Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3130392e3132332e3232382e302f32322d3332203d3e20313431393935.roa
File:                     3130392e3132332e3232382e302f32322d3332203d3e20313431393935.roa (raw, json)
Hash identifier:          Uoaa3SmWx7Q+Z9q+ClBEFm+07/BritXXeAmahr55EV4=
Subject key identifier:   76:33:78:0B:9E:8A:DA:A4:C2:49:7D:F1:81:76:57:A6:C9:12:40:30
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       7DCC431BF12388441C37D7701A2471B6BC2FA7A6
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3130392e3132332e3232382e302f32322d3332203d3e20313431393935.roa
Signing time:             Tue 22 Nov 2022 11:27:28 +0000
ROA not before:           Tue 22 Nov 2022 11:22:28 +0000
ROA not after:            Tue 21 Nov 2023 11:27:28 +0000
asID:                     141995
IP address blocks:        109.123.228.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:cc:43:1b:f1:23:88:44:1c:37:d7:70:1a:24:71:b6:bc:2f:a7:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 22 11:22:28 2022 GMT
            Not After : Nov 21 11:27:28 2023 GMT
        Subject: CN=7633780B9E8ADAA4C2497DF1817657A6C9124030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:84:3c:4c:74:0b:8e:42:dc:98:22:89:ee:e8:
                    97:83:53:0d:fa:64:12:66:0e:1f:20:17:f2:65:ce:
                    72:5e:e0:0a:05:23:46:9f:4d:a6:93:82:90:33:62:
                    25:4a:3b:f3:f2:e0:79:f5:a3:bb:e3:29:0c:8f:91:
                    6f:1c:a1:1e:72:bd:c1:2d:6d:1f:48:81:60:10:e4:
                    c6:33:c8:d7:d9:29:40:c2:9b:35:c2:d3:6f:db:db:
                    8d:8b:a8:2e:dc:d4:6f:6e:8b:de:78:9e:fc:65:43:
                    aa:1a:88:62:ec:54:cd:01:70:40:ed:bd:da:27:c1:
                    86:17:7c:5c:aa:5c:84:b4:e0:ef:51:cc:3e:b7:12:
                    25:08:2f:db:d5:87:37:a0:86:f6:93:ba:b8:6e:9c:
                    d1:c1:c3:ed:ce:f0:fe:1d:bd:0c:b1:86:10:ba:6c:
                    5c:ec:71:44:b6:5f:a1:e5:f0:b4:19:22:aa:f3:5a:
                    41:66:8c:50:7f:84:74:33:07:82:f9:d6:f4:cc:89:
                    29:50:31:01:28:e9:60:66:ed:97:9f:14:13:d0:c6:
                    20:88:88:d8:10:85:7b:9b:3f:47:5a:78:73:93:93:
                    c0:34:95:f8:49:1e:34:d1:8d:6c:56:bd:d7:05:5d:
                    21:e7:09:cf:2c:45:2f:d5:d2:df:e0:8f:44:40:06:
                    1a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:33:78:0B:9E:8A:DA:A4:C2:49:7D:F1:81:76:57:A6:C9:12:40:30
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3130392e3132332e3232382e302f32322d3332203d3e20313431393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.123.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:80:2b:76:cc:c3:73:f5:86:34:bb:f3:67:87:70:2a:2c:da:
         5e:64:3c:a6:ef:fc:57:6e:9b:c8:93:1e:e7:ad:7f:5c:6d:ee:
         ec:3e:d0:bf:ce:ca:de:db:ef:a3:03:0a:cb:65:f5:fb:44:db:
         4f:35:c4:19:fa:9f:93:75:7f:5e:a5:e8:0b:72:0f:8c:e6:0e:
         39:9a:a5:d3:79:71:80:5d:b7:f7:da:1f:42:0b:5e:70:79:9e:
         c0:7e:32:93:04:32:dd:73:66:26:44:fa:4f:12:5b:da:8d:f5:
         49:a8:c1:e6:77:cc:21:e5:73:ee:61:84:1a:37:dc:8e:f5:a3:
         6a:b3:2e:8d:53:63:1e:94:d6:6f:c7:46:ca:cd:19:b4:53:c2:
         59:e9:a8:21:4f:e1:51:48:e1:bb:d2:58:6b:cc:c7:87:7d:f9:
         05:51:3f:aa:32:3d:54:1d:59:eb:c5:3c:28:13:89:ff:53:e1:
         09:08:dd:ed:13:5a:1e:0f:46:64:80:3c:f0:f6:bb:6d:3a:2f:
         2e:cd:9d:e0:3f:26:df:81:ad:73:7c:43:55:fc:8a:f3:78:39:
         75:63:c2:f8:52:61:77:41:2d:32:f6:05:af:de:8f:26:a6:bc:
         22:28:dc:ce:eb:ca:5a:e8:3f:0f:be:e5:f4:e0:a3:7e:5b:2f:
         04:63:5c:a6
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUfcxDG/EjiEQcN9dwGiRxtrwvp6YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjExMjIxMTIyMjhaFw0yMzExMjExMTI3MjhaMDMxMTAvBgNV
BAMTKDc2MzM3ODBCOUU4QURBQTRDMjQ5N0RGMTgxNzY1N0E2QzkxMjQwMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKhDxMdAuOQtyYIonu6JeDUw36
ZBJmDh8gF/JlznJe4AoFI0afTaaTgpAzYiVKO/Py4Hn1o7vjKQyPkW8coR5yvcEt
bR9IgWAQ5MYzyNfZKUDCmzXC02/b242LqC7c1G9ui954nvxlQ6oaiGLsVM0BcEDt
vdonwYYXfFyqXIS04O9RzD63EiUIL9vVhzeghvaTurhunNHBw+3O8P4dvQyxhhC6
bFzscUS2X6Hl8LQZIqrzWkFmjFB/hHQzB4L51vTMiSlQMQEo6WBm7ZefFBPQxiCI
iNgQhXubP0daeHOTk8A0lfhJHjTRjWxWvdcFXSHnCc8sRS/V0t/gj0RABhqPAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUdjN4C56K2qTCSX3xgXZXpskSQDAwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuG
cHJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0
LzQvMzEzMDM5MmUzMTMyMzMyZTMyMzIzODJlMzAyZjMyMzIyZDMzMzIyMDNkM2Uy
MDMxMzQzMTM5MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAm175DANBgkqhkiG9w0BAQsFAAOCAQEA
GoArdszDc/WGNLvzZ4dwKizaXmQ8pu/8V26byJMe561/XG3u7D7Qv87K3tvvowMK
y2X1+0TbTzXEGfqfk3V/XqXoC3IPjOYOOZql03lxgF2399ofQgtecHmewH4ykwQy
3XNmJkT6TxJb2o31SajB5nfMIeVz7mGEGjfcjvWjarMujVNjHpTWb8dGys0ZtFPC
WemoIU/hUUjhu9JYa8zHh335BVE/qjI9VB1Z68U8KBOJ/1PhCQjd7RNaHg9GZIA8
8Pa7bTovLs2d4D8m34Gtc3xDVfyK83g5dWPC+FJhd0EtMvYFr96PJqa8IijczuvK
Wug/D77l9OCjflsvBGNcpg==
-----END CERTIFICATE-----