Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e38372e302f32342d3234203d3e20333935303932.roa
File:                     3139342e36302e38372e302f32342d3234203d3e20333935303932.roa (raw, json)
Hash identifier:          UKSBnGEL0c30p7K1efSlpdmGr8jVwdWsvuoeYTC3Ar0=
Subject key identifier:   C3:00:0B:81:F4:60:15:DB:73:7A:CB:DA:AA:0C:32:84:2A:32:65:17
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       6350D2F5F2B754D4C5B799C6C05B0509C9A2FDD9
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e38372e302f32342d3234203d3e20333935303932.roa
Signing time:             Sat 22 Oct 2022 04:33:42 +0000
ROA not before:           Sat 22 Oct 2022 04:28:42 +0000
ROA not after:            Sat 21 Oct 2023 04:33:42 +0000
asID:                     395092
IP address blocks:        194.60.87.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:50:d2:f5:f2:b7:54:d4:c5:b7:99:c6:c0:5b:05:09:c9:a2:fd:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Oct 22 04:28:42 2022 GMT
            Not After : Oct 21 04:33:42 2023 GMT
        Subject: CN=C3000B81F46015DB737ACBDAAA0C32842A326517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:dc:4f:58:3e:36:05:ce:f7:28:72:06:b5:60:
                    53:54:a1:2c:56:a7:05:73:38:13:d5:34:ad:a0:03:
                    5f:68:76:91:7c:27:ad:93:8b:8f:81:19:f2:aa:2f:
                    3e:2d:b8:52:8b:87:4d:87:87:4a:bd:d7:71:0f:d4:
                    27:09:e5:66:af:eb:c8:9e:af:54:2d:e9:a7:d9:5a:
                    d0:ae:51:10:e6:17:15:2a:06:cd:d0:5f:b1:a4:03:
                    d2:85:b3:dd:16:cf:32:10:da:f9:06:46:76:0c:e4:
                    c1:76:40:5f:bb:63:5b:57:95:75:39:a8:7c:ed:24:
                    b8:29:ac:7e:2e:b0:b5:fb:f9:bc:68:aa:f1:5e:7f:
                    15:66:1c:ef:19:3a:13:5a:6c:6e:19:ff:b8:3a:56:
                    77:d3:ce:71:20:f0:a5:29:e6:d1:ea:e3:d7:94:f9:
                    af:33:3b:a6:50:01:59:d8:7a:ff:58:c6:ad:54:8a:
                    58:15:3f:26:31:82:da:8f:41:22:31:57:0d:64:91:
                    6a:97:6a:73:9d:1d:d9:92:94:f7:f8:79:de:61:7d:
                    5e:9f:3e:d0:b6:24:13:97:85:d7:b6:74:3c:c3:cc:
                    f4:3e:96:1f:c9:e3:8e:24:96:9e:d0:d8:cb:9a:49:
                    74:f5:f3:40:41:31:66:26:c7:fa:4d:73:86:8e:00:
                    11:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:00:0B:81:F4:60:15:DB:73:7A:CB:DA:AA:0C:32:84:2A:32:65:17
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e38372e302f32342d3234203d3e20333935303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.60.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:f7:f3:0c:c5:97:76:4d:e8:51:89:b0:ce:5c:88:d9:63:f8:
         bc:f4:1c:87:8c:f8:87:9e:28:46:05:76:0c:7c:02:40:6c:8d:
         f6:ac:54:9b:89:6d:06:00:d6:b3:3a:b6:32:87:04:d6:2f:11:
         12:77:78:00:14:ba:50:3c:95:1f:4b:14:4e:59:50:50:b2:3d:
         bc:23:a3:93:28:05:9e:19:05:fb:b8:ee:70:87:d1:16:e9:eb:
         50:b4:1f:1a:5a:92:cb:ae:b0:bc:d4:b4:99:da:0d:a2:3f:59:
         e4:e3:02:06:12:96:30:ca:86:78:c0:6a:a9:f8:ab:be:b8:e6:
         f6:6a:65:68:9b:5e:bc:af:7a:31:ad:40:21:08:87:89:ff:a5:
         f3:ff:3a:15:d5:a4:17:34:1a:aa:98:40:5c:b6:30:f7:6f:35:
         7d:86:8b:bc:1e:65:94:00:36:f5:93:65:ae:e6:c4:b0:d8:14:
         28:d1:42:13:b9:a7:0f:d1:4a:20:2d:86:71:7e:71:74:a7:1e:
         b0:3c:ad:ad:19:3d:a7:db:51:52:2c:05:3f:1f:40:d8:51:65:
         0d:20:10:04:49:ad:6a:78:72:24:5d:30:43:ad:8f:16:f3:84:
         a5:ad:8a:e3:bd:b4:72:04:92:d8:bf:9b:3c:22:7c:54:d2:68:
         94:42:ab:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----