Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38312e302e3232302e302f32332d3332203d3e203531313637.roa
File:                     38312e302e3232302e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier:          pjUIcX4UeQLxPjwVIA/Uy9O9odwAxs0QTHN2P96ylmA=
Subject key identifier:   C8:20:68:0A:17:26:78:AE:A2:CE:D8:25:71:9F:5C:B6:ED:84:37:BE
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       13F735E1C7EA8CF97EF5B3F8B62D849A477BE04A
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/38312e302e3232302e302f32332d3332203d3e203531313637.roa
Signing time:             Tue 22 Nov 2022 11:25:12 +0000
ROA not before:           Tue 22 Nov 2022 11:20:12 +0000
ROA not after:            Tue 21 Nov 2023 11:25:12 +0000
asID:                     51167
IP address blocks:        81.0.220.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f7:35:e1:c7:ea:8c:f9:7e:f5:b3:f8:b6:2d:84:9a:47:7b:e0:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 22 11:20:12 2022 GMT
            Not After : Nov 21 11:25:12 2023 GMT
        Subject: CN=C820680A172678AEA2CED825719F5CB6ED8437BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5f:b9:09:6a:74:af:b5:f8:05:26:e2:80:f9:
                    3f:cb:74:3d:cf:60:f6:a4:fe:60:b7:28:68:fc:34:
                    b1:47:b3:ab:1a:2c:1a:73:26:ca:34:69:5f:f1:b4:
                    4b:8f:e7:16:d3:f6:64:54:9c:56:31:16:18:ba:ab:
                    0b:65:ef:41:04:55:60:c8:d3:c8:f1:79:2b:4a:2a:
                    0d:10:57:0c:47:44:3e:f7:2c:e3:04:e6:3a:4d:12:
                    f3:cd:e9:9d:10:d7:d2:1f:fe:31:b0:01:2c:ab:51:
                    25:dc:ad:c6:ec:f6:3d:37:ee:b9:1e:9e:9d:c7:21:
                    66:53:92:4d:e5:9f:ed:3e:cc:10:e9:7b:bf:5c:79:
                    89:fa:30:93:db:03:de:60:0f:78:6b:ef:37:bc:b4:
                    e2:9c:43:c2:c4:65:b7:4b:ef:a8:30:6a:3d:f5:47:
                    29:ba:22:7c:a0:7f:82:a6:fa:dc:da:49:16:85:97:
                    ec:f2:11:e6:0c:91:f9:ec:c4:c4:b7:af:4b:a2:d2:
                    ee:22:e8:dc:f2:b1:c0:9a:96:5b:64:9b:71:ce:ed:
                    53:8f:5c:04:8c:09:b9:47:92:be:5d:81:df:9e:df:
                    0f:92:f2:e3:3c:5a:23:37:d3:aa:bf:00:89:a7:18:
                    e4:aa:1e:ac:a5:63:3e:f5:44:5d:b9:85:80:df:91:
                    3e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:20:68:0A:17:26:78:AE:A2:CE:D8:25:71:9F:5C:B6:ED:84:37:BE
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38312e302e3232302e302f32332d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.0.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:6f:58:43:7b:32:cd:f4:6c:0d:e6:6b:8c:cc:2d:76:c1:1d:
         53:a2:4d:45:39:76:d7:0c:0b:84:8c:09:81:8c:7e:bd:b0:e1:
         55:1c:2d:2e:35:f8:67:7d:a7:ca:ce:23:8b:25:bf:7f:cc:47:
         33:f9:e8:86:92:ad:ff:11:d6:ec:ae:f2:2c:2f:75:ba:a2:8e:
         23:66:23:af:72:6a:82:b4:25:35:c4:c6:2b:11:53:61:61:e2:
         04:fc:8c:3c:a3:31:1e:7d:0d:a8:70:18:dd:5e:1a:93:37:ec:
         05:4a:2b:c5:6f:00:76:9a:2b:a4:e2:a1:21:a7:ec:17:fa:ad:
         f0:62:95:a7:ec:4d:97:e4:f3:76:0e:d1:c4:36:19:00:46:30:
         dc:7c:71:a6:1b:3b:c3:7b:68:83:ac:b6:6d:e0:4b:22:97:96:
         11:b1:ef:27:df:4a:a5:9b:68:da:2d:b5:ab:97:db:3b:38:1c:
         92:08:19:bb:8a:02:ef:75:2d:1a:e7:13:8a:76:d8:d9:60:3c:
         f2:ad:37:c6:08:1d:df:23:c3:4e:2d:16:38:0c:a4:c9:c4:26:
         8b:8a:ab:5b:45:16:71:b0:cb:89:3d:f9:6f:e8:f6:3a:a4:8f:
         b2:8b:b5:48:da:a6:5b:5c:9d:cc:4b:88:2b:dd:b8:fd:92:67:
         51:1b:b3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----