Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38352e3233392e3234382e302f32332d3332203d3e203430303231.roa
File:                     38352e3233392e3234382e302f32332d3332203d3e203430303231.roa (raw, json)
Hash identifier:          TVPDYvWjXBdSoqq6f6u4XJNaHUVlakZM9Hu1IbuaFLs=
Subject key identifier:   7E:02:DA:EF:7E:3B:CD:71:CA:13:69:49:28:46:C8:10:40:97:76:C3
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       5136FE9F533B1C0180A87DB97C89E2ECF50EB263
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/38352e3233392e3234382e302f32332d3332203d3e203430303231.roa
Signing time:             Tue 22 Nov 2022 11:23:32 +0000
ROA not before:           Tue 22 Nov 2022 11:18:32 +0000
ROA not after:            Tue 21 Nov 2023 11:23:32 +0000
asID:                     40021
IP address blocks:        85.239.248.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:36:fe:9f:53:3b:1c:01:80:a8:7d:b9:7c:89:e2:ec:f5:0e:b2:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Nov 22 11:18:32 2022 GMT
            Not After : Nov 21 11:23:32 2023 GMT
        Subject: CN=7E02DAEF7E3BCD71CA1369492846C810409776C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f9:b6:18:2e:56:3b:ba:f2:6c:d1:9d:34:cf:
                    09:87:cf:61:f1:08:82:5f:b8:95:f6:59:ad:fa:5a:
                    d3:a6:06:a4:89:a5:9e:bd:4e:a5:1f:cc:e2:20:2c:
                    c5:a8:03:bf:35:2c:8b:14:ef:4a:d0:4d:12:47:41:
                    1c:ee:9c:59:d9:19:5e:0d:81:c6:bc:62:1d:21:b3:
                    74:83:6d:a7:9f:25:2d:f8:33:2d:c8:93:fe:79:e0:
                    48:54:d2:dd:10:e5:ed:02:dc:5d:16:7b:69:1f:b7:
                    81:02:78:96:50:f9:ba:9d:6a:6e:2b:96:9d:87:7f:
                    a5:0b:51:7f:35:82:21:bb:b8:3f:37:0f:2e:a4:70:
                    f5:c3:0d:d3:4b:79:ce:69:1a:11:be:6f:73:ef:5e:
                    bb:86:45:6f:b9:6f:21:2f:c7:c8:0d:ed:21:5e:8f:
                    b9:f3:fd:be:05:c4:89:90:4a:2e:a6:08:11:37:83:
                    a2:52:a7:71:10:b1:07:37:47:5b:e9:fd:8f:6d:dd:
                    64:1e:cc:09:f9:05:48:f7:de:dc:74:3f:c8:6e:10:
                    2f:22:6a:e4:3f:a8:30:18:12:e6:79:8e:d3:84:b6:
                    2b:5d:1d:ea:e4:56:3f:2e:40:b3:3f:73:61:c6:a0:
                    8f:b3:48:96:c0:5e:03:26:a7:7b:83:90:7e:49:4b:
                    8d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:02:DA:EF:7E:3B:CD:71:CA:13:69:49:28:46:C8:10:40:97:76:C3
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38352e3233392e3234382e302f32332d3332203d3e203430303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.239.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:fc:80:14:b2:0e:28:cf:d9:12:84:b4:73:65:56:03:1f:37:
         96:8c:fd:a9:13:f8:b3:ae:44:fb:04:1f:48:22:d0:7a:22:ae:
         bd:b6:b4:db:95:13:bc:ff:77:b8:79:2f:ec:cf:28:44:77:70:
         b7:42:e9:5c:20:6c:54:3c:b1:a6:4f:7f:39:00:37:df:17:99:
         c4:35:a9:14:c2:33:d0:96:35:2f:c2:74:fd:e9:94:4d:99:b4:
         04:13:6e:80:a6:3c:c1:3f:8c:8f:99:02:f2:04:e9:ac:71:ae:
         bb:3f:00:b1:ad:15:d1:40:69:b0:75:dd:19:f8:4b:98:48:f8:
         c3:3e:d8:33:8e:41:73:e7:7c:be:28:cd:a4:8c:d3:4a:58:fb:
         e4:fd:c3:74:43:c9:f6:0b:af:54:e7:6e:da:56:3e:0a:e1:ca:
         c5:7a:74:d8:a7:1b:40:1c:33:27:08:2c:5a:8a:fe:d6:19:16:
         af:f1:9c:c6:26:1b:a4:55:bf:39:a1:8f:3f:e3:f1:bd:04:fe:
         04:a5:6c:9c:c2:09:0c:50:82:75:71:78:c6:82:74:24:c4:2c:
         f9:a5:d4:6b:1a:69:1d:f8:44:a8:c7:14:47:a1:64:1c:d6:27:
         1c:15:14:ee:7e:de:48:e6:04:65:14:f0:5e:3e:a8:fe:26:e1:
         72:05:d8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----