Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230382e3230342e302f32332d3332203d3e203536383736.roa
File:                     3138352e3230382e3230342e302f32332d3332203d3e203536383736.roa (raw, json)
Hash identifier:          1jVil6Swjn9vAdz1Gs8pz9hUuwQ4LvX52t3C9MnM8bo=
Subject key identifier:   D6:D0:1C:03:AF:FA:C1:E8:6F:AD:8B:17:58:B0:17:4A:C4:DF:E7:58
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       63F4D2E709F6AD1BE8BC195043DE82FAFC3FC709
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230382e3230342e302f32332d3332203d3e203536383736.roa
Signing time:             Sat 22 Oct 2022 04:34:27 +0000
ROA not before:           Sat 22 Oct 2022 04:29:27 +0000
ROA not after:            Sat 21 Oct 2023 04:34:27 +0000
asID:                     56876
IP address blocks:        185.208.204.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f4:d2:e7:09:f6:ad:1b:e8:bc:19:50:43:de:82:fa:fc:3f:c7:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:27 2022 GMT
            Not After : Oct 21 04:34:27 2023 GMT
        Subject: CN=D6D01C03AFFAC1E86FAD8B1758B0174AC4DFE758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b0:3d:89:7b:b2:fa:57:08:d9:ef:37:35:b6:
                    97:23:fe:ed:7b:ea:45:41:29:71:83:63:f9:34:8b:
                    6f:a6:d0:c7:de:41:c6:8b:ad:c1:56:2a:60:ad:c9:
                    74:eb:83:1d:52:59:53:e4:14:29:ad:21:e7:52:86:
                    01:3b:ed:56:9b:7e:bf:4c:e7:be:8b:0c:5b:b8:58:
                    6e:c0:c8:5f:5c:2e:c0:ea:dc:90:8b:b3:3d:95:d6:
                    68:08:fa:65:1a:4f:af:41:2e:11:5a:b7:7b:78:52:
                    3d:ef:5a:04:8d:5f:5b:3b:4a:00:9a:1d:bf:a7:f8:
                    3a:d9:c1:dc:0d:27:ce:e3:89:d4:0f:c3:cd:2f:41:
                    53:f8:4e:22:75:cc:43:d1:9d:81:85:ff:bb:f6:1f:
                    0c:08:a3:91:d6:89:34:b8:27:d6:44:da:e2:71:a0:
                    b3:05:46:43:6a:ba:9f:70:88:02:15:77:81:11:ba:
                    52:3e:30:1d:ff:ec:bc:dd:09:e0:b4:d6:b0:b4:a9:
                    12:d9:66:26:dc:2c:1e:7f:5e:e5:be:6e:96:a0:3f:
                    dc:2c:cc:63:d1:d9:b9:17:b8:49:5f:93:e1:21:4a:
                    0a:35:ad:90:19:ec:04:b5:25:f7:b8:28:f8:df:64:
                    7b:48:0a:5f:e5:fd:ae:20:b6:7f:61:23:a4:49:17:
                    fa:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D0:1C:03:AF:FA:C1:E8:6F:AD:8B:17:58:B0:17:4A:C4:DF:E7:58
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230382e3230342e302f32332d3332203d3e203536383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.208.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:72:0a:83:f6:60:40:3f:df:20:4d:2f:45:9c:f0:16:5c:1f:
         63:d8:be:b0:b7:69:03:88:03:23:f6:06:c1:43:bc:ff:6d:b3:
         f7:8d:5a:a7:70:89:75:9a:3a:81:e2:e0:79:24:1c:ae:fa:84:
         6a:bd:66:6a:c3:10:b6:90:62:ec:7c:98:6b:8e:ee:47:26:b0:
         37:bb:52:31:1f:18:17:15:2f:54:7f:2e:21:f7:44:97:07:78:
         9f:a9:39:30:4a:a4:e6:72:66:73:f3:d7:9f:cc:e8:f6:95:da:
         e3:ea:74:73:e5:8d:30:5a:fe:45:8e:84:7e:7a:2d:9e:3d:68:
         3a:19:43:59:a2:99:13:a9:ff:67:6c:2c:9a:83:8a:30:4d:99:
         62:0f:69:6c:9e:e1:f6:af:48:3a:d5:eb:ae:b5:fb:01:31:fa:
         18:ef:91:71:e0:a0:ea:d7:05:95:2f:c5:ae:b5:f3:56:35:33:
         16:23:f8:ad:a9:31:f1:ad:c0:dc:4e:6d:9c:c3:d5:85:aa:a5:
         73:e0:88:d6:dc:f1:5c:01:7a:81:21:17:c7:48:df:99:c9:c0:
         b2:d8:2f:57:b6:28:b8:c1:20:9c:94:35:e0:36:e5:dd:7b:26:
         d8:4a:81:15:2c:e9:88:e5:63:c8:21:d8:d9:92:fb:2b:bc:39:
         24:83:1d:4b
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUY/TS5wn2rRvovBlQQ96C+vw/xwkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjEwMjIwNDI5MjdaFw0yMzEwMjEwNDM0MjdaMDMxMTAvBgNV
BAMTKEQ2RDAxQzAzQUZGQUMxRTg2RkFEOEIxNzU4QjAxNzRBQzRERkU3NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwsD2Je7L6VwjZ7zc1tpcj/u17
6kVBKXGDY/k0i2+m0MfeQcaLrcFWKmCtyXTrgx1SWVPkFCmtIedShgE77Vabfr9M
576LDFu4WG7AyF9cLsDq3JCLsz2V1mgI+mUaT69BLhFat3t4Uj3vWgSNX1s7SgCa
Hb+n+DrZwdwNJ87jidQPw80vQVP4TiJ1zEPRnYGF/7v2HwwIo5HWiTS4J9ZE2uJx
oLMFRkNqup9wiAIVd4ERulI+MB3/7LzdCeC01rC0qRLZZibcLB5/XuW+bpagP9ws
zGPR2bkXuElfk+EhSgo1rZAZ7AS1Jfe4KPjfZHtICl/l/a4gtn9hI6RJF/oNAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQU1tAcA6/6wehvrYsXWLAXSsTf51gwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zMTM4MzUyZTMyMzAzODJlMzIzMDM0MmUzMDJmMzIzMzJkMzMzMjIwM2QzZTIw
MzUzNjM4MzczNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbnQzDANBgkqhkiG9w0BAQsFAAOCAQEAOnIK
g/ZgQD/fIE0vRZzwFlwfY9i+sLdpA4gDI/YGwUO8/22z941ap3CJdZo6geLgeSQc
rvqEar1masMQtpBi7HyYa47uRyawN7tSMR8YFxUvVH8uIfdElwd4n6k5MEqk5nJm
c/PXn8zo9pXa4+p0c+WNMFr+RY6Efnotnj1oOhlDWaKZE6n/Z2wsmoOKME2ZYg9p
bJ7h9q9IOtXrrrX7ATH6GO+RceCg6tcFlS/FrrXzVjUzFiP4rakx8a3A3E5tnMPV
haqlc+CI1tzxXAF6gSEXx0jfmcnAstgvV7YouMEgnJQ14Dbl3Xsm2EqBFSzpiOVj
yCHY2ZL7K7w5JIMdSw==
-----END CERTIFICATE-----