Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38312e302e3234382e302f32332d3332203d3e203531313637.roa
File:                     38312e302e3234382e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier:          mJ7ckv0kB7AQfGWqEtcHy+MTQRVW+bfG8ilCI1QdfAA=
Subject key identifier:   67:5D:BB:01:72:A6:14:09:9C:0B:B5:17:F1:F6:32:99:76:CA:0B:C0
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       53315F6BA66542F68FD76ADCD337C8A19F967326
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/38312e302e3234382e302f32332d3332203d3e203531313637.roa
Signing time:             Tue 22 Nov 2022 11:26:15 +0000
ROA not before:           Tue 22 Nov 2022 11:21:15 +0000
ROA not after:            Tue 21 Nov 2023 11:26:15 +0000
asID:                     51167
IP address blocks:        81.0.248.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:31:5f:6b:a6:65:42:f6:8f:d7:6a:dc:d3:37:c8:a1:9f:96:73:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 22 11:21:15 2022 GMT
            Not After : Nov 21 11:26:15 2023 GMT
        Subject: CN=675DBB0172A614099C0BB517F1F6329976CA0BC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6a:4d:d8:ab:d3:f9:df:94:29:10:b9:e8:18:
                    7c:55:9f:05:b1:77:81:32:ec:58:87:75:5c:df:ae:
                    f9:52:7b:6f:ad:fd:af:3e:58:0a:7b:d8:bb:e1:a5:
                    a8:d0:5d:e2:b2:73:5f:d9:46:56:4a:8f:2b:91:2b:
                    13:36:05:da:c3:24:7c:7c:65:d5:6a:4c:70:2d:03:
                    5f:c4:16:cc:5a:fb:b8:f1:4b:af:b4:cd:53:cc:6b:
                    1e:66:14:6a:df:56:ca:d7:0f:82:43:27:3d:16:d8:
                    1c:92:ad:e3:40:e4:31:87:a5:11:ec:a6:d2:e0:d9:
                    87:b5:02:02:8f:57:8c:5a:ea:76:a1:20:af:23:41:
                    02:43:a0:7c:08:c5:a8:70:e8:20:ea:2f:18:f9:2a:
                    50:32:80:1a:c1:c4:d2:6b:65:6d:9b:05:a6:f9:78:
                    c2:bb:b6:5c:db:63:0d:2e:fa:13:eb:2a:9f:c5:19:
                    f9:04:bb:0f:71:2a:a6:b5:fe:92:c2:75:a2:3a:2d:
                    5f:c3:4a:f2:f7:7e:a2:59:14:34:29:a8:ac:50:89:
                    77:64:31:65:7c:9c:29:4e:8b:b1:26:0f:f3:19:dd:
                    39:c3:b9:9e:f6:61:3f:ef:0d:d2:7d:27:47:15:ae:
                    3d:12:6b:6a:45:69:66:93:a4:24:ed:65:73:92:94:
                    92:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5D:BB:01:72:A6:14:09:9C:0B:B5:17:F1:F6:32:99:76:CA:0B:C0
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38312e302e3234382e302f32332d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.0.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:d1:ae:ff:1d:3c:1a:ad:b2:0c:f6:bd:84:d2:0c:45:94:28:
         52:61:5a:e8:eb:65:b6:03:f7:55:dc:1e:3d:47:39:75:2b:80:
         f3:24:d9:7a:a2:62:9c:4d:96:b4:6e:3c:dc:21:0f:d9:94:53:
         0b:4e:be:06:72:db:ab:69:f7:9e:f2:37:02:4f:5a:31:f2:62:
         70:a2:7e:83:9c:4f:dd:da:3a:cf:ae:86:fd:9e:3c:bd:f6:83:
         65:1f:ae:e3:48:b1:c5:e3:bf:8f:99:fc:d3:c8:83:ee:23:4b:
         90:ac:c6:5e:f0:7d:d6:3f:82:c0:d7:e8:d5:5d:0a:7c:0f:02:
         43:21:d7:da:e4:a2:3b:d2:03:6f:30:b8:3f:8c:48:32:30:9d:
         50:24:35:97:06:4f:11:38:bf:62:44:c0:0d:88:d1:f6:36:79:
         29:56:20:e0:47:a9:45:b6:2f:cc:7b:e4:8c:90:e7:56:e7:e5:
         cd:c2:27:b0:4f:ef:16:73:cd:5b:af:8c:53:07:0e:a8:26:ba:
         29:ac:a9:f9:9b:b0:f4:82:d9:65:3f:9c:04:73:32:2f:56:7c:
         4c:5c:e2:19:79:c2:a0:a1:70:92:02:ca:13:82:bd:bb:8f:16:
         6c:21:38:58:af:63:0b:f7:01:15:6d:d0:f3:9e:1e:94:35:11:
         aa:78:33:11
-----BEGIN CERTIFICATE-----
MIIE4zCCA8ugAwIBAgIUUzFfa6ZlQvaP12rc0zfIoZ+WcyYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjExMjIxMTIxMTVaFw0yMzExMjExMTI2MTVaMDMxMTAvBgNV
BAMTKDY3NURCQjAxNzJBNjE0MDk5QzBCQjUxN0YxRjYzMjk5NzZDQTBCQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvak3Yq9P535QpELnoGHxVnwWx
d4Ey7FiHdVzfrvlSe2+t/a8+WAp72LvhpajQXeKyc1/ZRlZKjyuRKxM2BdrDJHx8
ZdVqTHAtA1/EFsxa+7jxS6+0zVPMax5mFGrfVsrXD4JDJz0W2BySreNA5DGHpRHs
ptLg2Ye1AgKPV4xa6nahIK8jQQJDoHwIxahw6CDqLxj5KlAygBrBxNJrZW2bBab5
eMK7tlzbYw0u+hPrKp/FGfkEuw9xKqa1/pLCdaI6LV/DSvL3fqJZFDQpqKxQiXdk
MWV8nClOi7EmD/MZ3TnDuZ72YT/vDdJ9J0cVrj0Sa2pFaWaTpCTtZXOSlJL3AgMB
AAGjggHtMIIB6TAdBgNVHQ4EFgQUZ127AXKmFAmcC7UX8fYymXbKC8AwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4Zo
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zODMxMmUzMDJlMzIzNDM4MmUzMDJmMzIzMzJkMzMzMjIwM2QzZTIwMzUzMTMx
MzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAVEA+DANBgkqhkiG9w0BAQsFAAOCAQEAR9Gu/x08Gq2y
DPa9hNIMRZQoUmFa6OtltgP3VdwePUc5dSuA8yTZeqJinE2WtG483CEP2ZRTC06+
BnLbq2n3nvI3Ak9aMfJicKJ+g5xP3do6z66G/Z48vfaDZR+u40ixxeO/j5n808iD
7iNLkKzGXvB91j+CwNfo1V0KfA8CQyHX2uSiO9IDbzC4P4xIMjCdUCQ1lwZPETi/
YkTADYjR9jZ5KVYg4EepRbYvzHvkjJDnVuflzcInsE/vFnPNW6+MUwcOqCa6Kayp
+Zuw9ILZZT+cBHMyL1Z8TFziGXnCoKFwkgLKE4K9u48WbCE4WK9jC/cBFW3Q854e
lDURqngzEQ==
-----END CERTIFICATE-----