Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e38372e302f32342d3332203d3e203531313637.roa
File:                     3139342e36302e38372e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          GMdcdI0gOFhNJANwpPt6MV+8HQ4XWEn7K0RjcpJ2o7g=
Subject key identifier:   09:05:9D:DB:5A:CA:CA:46:22:DD:2C:C5:27:AF:7C:1E:D2:2E:F1:86
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       1DE013BD4BB23E0D0642B6D668F94D833FD83224
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e38372e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:45 +0000
ROA not before:           Sat 22 Oct 2022 04:28:45 +0000
ROA not after:            Sat 21 Oct 2023 04:33:45 +0000
asID:                     51167
IP address blocks:        194.60.87.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:e0:13:bd:4b:b2:3e:0d:06:42:b6:d6:68:f9:4d:83:3f:d8:32:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Oct 22 04:28:45 2022 GMT
            Not After : Oct 21 04:33:45 2023 GMT
        Subject: CN=09059DDB5ACACA4622DD2CC527AF7C1ED22EF186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e4:ea:74:f8:2e:15:2e:0b:38:89:0c:50:32:
                    ff:13:18:e8:ef:e9:88:cf:8f:dd:54:df:7e:23:7a:
                    08:06:31:62:81:51:93:46:d7:16:46:a4:7e:42:35:
                    52:4a:cc:b1:27:0b:e5:4c:cb:51:4a:56:35:b6:f3:
                    6c:c5:fd:d2:fa:9f:f3:d1:81:ea:07:ae:c1:c1:a3:
                    49:f3:23:74:a5:85:56:6f:17:16:21:3b:4e:ac:2d:
                    c5:8a:a6:73:7e:22:80:f3:ab:fc:73:4d:49:a3:8c:
                    59:8b:f8:55:59:25:f1:1e:2e:fc:65:c2:b6:af:16:
                    80:28:09:d1:88:69:11:19:0f:f7:40:59:2d:fc:96:
                    b8:d3:72:d4:82:48:f8:45:5c:b9:e8:fa:16:18:e8:
                    2e:ec:a3:0a:37:48:e0:2f:27:a0:2e:f0:63:93:3c:
                    1a:3f:83:de:36:5d:93:ef:78:8c:c8:4c:d7:04:78:
                    4c:be:97:70:bc:5b:b6:4c:68:57:ce:66:5b:05:a9:
                    ba:2d:25:e9:4b:0e:f3:3c:19:eb:57:bd:10:6d:d0:
                    f0:36:ba:8e:07:b5:37:fd:16:0a:36:e5:8f:40:fc:
                    c9:88:a8:64:76:4b:18:56:e5:a3:26:fb:53:35:3b:
                    d3:db:13:68:b8:9f:a7:51:a2:1d:64:5f:b0:e0:09:
                    9f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:05:9D:DB:5A:CA:CA:46:22:DD:2C:C5:27:AF:7C:1E:D2:2E:F1:86
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139342e36302e38372e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.60.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:90:b2:ec:5e:86:14:d5:54:63:7a:c3:f9:9f:57:35:c1:f1:
         b9:70:88:d6:bf:17:97:8c:64:17:97:c9:94:b0:cc:96:2d:db:
         76:cb:c7:55:7f:17:68:16:a0:6b:34:d4:af:55:44:97:d9:42:
         f4:2d:e5:a8:8a:b8:85:14:1f:1a:a1:72:e4:63:a2:f0:fe:cc:
         ce:1e:e9:c6:81:fc:81:b5:a3:0b:ab:c9:b5:fc:d8:e7:3d:bd:
         0b:89:91:2f:0a:5c:d7:e5:24:30:1b:1f:31:c4:52:8e:4d:b8:
         84:99:8a:e0:48:0d:2d:7c:ee:d2:26:29:4c:a6:1b:32:f9:47:
         dc:7e:66:b2:db:b8:53:11:b8:c0:c2:40:79:5a:a5:1f:18:8e:
         98:84:40:6d:6d:06:77:77:98:d4:8a:f1:6e:82:1b:3c:44:e4:
         ee:57:2d:d7:c1:ea:1e:97:b3:ab:c7:a1:6a:4d:c3:65:22:9f:
         1b:9b:3f:58:3c:e8:d7:67:67:6b:27:16:6e:9f:f9:16:7f:48:
         a2:04:5c:53:48:44:0e:0b:15:c0:ef:b1:ae:50:48:f5:bc:00:
         fe:61:3e:84:e6:39:a9:3d:91:3b:f4:16:66:b8:84:99:55:36:
         5e:0e:1d:fd:ab:ec:0c:8e:a2:96:f9:5c:77:b8:39:b7:92:86:
         8f:a8:0e:a4
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUHeATvUuyPg0GQrbWaPlNgz/YMiQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWRjOTcwNzU1ODI0Y2I5NjdjYWQ2ZjNiOTY0NzA5YjA5
MmQ0MzA2OTAeFw0yMjEwMjIwNDI4NDVaFw0yMzEwMjEwNDMzNDVaMDMxMTAvBgNV
BAMTKDA5MDU5RERCNUFDQUNBNDYyMkREMkNDNTI3QUY3QzFFRDIyRUYxODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG5Op0+C4VLgs4iQxQMv8TGOjv
6YjPj91U334jeggGMWKBUZNG1xZGpH5CNVJKzLEnC+VMy1FKVjW282zF/dL6n/PR
geoHrsHBo0nzI3SlhVZvFxYhO06sLcWKpnN+IoDzq/xzTUmjjFmL+FVZJfEeLvxl
wravFoAoCdGIaREZD/dAWS38lrjTctSCSPhFXLno+hYY6C7sowo3SOAvJ6Au8GOT
PBo/g942XZPveIzITNcEeEy+l3C8W7ZMaFfOZlsFqbotJelLDvM8GetXvRBt0PA2
uo4HtTf9Fgo25Y9A/MmIqGR2SxhW5aMm+1M1O9PbE2i4n6dRoh1kX7DgCZ+JAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUCQWd21rKykYi3SzFJ698HtIu8YYwHwYDVR0j
BBgwFoAUXclwdVgky5Z8rW87lkcJsJLUMGkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzcvNURDOTcwNzU1ODI0Q0I5NjdDQUQ2RjNCOTY0NzA5QjA5
MkQ0MzA2OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hjbHdkVmdreTVaOHJX
ODdsa2NKc0pMVU1Hay5jZXIwgYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4Zq
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Ny8zMTM5MzQyZTM2MzAyZTM4MzcyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMx
MzEzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAwjxXMA0GCSqGSIb3DQEBCwUAA4IBAQBdkLLsXoYU
1VRjesP5n1c1wfG5cIjWvxeXjGQXl8mUsMyWLdt2y8dVfxdoFqBrNNSvVUSX2UL0
LeWoiriFFB8aoXLkY6Lw/szOHunGgfyBtaMLq8m1/NjnPb0LiZEvClzX5SQwGx8x
xFKOTbiEmYrgSA0tfO7SJilMphsy+Ufcfmay27hTEbjAwkB5WqUfGI6YhEBtbQZ3
d5jUivFughs8ROTuVy3Xweoel7Orx6FqTcNlIp8bmz9YPOjXZ2drJxZun/kWf0ii
BFxTSEQOCxXA77GuUEj1vAD+YT6E5jmpPZE79BZmuISZVTZeDh39q+wMjqKW+Vx3
uDm3koaPqA6k
-----END CERTIFICATE-----