Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38312e3136312e38302e302f32302d3230203d3e20323034333833.roa
File:                     38312e3136312e38302e302f32302d3230203d3e20323034333833.roa (raw, json)
Hash identifier:          DMuyag4vd59LsyqTbzHQoqlc7CWNlFQmm3L7Vegh8EU=
Subject key identifier:   7E:80:32:77:69:DB:8F:AB:0E:97:BA:2D:48:29:C6:DE:4E:AE:55:00
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       35C7653D238BB0D765A4C07F36A45AA6247A21CD
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/38312e3136312e38302e302f32302d3230203d3e20323034333833.roa
Signing time:             Thu 10 Nov 2022 16:45:52 +0000
ROA not before:           Thu 10 Nov 2022 16:40:52 +0000
ROA not after:            Thu 09 Nov 2023 16:45:52 +0000
asID:                     204383
IP address blocks:        81.161.80.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c7:65:3d:23:8b:b0:d7:65:a4:c0:7f:36:a4:5a:a6:24:7a:21:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 10 16:40:52 2022 GMT
            Not After : Nov  9 16:45:52 2023 GMT
        Subject: CN=7E80327769DB8FAB0E97BA2D4829C6DE4EAE5500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e7:84:8f:86:ef:ba:10:05:59:8e:51:a7:2c:
                    d0:d7:6d:d3:b3:00:c7:44:08:63:28:49:bf:d8:74:
                    29:5e:7f:b1:fd:5d:4a:46:c5:ed:ba:59:d7:0d:2a:
                    1d:e1:78:7e:2f:af:79:16:eb:49:54:61:fd:61:62:
                    83:26:96:49:36:53:a8:7e:19:a6:9b:68:aa:fe:75:
                    d0:87:3a:b5:12:04:23:4d:a8:ed:b1:e7:ea:ba:eb:
                    82:c1:59:24:1a:de:2d:ce:a5:fb:ff:84:82:4a:ad:
                    f6:1f:f9:76:c6:10:e2:e8:ca:5b:5f:cf:44:81:f9:
                    a4:5e:f7:a4:0e:f9:53:97:8b:4c:a2:9b:d4:92:51:
                    b6:e8:74:9c:bc:6f:0f:91:90:56:24:ca:d0:50:0a:
                    cd:b7:4e:b3:e8:61:c7:b4:a0:5c:f6:45:6f:d4:0c:
                    c1:65:78:2b:dd:f6:aa:78:18:22:c6:a1:09:ae:00:
                    b9:64:4b:5e:df:f3:a7:13:c8:1b:3b:1f:39:ed:ba:
                    e6:69:a2:17:45:47:bf:71:2a:24:65:0b:15:b8:e4:
                    d1:a7:d2:0c:9f:57:0b:5b:cc:22:cf:dc:bc:ec:b7:
                    17:0e:21:85:75:ac:8b:6d:96:62:58:28:6e:80:e7:
                    ee:31:96:ff:2f:c0:3d:cd:43:3b:0d:0b:41:54:22:
                    58:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:80:32:77:69:DB:8F:AB:0E:97:BA:2D:48:29:C6:DE:4E:AE:55:00
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38312e3136312e38302e302f32302d3230203d3e20323034333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.161.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6e:df:65:1e:a9:d2:63:7b:35:0b:dd:39:f5:54:84:89:15:f5:
         d1:20:25:b3:05:cf:8e:93:b8:fc:a6:9a:3d:4b:92:f2:6a:28:
         30:ec:64:2c:3b:01:6b:63:40:18:75:18:ea:de:d5:fb:6a:eb:
         b7:a0:a5:26:22:6d:6d:dc:a9:b7:1b:65:f1:ed:a9:c5:4b:03:
         1d:5f:0a:18:ca:9d:04:c7:8d:19:5b:14:0c:d1:97:d3:07:12:
         c8:27:66:1c:b3:6d:1f:66:38:4c:ce:13:5f:7a:a7:c2:7b:4f:
         ab:c7:b3:80:ff:4f:96:ec:98:80:1d:f4:91:cb:29:a5:82:50:
         8b:1b:f0:0b:39:1f:8a:30:8d:03:79:37:9d:ea:ab:e3:02:61:
         01:c7:84:c6:a9:69:2f:df:ec:96:d1:2c:45:a5:e4:5b:99:a5:
         8a:a8:70:5d:43:5d:d1:3a:98:76:2d:af:07:73:be:2d:87:cf:
         6a:bf:3a:1c:6d:b6:fb:24:3a:d0:b4:fe:36:43:69:97:a7:5b:
         c6:02:7f:8b:2a:e6:d2:67:ad:1c:77:5c:c7:91:b2:40:07:05:
         b6:ad:ed:80:f4:c6:f2:e4:b4:3e:54:81:79:0f:97:d7:59:cf:
         99:ca:c4:81:96:5a:5d:f3:9f:3b:37:ad:a2:5e:df:61:a9:fc:
         9c:f2:30:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----