Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38382e302f32322d3234203d3e203631333137.roa
File:                     3139342e3139352e38382e302f32322d3234203d3e203631333137.roa (raw, json)
Hash identifier:          moMrVozMq3J8aX9JDrcexDtjQomYUdwEUIwfHrVH+xM=
Subject key identifier:   FC:F9:9C:A2:C0:19:DC:9A:89:C1:BF:E8:98:AE:1E:25:CD:2C:99:E3
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       3A02805966CFD8CA81AEA8B4EB1CE62A56C30EAD
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38382e302f32322d3234203d3e203631333137.roa
Signing time:             Sun 13 Mar 2022 23:00:00 +0000
ROA not before:           Sun 13 Mar 2022 22:55:00 +0000
ROA not after:            Sun 12 Mar 2023 23:00:00 +0000
asID:                     61317
IP address blocks:        194.195.88.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:02:80:59:66:cf:d8:ca:81:ae:a8:b4:eb:1c:e6:2a:56:c3:0e:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Mar 13 22:55:00 2022 GMT
            Not After : Mar 12 23:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5d:53:71:05:30:17:60:2e:81:8d:8f:e1:a1:
                    ba:c8:61:ba:0b:09:28:15:22:be:92:c6:e3:b7:9b:
                    c0:ba:e7:e1:06:e3:4f:51:19:45:cb:d3:93:ed:11:
                    59:81:37:3e:04:c2:16:8c:7c:b8:9f:cd:62:f1:4b:
                    10:d8:96:2b:28:ed:42:a0:c2:c1:5e:10:98:ac:ef:
                    19:a4:5c:c6:3f:c5:cb:a4:67:29:6e:de:f6:49:ff:
                    b1:63:67:9c:44:53:e9:e5:fd:1c:cd:19:c8:13:39:
                    7c:8e:9f:0c:2c:cf:4a:9e:bc:ce:af:d6:74:8c:5d:
                    00:44:19:6a:5b:7e:ab:a9:a2:45:e5:95:ec:53:1f:
                    e9:e1:0d:25:67:ee:11:86:0b:9f:ed:cc:b6:34:8e:
                    99:c2:49:5c:3e:f4:c0:68:85:12:7c:0f:c4:ba:33:
                    52:46:ed:0a:7d:36:a2:6d:14:f1:25:48:1a:dd:ef:
                    04:99:8b:ec:4f:96:88:45:f8:b2:d2:a2:25:e1:b6:
                    37:12:d4:dd:ba:a2:24:86:d2:35:c0:94:5e:f9:e1:
                    3d:86:be:8f:77:23:22:fa:57:ac:4c:17:32:2f:ce:
                    d5:69:9f:2b:7a:c9:8e:fe:45:30:75:f5:cb:c0:16:
                    6a:f3:9f:8c:f0:54:65:6d:90:da:42:aa:31:1c:7e:
                    82:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F9:9C:A2:C0:19:DC:9A:89:C1:BF:E8:98:AE:1E:25:CD:2C:99:E3
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/3139342e3139352e38382e302f32322d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.195.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:ba:08:38:c6:a3:14:32:8b:f0:51:c0:97:59:dd:5c:a9:58:
         e1:2a:f5:08:c7:6c:64:bd:1e:de:08:56:d6:fc:40:ba:64:d8:
         d7:e2:74:19:56:33:23:ff:9c:b7:72:0f:ab:84:92:78:4d:46:
         6d:9d:52:06:05:44:6b:b6:a3:60:90:2e:62:76:3d:1a:58:52:
         5b:77:1a:a2:00:00:53:ab:d1:50:2c:98:9e:7a:e7:a4:a8:40:
         23:c9:43:d5:ad:60:e9:21:80:e7:94:5a:64:3f:09:fe:41:21:
         99:1a:95:67:8b:11:6d:f0:be:d5:23:8a:08:79:2a:a4:95:29:
         1a:94:d9:a1:eb:db:b7:52:9d:5d:74:83:ea:5f:d1:64:3b:2d:
         16:bc:0a:dc:79:4c:56:80:b2:58:87:33:8c:e6:bb:06:fa:92:
         5a:0e:bf:3d:d9:81:6b:a4:8d:03:f2:eb:56:85:9a:06:fe:ef:
         98:11:c6:1c:0e:4e:2c:2c:23:e5:23:df:28:8a:f1:dd:27:23:
         eb:a6:9b:af:9e:69:18:70:fd:77:7d:49:29:ab:c4:7e:1d:08:
         8f:8b:59:ca:04:2c:8d:79:41:22:fb:78:15:cb:50:2e:5b:86:
         9d:ff:e9:ea:1c:f3:fe:72:98:ae:46:62:1f:ce:1c:48:f1:81:
         a1:dd:01:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----