Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38312e302e3234362e302f32332d3332203d3e203531313637.roa
File:                     38312e302e3234362e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier:          M+4pM90x8gAWdLtBIhZMur/Rnl5Za/yp03KyzSWRSEY=
Subject key identifier:   DE:05:E5:AE:E6:EE:D4:74:33:03:60:14:08:08:DC:CF:EF:87:74:13
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       0494E0BDDDB6D792DF643CBF91E1FE534225139B
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/38312e302e3234362e302f32332d3332203d3e203531313637.roa
Signing time:             Tue 22 Nov 2022 11:25:50 +0000
ROA not before:           Tue 22 Nov 2022 11:20:50 +0000
ROA not after:            Tue 21 Nov 2023 11:25:50 +0000
asID:                     51167
IP address blocks:        81.0.246.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:94:e0:bd:dd:b6:d7:92:df:64:3c:bf:91:e1:fe:53:42:25:13:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 22 11:20:50 2022 GMT
            Not After : Nov 21 11:25:50 2023 GMT
        Subject: CN=DE05E5AEE6EED474330360140808DCCFEF877413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c0:6c:59:3e:0c:c7:6f:02:5b:90:03:27:19:
                    9a:7f:b5:51:04:35:c3:fd:0b:c1:ca:45:05:b8:e5:
                    41:94:a0:46:b7:83:f0:ce:89:2c:33:d9:9d:37:a3:
                    82:9f:eb:72:83:86:e0:9a:0e:84:8c:11:2d:5f:3b:
                    7a:a2:8d:d1:ac:bc:34:ef:85:31:f3:5f:1b:b2:c1:
                    c7:2b:ad:27:ac:f2:41:94:71:84:83:1c:99:8e:4e:
                    6e:2f:d2:5b:5a:52:64:09:6e:60:84:56:21:99:69:
                    48:43:72:e2:f7:d2:95:78:39:f0:3f:10:7a:e7:ac:
                    a7:ed:39:be:46:9e:26:c3:3b:71:5d:1c:1f:e9:15:
                    78:16:8f:a7:36:0b:33:94:17:53:15:0b:81:85:af:
                    0c:84:fa:0f:8f:23:30:5b:bb:94:4f:8e:43:10:bb:
                    67:69:48:05:6a:e3:b7:ed:98:0c:b1:dd:3c:19:47:
                    e3:04:4f:21:98:05:0d:51:e9:ad:65:85:ac:9f:f6:
                    39:72:f5:7d:b0:74:85:9a:04:2f:0b:45:52:22:40:
                    bb:02:49:7d:a2:23:5e:de:e4:03:77:03:28:07:e3:
                    19:4e:cf:6e:7a:2e:8b:4e:8e:8e:6b:88:0d:5a:ec:
                    ed:7c:ef:55:41:d5:56:dc:10:41:33:52:f2:59:f8:
                    7b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:05:E5:AE:E6:EE:D4:74:33:03:60:14:08:08:DC:CF:EF:87:74:13
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38312e302e3234362e302f32332d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.0.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:0c:fb:61:c0:a0:4c:e1:3f:25:a7:5a:e7:31:f5:95:77:2f:
         cb:b5:5d:55:36:0f:d1:84:b4:5e:28:26:3d:45:3e:e7:c3:64:
         c3:de:2a:f3:c0:d0:f0:b2:4a:1e:d1:29:dc:b2:16:e9:52:cf:
         61:93:17:78:5b:63:e1:f0:55:2b:3d:b2:23:1f:e5:00:46:9f:
         72:18:48:c3:21:d9:0c:70:ef:1b:2a:72:e5:8d:32:3a:45:8d:
         a5:97:91:70:fe:7f:84:66:86:bc:fc:8d:1e:cd:f5:e8:84:ca:
         48:eb:eb:88:3a:ef:c2:a7:b0:f7:7a:31:dc:58:fd:4c:00:bc:
         b6:f9:11:74:74:5e:81:64:fb:a1:16:4b:ff:fb:a5:78:f2:66:
         2a:47:5e:33:90:4b:1f:5d:dc:0e:e2:87:11:2e:67:5b:8c:36:
         44:be:a5:50:e1:7f:ff:aa:e2:9c:7e:6e:bf:b3:26:a3:f2:63:
         d5:18:12:47:86:8b:17:2f:db:a1:ac:cf:1e:cc:73:f8:da:0c:
         f4:e0:1b:cc:13:49:2f:8d:ff:d1:ba:c9:b7:b3:46:dc:72:90:
         ce:67:57:f6:0f:93:57:06:6b:e1:b1:ff:91:58:93:49:b9:eb:
         56:b0:77:48:59:3b:78:03:c2:d1:e2:d8:1a:ba:a5:6f:81:75:
         b3:6d:35:5b
-----BEGIN CERTIFICATE-----
MIIE4zCCA8ugAwIBAgIUBJTgvd2215LfZDy/keH+U0IlE5swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjExMjIxMTIwNTBaFw0yMzExMjExMTI1NTBaMDMxMTAvBgNV
BAMTKERFMDVFNUFFRTZFRUQ0NzQzMzAzNjAxNDA4MDhEQ0NGRUY4Nzc0MTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChwGxZPgzHbwJbkAMnGZp/tVEE
NcP9C8HKRQW45UGUoEa3g/DOiSwz2Z03o4Kf63KDhuCaDoSMES1fO3qijdGsvDTv
hTHzXxuywccrrSes8kGUcYSDHJmOTm4v0ltaUmQJbmCEViGZaUhDcuL30pV4OfA/
EHrnrKftOb5GnibDO3FdHB/pFXgWj6c2CzOUF1MVC4GFrwyE+g+PIzBbu5RPjkMQ
u2dpSAVq47ftmAyx3TwZR+METyGYBQ1R6a1lhayf9jly9X2wdIWaBC8LRVIiQLsC
SX2iI17e5AN3AygH4xlOz256LotOjo5riA1a7O1871VB1VbcEEEzUvJZ+Hv9AgMB
AAGjggHtMIIB6TAdBgNVHQ4EFgQU3gXlrubu1HQzA2AUCAjcz++HdBMwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4Zo
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zODMxMmUzMDJlMzIzNDM2MmUzMDJmMzIzMzJkMzMzMjIwM2QzZTIwMzUzMTMx
MzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAVEA9jANBgkqhkiG9w0BAQsFAAOCAQEACgz7YcCgTOE/
Jada5zH1lXcvy7VdVTYP0YS0XigmPUU+58Nkw94q88DQ8LJKHtEp3LIW6VLPYZMX
eFtj4fBVKz2yIx/lAEafchhIwyHZDHDvGypy5Y0yOkWNpZeRcP5/hGaGvPyNHs31
6ITKSOvriDrvwqew93ox3Fj9TAC8tvkRdHRegWT7oRZL//ulePJmKkdeM5BLH13c
DuKHES5nW4w2RL6lUOF//6rinH5uv7Mmo/Jj1RgSR4aLFy/boazPHsxz+NoM9OAb
zBNJL43/0brJt7NG3HKQzmdX9g+TVwZr4bH/kViTSbnrVrB3SFk7eAPC0eLYGrql
b4F1s201Ww==
-----END CERTIFICATE-----