Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3139362e32302e302f32332d3233203d3e203432333636.roa
File:                     3138352e3139362e32302e302f32332d3233203d3e203432333636.roa (raw, json)
Hash identifier:          gukM214Y0wwhb8jwATIGFgBkapXFlf7QJFxXSUZQrqI=
Subject key identifier:   BF:21:0D:6D:BF:D2:36:CF:76:03:B9:F8:8C:47:67:E7:3A:E8:FD:AD
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       4C38D6155BAC075AF493D48DB484643FBBF4A06B
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3139362e32302e302f32332d3233203d3e203432333636.roa
Signing time:             Tue 15 Feb 2022 12:00:00 +0000
ROA not before:           Tue 15 Feb 2022 11:55:00 +0000
ROA not after:            Tue 14 Feb 2023 12:00:00 +0000
asID:                     42366
IP address blocks:        185.196.20.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:38:d6:15:5b:ac:07:5a:f4:93:d4:8d:b4:84:64:3f:bb:f4:a0:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Feb 15 11:55:00 2022 GMT
            Not After : Feb 14 12:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c5:c1:b1:ea:45:aa:92:bc:9b:95:d1:b4:60:
                    c5:e9:ec:ad:fc:52:e4:a2:b9:3b:6b:e9:9d:5d:f3:
                    55:8d:ab:5e:99:04:59:02:81:b2:08:63:7d:9d:8f:
                    ec:d5:9a:94:ea:fb:40:5c:7b:b5:b4:4b:bb:8e:26:
                    51:d0:95:b9:dc:e1:d9:53:0f:95:8c:2e:9d:c0:3c:
                    73:39:6d:86:f9:1e:a1:aa:2d:c0:90:de:c7:40:74:
                    e3:89:10:5b:53:13:84:2c:24:4b:71:46:f8:d0:22:
                    a7:41:54:8f:04:c7:17:11:d7:f4:94:9d:84:35:42:
                    30:a2:b2:4d:4f:21:e3:8e:0d:2a:39:5c:a0:76:cf:
                    8d:0c:0e:d6:6c:0d:c8:36:8e:38:e9:c7:78:b0:a0:
                    b0:82:4e:b3:99:72:84:0b:3b:48:98:9a:7c:f2:5d:
                    42:f6:c3:85:bf:69:e0:07:6d:3b:34:c2:b6:95:6f:
                    d7:c5:36:67:dd:f8:b0:fc:b7:c0:4b:dc:f2:dd:62:
                    f4:3e:3d:e7:87:fb:74:3d:7e:0c:69:60:9a:f1:fb:
                    ab:9a:11:e0:68:aa:78:a2:f5:6a:81:f3:00:3e:7d:
                    ae:9c:db:4b:3a:a9:05:05:12:cc:53:98:ab:3f:c8:
                    2c:58:86:9f:61:44:95:09:49:f3:06:33:1a:6a:cd:
                    ae:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:21:0D:6D:BF:D2:36:CF:76:03:B9:F8:8C:47:67:E7:3A:E8:FD:AD
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3139362e32302e302f32332d3233203d3e203432333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.196.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:63:0f:3b:ac:64:d6:38:49:d3:13:03:ba:9b:c6:61:f1:c6:
         f8:6f:35:86:96:89:c0:74:aa:0e:4f:e2:21:28:c5:b2:1a:a5:
         0b:e9:9c:b5:da:fc:ca:89:03:0d:c9:ef:d6:d6:a4:c5:8c:53:
         57:94:00:ac:bc:6d:fc:18:1d:73:e2:e1:cd:a3:fa:51:ad:68:
         0a:4b:42:95:eb:a1:d7:4c:72:a1:20:74:16:bb:e4:80:6e:24:
         57:12:85:5c:f3:34:ff:32:31:59:e6:40:44:0c:68:9c:cf:f1:
         ca:84:dc:f3:0c:e6:a1:b0:19:2d:1b:e8:6f:0f:81:ab:bd:9b:
         39:af:88:95:94:18:4b:0c:15:bc:94:68:5e:2e:26:c7:50:01:
         35:fc:ef:58:98:5c:7c:af:6d:17:23:9f:a8:52:8d:cc:54:6f:
         7c:d4:7d:47:ed:ee:81:fe:db:1d:98:6e:0c:54:44:74:71:1c:
         0c:46:62:6f:0c:8d:ed:3c:97:91:e3:8c:ad:0e:a3:9c:19:5c:
         22:c0:80:25:49:d4:d7:df:4f:43:33:7b:ea:3d:b4:65:07:ee:
         88:85:a9:23:aa:44:d6:a8:9a:59:d0:d9:20:b5:34:ce:ea:e1:
         6d:ef:dd:c7:ef:10:ba:89:09:01:a2:3a:83:31:66:bf:05:3c:
         1c:e6:01:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----