Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38302e3139302e37322e302f32312d3332203d3e203531313637.roa
File:                     38302e3139302e37322e302f32312d3332203d3e203531313637.roa (raw, json)
Hash identifier:          253SfP2AzjzKlCBqdTbc9HvUP+0cxzprAoQZqCulhEw=
Subject key identifier:   1B:0D:26:17:09:F3:CA:A3:30:56:16:E2:26:1B:97:A4:A3:D5:96:87
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       717DD2078E447C8006F773EAD97551A2BB5EAFFB
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/38302e3139302e37322e302f32312d3332203d3e203531313637.roa
Signing time:             Thu 16 Mar 2023 21:38:46 +0000
ROA not before:           Thu 16 Mar 2023 21:33:46 +0000
ROA not after:            Thu 14 Mar 2024 21:38:46 +0000
asID:                     51167
IP address blocks:        80.190.72.0/21 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:7d:d2:07:8e:44:7c:80:06:f7:73:ea:d9:75:51:a2:bb:5e:af:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Mar 16 21:33:46 2023 GMT
            Not After : Mar 14 21:38:46 2024 GMT
        Subject: CN=1B0D261709F3CAA3305616E2261B97A4A3D59687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:68:36:e3:4a:8c:4b:df:0d:7f:29:44:2d:bd:
                    58:d7:3d:c0:e0:15:05:88:ba:40:42:a2:84:07:98:
                    d7:89:1c:82:4f:cb:3e:ed:1d:8a:ad:10:d3:23:cd:
                    2e:48:8f:15:35:18:d0:94:da:b4:c0:93:86:6c:bf:
                    b4:07:d7:f5:09:49:94:0f:5c:ed:d7:8c:d4:ea:eb:
                    1b:cc:f7:6c:d1:8e:74:f4:fb:0c:86:0f:5d:fa:16:
                    aa:b1:4a:54:b4:03:43:27:57:3d:b5:0f:4e:72:68:
                    97:c3:f9:19:7b:17:64:54:eb:26:92:02:1f:74:76:
                    da:8a:10:a0:4f:68:75:b5:df:40:64:4b:7e:cf:fe:
                    94:a1:89:54:e5:c1:d6:3d:14:c0:bd:ba:85:51:29:
                    09:1c:d2:46:47:43:d2:e7:b0:38:4f:49:59:45:70:
                    75:3c:c4:d9:dc:2e:cc:dd:93:68:66:b7:03:fa:c4:
                    d0:24:b6:7d:a0:10:2f:3d:b2:04:96:69:f2:50:1e:
                    06:97:75:a0:be:47:3c:09:88:06:3b:4c:49:62:dd:
                    66:a6:d3:3d:e8:25:21:a7:8a:c3:f9:6c:89:94:78:
                    59:9a:5f:1d:f8:6a:d1:40:55:82:c4:f1:84:dd:47:
                    4b:f9:1a:c8:e3:bd:99:87:d1:46:10:f6:5e:15:c1:
                    6c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:0D:26:17:09:F3:CA:A3:30:56:16:E2:26:1B:97:A4:A3:D5:96:87
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38302e3139302e37322e302f32312d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.190.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b6:01:86:b7:58:7c:80:f5:f0:5d:66:ca:3d:89:c9:d5:c0:bf:
         1f:91:60:cf:97:56:93:5f:a1:ef:34:ef:0b:22:6f:a1:a4:3e:
         35:fc:79:9d:bb:e0:8e:83:b3:fc:66:e9:84:39:e8:f9:7d:92:
         b2:db:6a:37:02:8b:15:43:3f:dc:c1:3a:bf:91:ba:95:75:93:
         31:4e:6a:ba:1f:63:66:f3:b0:5c:e9:08:53:b9:7c:e7:d7:cb:
         59:a3:5f:fe:86:c8:a7:2c:36:07:06:6c:34:8d:fe:5c:56:40:
         9e:d1:6b:02:dc:1e:1d:de:d5:7d:dc:92:1d:0e:c7:8c:56:8f:
         d3:f9:4c:82:af:84:5f:03:89:62:1b:25:8e:11:ea:4d:b2:0e:
         aa:3c:6b:db:62:6a:c2:fa:b8:5a:68:ee:df:8a:6f:10:f9:a5:
         2b:d9:ce:7a:c5:9a:55:16:2f:86:95:bc:84:73:8d:8f:04:41:
         0a:a8:df:c0:d7:1e:75:16:4e:19:f2:83:d5:d4:a7:37:a8:5f:
         6e:31:1e:54:fe:b1:5c:9b:0f:0f:27:3f:22:9a:3c:92:f6:ca:
         7d:35:39:e7:df:55:84:aa:ed:2f:d4:eb:e6:71:8e:e5:31:a1:
         77:d7:d3:ef:f4:a7:6b:77:91:8c:21:99:31:35:a9:29:42:b1:
         28:19:f7:ea
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUcX3SB45EfIAG93Pq2XVRorter/swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMzAzMTYyMTMzNDZaFw0yNDAzMTQyMTM4NDZaMDMxMTAvBgNV
BAMTKDFCMEQyNjE3MDlGM0NBQTMzMDU2MTZFMjI2MUI5N0E0QTNENTk2ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoaDbjSoxL3w1/KUQtvVjXPcDg
FQWIukBCooQHmNeJHIJPyz7tHYqtENMjzS5IjxU1GNCU2rTAk4Zsv7QH1/UJSZQP
XO3XjNTq6xvM92zRjnT0+wyGD136FqqxSlS0A0MnVz21D05yaJfD+Rl7F2RU6yaS
Ah90dtqKEKBPaHW130BkS37P/pShiVTlwdY9FMC9uoVRKQkc0kZHQ9LnsDhPSVlF
cHU8xNncLszdk2hmtwP6xNAktn2gEC89sgSWafJQHgaXdaC+RzwJiAY7TEli3Wam
0z3oJSGnisP5bImUeFmaXx34atFAVYLE8YTdR0v5GsjjvZmH0UYQ9l4VwWzXAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUGw0mFwnzyqMwVhbiJhuXpKPVlocwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4Zq
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zODMwMmUzMTM5MzAyZTM3MzIyZTMwMmYzMjMxMmQzMzMyMjAzZDNlMjAzNTMx
MzEzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDUL5IMA0GCSqGSIb3DQEBCwUAA4IBAQC2AYa3WHyA
9fBdZso9icnVwL8fkWDPl1aTX6HvNO8LIm+hpD41/Hmdu+COg7P8ZumEOej5fZKy
22o3AosVQz/cwTq/kbqVdZMxTmq6H2Nm87Bc6QhTuXzn18tZo1/+hsinLDYHBmw0
jf5cVkCe0WsC3B4d3tV93JIdDseMVo/T+UyCr4RfA4liGyWOEepNsg6qPGvbYmrC
+rhaaO7fim8Q+aUr2c56xZpVFi+GlbyEc42PBEEKqN/A1x51Fk4Z8oPV1Kc3qF9u
MR5U/rFcmw8PJz8imjyS9sp9NTnn31WEqu0v1OvmcY7lMaF319Pv9Kdrd5GMIZkx
NakpQrEoGffq
-----END CERTIFICATE-----