Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38302e3139302e38302e302f32312d3332203d3e203531313637.roa
File:                     38302e3139302e38302e302f32312d3332203d3e203531313637.roa (raw, json)
Hash identifier:          Bkcezv63UAyjneP98Tp55IhGefeaNza1zZTKu54PgsU=
Subject key identifier:   F9:7E:EF:F0:26:E1:E5:EF:A3:C5:DC:B1:1D:C7:67:05:D6:D8:B5:86
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       2A95BEC6E6E48FC393CA0A54D76FCB18A91EB8FA
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/38302e3139302e38302e302f32312d3332203d3e203531313637.roa
Signing time:             Thu 16 Mar 2023 21:39:16 +0000
ROA not before:           Thu 16 Mar 2023 21:34:16 +0000
ROA not after:            Thu 14 Mar 2024 21:39:16 +0000
asID:                     51167
IP address blocks:        80.190.80.0/21 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:95:be:c6:e6:e4:8f:c3:93:ca:0a:54:d7:6f:cb:18:a9:1e:b8:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Mar 16 21:34:16 2023 GMT
            Not After : Mar 14 21:39:16 2024 GMT
        Subject: CN=F97EEFF026E1E5EFA3C5DCB11DC76705D6D8B586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2a:6b:ae:b0:68:ed:07:b2:95:33:85:c2:ab:
                    23:cc:9b:c8:96:16:9c:ac:a9:99:67:e7:59:0e:94:
                    1a:5e:af:63:84:c2:bf:cf:3a:ce:11:5d:9f:41:38:
                    ab:f0:41:2d:e2:be:cf:80:3e:b1:f8:79:0c:f6:c0:
                    ee:db:39:14:1f:2e:73:0b:3f:a9:fa:97:3e:9e:c5:
                    66:ca:ad:15:27:ad:99:f9:7c:04:c4:50:4c:52:8b:
                    38:c9:34:5a:2f:9a:3a:e2:7a:ae:70:4c:16:fc:c1:
                    96:d6:4b:53:c9:08:69:c1:89:fe:dc:89:e6:0b:b6:
                    e7:3c:1a:be:19:2b:02:4e:ba:93:42:c0:fe:66:25:
                    c2:9a:69:1e:0d:4d:51:46:c8:d6:18:44:e2:af:16:
                    8e:29:05:25:62:56:dd:82:74:f2:39:cd:74:35:2d:
                    91:b3:af:e2:e9:8a:1a:21:f0:d7:2a:1d:5d:fa:56:
                    f1:b7:c8:cb:56:08:32:23:cd:84:b7:57:15:96:45:
                    ed:52:54:80:1b:94:07:f7:07:3a:96:b3:3c:26:e3:
                    c0:b7:41:98:3f:f4:a7:75:75:94:02:22:76:4b:5d:
                    de:d4:36:08:5e:30:aa:d6:fa:de:6d:1a:58:b6:96:
                    ec:e8:f0:ee:35:fb:d6:15:7b:2f:f6:c1:f5:f9:9d:
                    ef:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7E:EF:F0:26:E1:E5:EF:A3:C5:DC:B1:1D:C7:67:05:D6:D8:B5:86
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38302e3139302e38302e302f32312d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.190.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2e:e3:e3:ab:28:4a:93:ad:c2:38:7e:5f:a4:dd:05:55:4d:27:
         d5:b4:40:c7:fa:32:47:db:35:8e:ac:70:27:0d:44:77:c4:f6:
         8b:71:64:58:c6:b0:bf:bb:63:cd:29:9e:c9:ac:2e:c0:98:32:
         2d:4a:63:80:c6:60:69:c6:4f:8c:d3:cc:72:bd:d9:56:a6:9b:
         5b:c0:2d:2a:94:54:38:d8:3d:93:13:11:7d:78:5a:1e:98:ab:
         70:61:77:ee:85:4c:5d:5c:cf:ee:e7:ca:b1:ad:28:a9:1f:20:
         dc:bc:33:43:df:cb:86:e5:7a:79:78:2d:16:90:65:a9:93:8f:
         bb:2b:63:e8:15:74:00:e5:fa:da:25:21:6a:51:56:99:9b:62:
         3a:71:56:4d:96:c1:81:32:a6:b0:13:f5:45:8e:0e:07:f1:c1:
         de:9b:16:f6:ab:0b:a6:cd:e5:03:3e:5d:46:cc:11:74:9f:13:
         ce:0e:59:2d:32:15:d2:70:a0:12:25:f3:a8:ab:e8:55:43:ad:
         8c:96:74:d9:92:ca:96:a7:ca:f6:46:2a:f9:7c:41:74:18:ff:
         85:fd:9f:64:0d:61:b3:34:21:6a:24:07:f1:8b:91:ce:84:e8:
         1b:a9:a3:31:8f:e2:c3:d4:dd:69:08:e1:64:1a:09:b7:87:f7:
         04:e2:66:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----