Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38332e3232332e3139322e302f32302d3332203d3e203536383736.roa
File:                     38332e3232332e3139322e302f32302d3332203d3e203536383736.roa (raw, json)
Hash identifier:          bFdaOsHY8Y1VV5UyY0rIzj81/2NYdT2bm/OfzjenHok=
Subject key identifier:   B2:FA:9E:6B:AC:DB:D5:72:CF:77:AC:6E:33:40:A7:5C:B7:70:BE:49
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       269750F916F2293294D5109424D068C89A6CDA24
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/38332e3232332e3139322e302f32302d3332203d3e203536383736.roa
Signing time:             Thu 03 Nov 2022 09:25:58 +0000
ROA not before:           Thu 03 Nov 2022 09:20:58 +0000
ROA not after:            Thu 02 Nov 2023 09:25:58 +0000
asID:                     56876
IP address blocks:        83.223.192.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:97:50:f9:16:f2:29:32:94:d5:10:94:24:d0:68:c8:9a:6c:da:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov  3 09:20:58 2022 GMT
            Not After : Nov  2 09:25:58 2023 GMT
        Subject: CN=B2FA9E6BACDBD572CF77AC6E3340A75CB770BE49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:46:9d:84:a2:1f:d0:3e:c7:68:86:6a:cc:58:
                    6a:6e:45:88:58:d5:77:90:d1:5d:49:39:88:52:e4:
                    3b:5f:ec:b5:d7:8f:4d:77:34:dc:06:d7:27:08:e0:
                    bc:72:87:a7:17:fd:a0:ea:18:a3:46:3c:de:fa:eb:
                    88:2b:45:b9:b4:85:55:46:b3:19:d5:6d:97:cb:e5:
                    08:69:33:bd:a5:9d:0d:c0:a3:06:7f:90:37:ab:81:
                    60:d3:19:75:d5:fc:54:44:14:69:48:ea:b0:ed:55:
                    0d:9a:07:08:5a:6f:f8:1b:95:a8:a7:f5:88:9b:0f:
                    43:f7:20:6f:00:eb:75:97:d8:c4:9b:66:cd:a4:47:
                    64:6e:f1:4f:69:2c:5a:45:77:33:1a:97:ca:26:1e:
                    fc:ad:87:87:a9:80:8f:c3:b5:d9:aa:ec:bc:c3:0e:
                    e0:b7:b7:9d:c6:2d:f6:25:63:e9:57:49:f2:80:e9:
                    61:78:f4:e0:b4:e6:99:bd:40:95:b5:44:57:6d:15:
                    25:f6:28:7d:50:30:5b:fc:6a:47:28:57:c3:87:fa:
                    8e:9c:38:4c:01:71:b2:57:a0:8a:0a:50:21:e3:f3:
                    c1:25:d8:27:e9:86:3c:c4:29:e1:2e:07:d0:c8:82:
                    83:3b:76:c5:78:95:82:8b:2d:86:6a:16:b9:fb:21:
                    d4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:FA:9E:6B:AC:DB:D5:72:CF:77:AC:6E:33:40:A7:5C:B7:70:BE:49
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38332e3232332e3139322e302f32302d3332203d3e203536383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.223.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c1:61:17:c4:09:b7:a4:f8:d4:14:ab:66:e5:b7:b9:3d:b1:b7:
         9e:3f:6b:d4:7d:99:c9:e5:dd:91:89:ae:d8:1b:7b:67:2a:b2:
         87:37:72:19:0f:89:84:07:fd:e6:4c:ad:32:00:78:0b:0d:63:
         50:0c:55:ab:63:ba:cb:57:34:3f:c6:a0:d6:16:32:ee:fa:f7:
         b0:40:54:5e:1d:06:f0:87:c9:59:f3:03:bd:fc:f3:df:17:6a:
         10:da:a2:3b:a3:2f:82:eb:07:5e:30:90:9d:a8:72:11:fd:d8:
         9a:87:2a:08:45:f2:97:9f:7a:5c:63:7e:78:0f:6e:e1:3d:74:
         26:a8:f2:00:f2:e6:a5:4d:83:f8:e1:02:db:22:06:9c:d9:a9:
         ed:02:07:6f:f0:17:83:f3:a5:0a:db:78:fc:16:fb:1a:9b:ce:
         c7:82:0e:ed:8b:48:2e:ce:68:c2:19:59:b9:64:9c:fd:f9:e2:
         cb:ff:5b:fc:7e:6d:cb:ac:20:41:76:ba:2f:6e:6e:cf:f4:8f:
         8c:bb:4d:72:d9:24:8d:c5:91:d0:e8:c4:71:88:e9:4e:ef:b8:
         41:40:76:c9:c5:83:71:95:40:47:22:84:66:0b:49:14:60:c4:
         50:ba:29:80:80:5c:81:2d:26:91:63:57:a5:e2:26:67:e2:ed:
         f4:c7:9d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----