Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e38302e302f32312d3332203d3e203531313637.roa
File:                     33312e3232302e38302e302f32312d3332203d3e203531313637.roa (raw, json)
Hash identifier:          WcJeSliNgKg2jJHqC4Hqk2G2QebP8StUZ/TOvXgHONQ=
Subject key identifier:   90:E8:DC:90:DC:2D:F9:4D:B9:74:F5:A4:0E:12:4B:EA:C4:C4:A5:EB
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       41F9EAEF6C1C9C7C9818AF860B5EDF25AEAA9C9B
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e38302e302f32312d3332203d3e203531313637.roa
Signing time:             Fri 17 Feb 2023 16:15:34 +0000
ROA not before:           Fri 17 Feb 2023 16:10:34 +0000
ROA not after:            Fri 16 Feb 2024 16:15:34 +0000
asID:                     51167
IP address blocks:        31.220.80.0/21 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f9:ea:ef:6c:1c:9c:7c:98:18:af:86:0b:5e:df:25:ae:aa:9c:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Feb 17 16:10:34 2023 GMT
            Not After : Feb 16 16:15:34 2024 GMT
        Subject: CN=90E8DC90DC2DF94DB974F5A40E124BEAC4C4A5EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a3:ee:11:65:7e:91:d4:1f:38:48:d3:be:93:
                    f9:96:2e:84:d6:51:fc:33:ee:2f:5e:e4:42:07:2f:
                    38:8b:0c:ea:5f:a9:e5:54:6f:26:b9:98:16:c9:ec:
                    0f:6a:ae:f9:c8:c4:53:1a:4a:11:d6:d6:f0:fe:76:
                    54:7e:af:5e:2e:c4:ab:58:1b:d4:51:b2:05:59:95:
                    f4:77:30:70:5c:20:cd:a0:a8:23:c4:3a:f2:e1:e6:
                    b1:f7:a2:6a:e8:1e:c8:5d:f3:12:50:da:0e:a3:e8:
                    8a:97:bd:1c:0d:b3:fa:af:cb:6a:38:f2:99:97:bc:
                    62:7d:33:53:01:fd:c7:09:a9:18:8c:1f:63:98:96:
                    fc:15:bd:28:52:3a:b0:75:ce:13:0e:da:ff:cb:91:
                    90:75:ea:ac:ad:00:01:94:42:f3:af:bf:8b:a4:ca:
                    fa:b3:54:72:eb:4d:54:83:9b:49:c0:e6:f9:55:c4:
                    39:ee:2b:5a:66:75:7e:69:31:33:f4:dd:b2:90:0b:
                    f2:93:9f:ae:1c:20:1b:10:70:ab:1c:05:82:64:9e:
                    e1:a2:36:ed:a1:94:4c:62:c7:c3:c4:90:40:e9:0a:
                    62:03:b8:d3:c9:5d:a0:0f:4d:bd:79:c1:66:f2:8b:
                    c4:f1:31:96:da:c6:4e:11:7a:df:70:75:90:b7:bb:
                    2d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E8:DC:90:DC:2D:F9:4D:B9:74:F5:A4:0E:12:4B:EA:C4:C4:A5:EB
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/33312e3232302e38302e302f32312d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.220.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5d:08:37:45:b2:4a:6f:75:52:a8:00:8d:53:94:fb:d1:0a:06:
         d5:03:91:55:2b:9f:f8:37:d0:f0:14:72:35:f1:ec:03:e3:88:
         93:31:9b:ee:4d:81:70:b7:06:9a:a3:0e:2d:81:32:96:70:a7:
         ea:92:14:63:ee:15:3c:e7:f6:b4:ae:24:cb:0a:1f:5f:da:b7:
         50:f0:5d:21:f7:c9:b8:c0:db:2e:3d:ff:5a:eb:a4:be:d5:47:
         6f:4c:7f:cc:86:de:01:29:e0:b8:df:fa:15:f9:bd:cd:07:00:
         5a:7d:f8:d4:ea:83:d0:5b:09:05:78:b2:a0:7f:df:02:f1:23:
         47:71:2a:51:30:29:9c:ff:f9:27:57:c9:bc:1f:5d:7e:2e:48:
         8f:2e:51:ec:81:bd:c1:78:82:9d:6f:8b:bb:eb:b4:ba:d7:d4:
         91:61:cf:93:3a:6b:db:88:46:8c:f7:92:98:c3:16:cc:35:d1:
         2c:13:a4:c0:54:dd:38:fd:93:4d:3c:33:32:83:19:7e:b9:8e:
         73:fc:22:56:c0:27:db:de:bc:cd:88:bf:b8:35:d7:74:6e:df:
         13:66:11:23:fc:8b:b2:c7:aa:18:62:d0:e2:7f:e0:35:9f:79:
         4f:66:45:8b:d6:ef:45:6c:ec:b8:62:1a:a0:9d:4b:03:7f:e1:
         e3:0e:32:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----