1f:8e:4f:55:12:
                    be:c1:1d:37:8b:87:39:08:ac:b8:fa:f3:c0:9b:50:
                    d3:38:db:62:fe:06:6d:38:47:8a:d6:df:2f:95:c4:
                    7d:f1:40:5a:45:7c:ea:3e:7b:fc:7c:f8:fc:6e:b0:
                    fc:80:ea:e4:58:5b:1c:b7:7c:66:74:7f:f2:7e:1b:
                    68:e9:ee:0a:b8:64:29:0b:b5:f8:a2:12:e2:e7:2c:
                    5f:d9:a9:86:63:99:c3:7e:e5:c8:ae:58:c9:b9:91:
                    e0:b1:93:1b:63:02:e5:a6:64:bf:f4:9b:1a:9a:20:
                    d9:67:24:e8:f2:27:f9:65:97:70:18:d8:41:dd:63:
                    ad:0f:ab:3e:a0:62:7c:1f:7d:4b:9b:3e:9d:7b:13:
                    ba:d5:34:e4:ab:e7:ac:f8:13:fc:d3:f2:0f:3c:b1:
                    72:02:2a:15:4b:9d:05:29:8e:ab:59:97:03:c4:3c:
                    ce:08:c9:2b:0c:a3:fe:3d:ea:3b:42:95:b0:39:fc:
                    51:f8:52:e4:b7:a1:35:5c:9a:3e:8b:25:ea:fc:ef:
                    27:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:88:49:95:B0:5B:D9:14:5F:DC:A4:CB:26:C8:37:4E:C5:A1:92:7B
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/37372e3234332e38352e302f32342d3234203d3e203437353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.243.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:0c:f2:1c:7c:a6:e3:98:57:f6:58:cc:5a:5d:6a:5d:e0:eb:
         b0:9b:3e:ed:9a:da:e2:f0:ff:a3:aa:cd:92:6a:33:ae:d9:51:
         31:d2:3f:99:f9:dd:a3:88:6a:13:f3:1d:00:e9:2e:71:d5:0a:
         09:87:ac:6a:3b:57:35:bb:33:f6:d4:50:69:b0:53:e2:67:ae:
         b1:8e:6f:45:7d:e3:02:55:bd:e5:26:ad:44:3a:75:33:4d:99:
         90:c4:9a:d1:b0:22:2f:69:42:4f:36:35:a5:57:3e:c7:7c:40:
         ab:e9:f2:ef:2c:47:d6:53:c1:cb:72:b4:6f:29:8e:f1:a9:57:
         21:69:15:dd:96:5a:70:33:aa:88:10:cb:39:63:e8:d1:7f:0a:
         b1:ed:d4:7e:98:a7:81:d4:6e:1c:60:30:02:04:d2:39:f5:8c:
         b4:81:ee:4d:52:ca:d5:08:60:65:5d:45:25:c6:d3:ec:23:bd:
         82:ae:fc:93:61:4f:94:19:ed:67:84:8b:32:8d:b3:79:08:2b:
         08:d6:77:50:e9:ac:12:1d:d6:33:d6:7a:e3:57:a6:cb:df:33:
         e6:96:e1:6e:12:9f:f8:c1:b5:cb:02:c4:0f:94:69:e3:84:64:
         c8:5e:2d:19:f5:15:e5:18:c9:91:54:bb:c0:26:2c:1f:bf:0f:
         ea:10:45:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----