Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/39312e3231342e36362e302f32342d3332203d3e20313336373837.roa
File:                     39312e3231342e36362e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          4+NAh/Ls5jBtUC9ib0fQc+TKh3rNh/204Eoi/53mFHM=
Subject key identifier:   35:A2:76:86:E0:66:DB:B3:8F:49:6C:92:D3:EB:5F:38:9C:23:40:EE
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       DDBD43A3783A8E5E47AF184A259CB32427C459
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/39312e3231342e36362e302f32342d3332203d3e20313336373837.roa
Signing time:             Wed 28 Dec 2022 09:36:28 +0000
ROA not before:           Wed 28 Dec 2022 09:31:28 +0000
ROA not after:            Wed 27 Dec 2023 09:36:28 +0000
asID:                     136787
IP address blocks:        91.214.66.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            dd:bd:43:a3:78:3a:8e:5e:47:af:18:4a:25:9c:b3:24:27:c4:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Dec 28 09:31:28 2022 GMT
            Not After : Dec 27 09:36:28 2023 GMT
        Subject: CN=35A27686E066DBB38F496C92D3EB5F389C2340EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3b:96:7e:84:a4:0f:be:4d:c3:59:a3:af:4b:
                    32:04:24:fe:02:4a:41:49:6a:07:0c:72:18:ab:04:
                    15:40:8a:18:d7:74:4e:43:0c:c6:dc:0e:d6:fb:a0:
                    88:58:af:91:53:b9:e5:11:67:37:ad:fd:a7:56:75:
                    14:50:5f:48:fa:fb:e4:b1:92:f9:b8:0b:d2:61:df:
                    54:e3:0d:19:5f:06:17:ca:54:d3:ef:9a:ee:cc:00:
                    e3:8e:fb:29:96:98:b1:eb:21:dd:6a:ea:b1:bd:d0:
                    e5:ef:90:3c:97:c4:3a:bd:e2:c6:7e:d2:e1:93:8c:
                    56:e0:f0:23:a3:3b:00:52:19:f7:5a:44:c9:ad:7c:
                    6a:10:30:c0:28:d5:92:7f:2f:99:4f:b2:aa:a3:b0:
                    a8:37:90:f4:2d:bf:b6:6a:4c:90:2a:60:0b:a6:f9:
                    05:41:76:8e:c1:c1:93:08:92:6f:be:5e:71:b1:37:
                    1d:41:0f:a2:6f:3c:27:ed:58:1b:d6:c8:02:77:cd:
                    1b:25:b6:f8:69:45:5b:2a:c1:c8:f1:41:9a:31:aa:
                    62:0f:43:36:6f:36:aa:b6:37:ad:93:d4:e5:11:03:
                    b3:f6:b4:60:a0:6c:63:39:89:9c:dd:bd:d3:bd:af:
                    e4:e7:6d:7e:1a:55:9f:49:01:d6:93:ea:71:c0:c7:
                    dd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A2:76:86:E0:66:DB:B3:8F:49:6C:92:D3:EB:5F:38:9C:23:40:EE
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/39312e3231342e36362e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.214.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:6c:13:5d:dc:59:7b:61:d9:6d:b3:8f:65:94:5b:a6:1d:34:
         ab:77:c8:64:b6:c5:e0:63:33:8d:7e:8a:bf:0e:7d:39:78:0c:
         9f:cb:3a:fd:1b:ee:5f:8f:87:fe:a7:38:94:6e:51:d3:34:f4:
         16:06:b2:e5:ad:4b:d0:de:03:8f:43:f5:6c:79:65:5d:71:d5:
         9d:e6:1e:df:0b:52:51:9b:11:e3:7e:c5:f3:9a:87:19:d4:02:
         d4:ff:e5:b3:07:82:77:28:e1:f6:30:be:8f:09:0c:28:36:81:
         c7:4b:a2:6d:ac:64:7a:3d:6b:75:7e:2c:bb:bd:e4:ae:a6:50:
         de:7f:0e:a3:93:cf:e3:be:48:77:cf:65:a4:e9:45:4f:88:bb:
         0d:0f:30:a5:a3:28:c2:f7:fb:26:8f:61:5a:88:fb:09:47:0e:
         53:58:1a:4f:d2:0f:28:7c:13:a7:21:78:40:61:27:83:23:91:
         10:01:f4:44:8b:7d:fa:64:6f:f4:ef:65:cc:00:99:0c:9b:ba:
         89:cc:e4:36:b2:39:2d:f1:06:3c:fc:39:e2:7e:08:5b:0d:c7:
         49:53:76:b8:fa:f0:4c:60:3a:4a:e0:02:49:7b:24:b1:74:c3:
         a8:97:4c:0f:ba:fe:0f:38:87:d2:44:aa:4c:82:61:12:84:f4:
         b2:cd:40:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----