Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3135382e3232302e39362e302f32302d3332203d3e203531313637.roa
File:                     3135382e3232302e39362e302f32302d3332203d3e203531313637.roa (raw, json)
Hash identifier:          BoymZXrQqhsXwvKn5X3wcC9dkclt0xSCpy3WsLgYYus=
Subject key identifier:   93:60:C4:A3:04:08:60:07:69:36:7D:CD:18:B4:39:FD:F9:24:E7:FD
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       668A6AA9058471BA6B635364B344AAB8B8596CD9
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135382e3232302e39362e302f32302d3332203d3e203531313637.roa
Signing time:             Thu 16 Mar 2023 21:40:13 +0000
ROA not before:           Thu 16 Mar 2023 21:35:13 +0000
ROA not after:            Thu 14 Mar 2024 21:40:13 +0000
asID:                     51167
IP address blocks:        158.220.96.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:8a:6a:a9:05:84:71:ba:6b:63:53:64:b3:44:aa:b8:b8:59:6c:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Mar 16 21:35:13 2023 GMT
            Not After : Mar 14 21:40:13 2024 GMT
        Subject: CN=9360C4A30408600769367DCD18B439FDF924E7FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d0:12:ea:8a:bb:cc:c1:c9:49:21:f9:ab:cf:
                    e7:c8:40:92:46:56:81:bf:0f:59:53:50:86:1a:43:
                    20:fd:04:15:7a:20:39:42:28:a0:d0:1f:0c:e9:fb:
                    35:b0:68:bb:ea:09:2e:8d:d5:34:8b:31:b1:67:77:
                    3a:b0:ed:70:af:d2:83:24:9e:80:6b:54:f9:d9:f7:
                    62:f5:53:a2:94:40:3b:5e:d8:cd:91:b4:62:6b:15:
                    94:66:fb:9a:5c:46:67:9c:d1:c7:2f:89:b3:87:cd:
                    4b:04:d0:2d:5e:31:27:32:3d:6d:c2:6e:1c:d9:99:
                    4e:f6:3f:c9:6d:97:05:50:e9:2a:24:d1:09:4d:2b:
                    4b:2f:7f:c6:53:ab:27:88:29:f0:c4:6b:b4:6b:b3:
                    1c:34:61:f9:9f:53:97:bc:58:f9:65:79:71:1a:70:
                    d4:0e:eb:16:36:67:4f:6b:73:08:cc:54:1a:15:91:
                    1b:64:98:af:ed:47:27:fe:4f:b5:e3:a5:04:c3:5b:
                    5b:b9:30:5c:4c:61:8b:6c:57:d5:89:38:08:b1:65:
                    d6:3e:4a:dc:85:43:da:85:73:03:66:aa:b1:94:07:
                    72:db:1a:27:01:95:ef:8e:df:8c:16:40:a0:25:90:
                    10:f4:09:35:a6:a2:fd:62:2e:e6:69:5b:7e:20:f9:
                    b4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:60:C4:A3:04:08:60:07:69:36:7D:CD:18:B4:39:FD:F9:24:E7:FD
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3135382e3232302e39362e302f32302d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0e:6a:0c:11:04:77:19:48:3c:7e:a3:90:0c:d9:ab:a7:9a:b8:
         0f:ad:30:c7:40:67:ed:86:fa:86:af:fb:29:dd:a8:42:4b:b1:
         ff:62:68:2a:a9:16:ef:31:f2:0d:5b:0c:cd:cd:29:7f:a0:a1:
         b1:0b:0f:72:20:61:12:73:80:57:94:7e:82:7c:c3:42:2d:97:
         4b:06:4b:a3:a6:18:f7:9e:79:9c:3c:44:a6:81:2e:b2:ee:8f:
         8f:fe:be:af:73:37:f1:2c:64:06:c6:12:70:a8:c3:29:f9:13:
         90:8d:81:e3:fc:25:18:76:b8:9f:63:91:40:a6:42:35:eb:bb:
         eb:75:b7:e4:15:46:9c:4c:b5:58:9d:d2:64:d7:f3:e5:af:cd:
         f2:61:79:7c:3f:40:2c:44:39:8e:36:ea:de:99:2a:58:7c:1c:
         79:79:df:8e:3a:28:e2:f1:b1:2a:8d:cd:f5:34:be:91:93:0f:
         74:c3:60:48:e6:2e:64:68:ec:ef:9e:af:c9:1b:82:9f:ca:c8:
         3c:bf:f5:6e:f8:3b:33:d3:c0:e5:87:89:2d:46:69:fd:ba:20:
         74:72:2b:87:d6:cd:82:5c:cf:c3:0c:f6:df:66:3d:dd:7b:23:
         30:77:33:25:f7:1c:d4:51:36:0c:76:92:d9:95:c1:ef:57:57:
         4e:bb:48:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----