Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230392e3232382e302f32332d3332203d3e203531313637.roa
File:                     3138352e3230392e3232382e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier:          SZFcE5Qang9AmH4ISZDGjv4joIWfNrOqxEASUyziHCM=
Subject key identifier:   29:6E:4C:26:48:F7:69:09:78:B2:DB:77:8F:FB:85:8B:8A:24:9B:2C
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       20EA49DDA643B448930EC569DED38C767855BAF9
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230392e3232382e302f32332d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:34:30 +0000
ROA not before:           Sat 22 Oct 2022 04:29:30 +0000
ROA not after:            Sat 21 Oct 2023 04:34:30 +0000
asID:                     51167
IP address blocks:        185.209.228.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ea:49:dd:a6:43:b4:48:93:0e:c5:69:de:d3:8c:76:78:55:ba:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:30 2022 GMT
            Not After : Oct 21 04:34:30 2023 GMT
        Subject: CN=296E4C2648F7690978B2DB778FFB858B8A249B2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:55:15:12:9f:10:8e:84:44:50:1a:e5:99:f8:
                    0d:ed:8c:d8:c4:cc:f4:f4:bc:4e:6f:5d:99:7f:94:
                    15:08:18:ce:d4:ab:c9:f1:3e:24:0d:d9:82:05:8e:
                    36:1a:5e:ce:8d:10:9b:b9:93:c3:22:f1:ca:b5:8b:
                    71:ed:cb:1e:72:a4:8c:19:fe:81:82:de:76:83:68:
                    37:02:74:bb:6f:37:23:f9:a6:00:63:b5:50:28:a1:
                    69:13:02:af:1e:36:e0:dd:66:40:ad:a8:f8:63:67:
                    1c:af:1d:97:c4:c5:42:35:60:db:49:97:54:db:43:
                    98:58:f2:f5:9f:94:88:d3:c9:b9:02:8a:e7:6c:89:
                    4b:cc:bf:c6:5e:1a:08:33:b5:e6:a6:e3:18:74:52:
                    3d:46:04:19:45:f6:47:65:3b:20:64:2c:e8:e4:4c:
                    e4:f8:90:3c:07:4d:9f:a6:5b:dc:7e:a8:fd:13:73:
                    2b:cf:ef:8a:46:44:46:66:74:a4:d7:db:8d:c4:2d:
                    f7:82:ce:2e:3f:29:04:78:6a:fd:ba:82:8d:60:42:
                    c5:be:85:f0:2a:70:5b:6c:13:8e:71:ae:89:d6:e5:
                    e6:ba:b3:3b:46:0e:b5:3c:7e:2e:26:25:98:e0:39:
                    ab:ed:ff:f8:55:52:e5:a5:ee:0e:59:5e:68:c1:87:
                    e3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:6E:4C:26:48:F7:69:09:78:B2:DB:77:8F:FB:85:8B:8A:24:9B:2C
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3138352e3230392e3232382e302f32332d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.209.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:0d:13:2f:d1:44:e2:40:d3:6e:9e:6b:5d:36:3d:9c:d9:49:
         8d:f5:ae:be:1d:2a:35:53:71:c4:ba:b4:18:fa:bb:e1:0c:45:
         08:b5:14:da:ac:c7:88:76:01:c8:67:66:cb:74:7a:61:48:9b:
         42:f0:17:c2:a9:b6:8a:10:47:c4:14:63:44:9e:8c:8c:ee:2e:
         05:6d:df:db:c4:00:e0:36:d2:10:d6:7e:85:51:91:9d:52:3d:
         ff:a4:60:c4:39:e1:76:15:69:76:ae:66:e6:61:f5:e5:30:59:
         5b:36:dd:5d:75:03:14:2d:3b:ca:3e:69:9f:c6:cc:74:f2:b5:
         9a:75:ac:56:ea:5c:3d:aa:85:7f:67:7b:69:f3:4a:7d:3a:f6:
         b3:99:37:62:51:88:94:cf:7b:e3:b6:f5:df:14:57:d6:1c:93:
         c7:60:30:b9:e8:d2:56:35:bb:90:68:36:b6:37:e4:2a:29:1c:
         a3:4d:83:38:18:e0:fb:74:0d:54:69:8d:65:29:c7:83:29:be:
         7b:51:6b:3d:a5:2d:c8:17:4f:1c:7e:e3:21:09:53:f1:08:fb:
         0f:51:84:32:31:78:cf:30:ac:61:35:4f:ea:7e:4a:16:72:f0:
         64:ff:5f:e6:62:40:95:1c:ea:43:2e:43:d3:72:ff:57:c5:01:
         ef:1d:99:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----