Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/38362e34382e31362e302f32302d3332203d3e203430303231.roa
File:                     38362e34382e31362e302f32302d3332203d3e203430303231.roa (raw, json)
Hash identifier:          zg05ZCkUMAODxV2Y2VOIJeRDHR5bDjc3/OdYZr7umDA=
Subject key identifier:   C8:43:0E:30:63:62:AA:0C:D5:8B:DE:77:15:11:A4:F4:2E:0E:5F:CD
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       12D913C6C7A6D7EFD2D0694653B89233A7838AEA
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/38362e34382e31362e302f32302d3332203d3e203430303231.roa
Signing time:             Sat 22 Oct 2022 04:34:31 +0000
ROA not before:           Sat 22 Oct 2022 04:29:31 +0000
ROA not after:            Sat 21 Oct 2023 04:34:31 +0000
asID:                     40021
IP address blocks:        86.48.16.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:d9:13:c6:c7:a6:d7:ef:d2:d0:69:46:53:b8:92:33:a7:83:8a:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:31 2022 GMT
            Not After : Oct 21 04:34:31 2023 GMT
        Subject: CN=C8430E306362AA0CD58BDE771511A4F42E0E5FCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e9:65:34:cc:ab:d8:98:81:1e:6f:77:56:d3:
                    b0:34:c1:ce:4e:ca:91:c2:f6:48:1b:96:6a:9a:aa:
                    a7:c6:44:a0:5f:be:63:14:af:78:df:9c:81:6a:a4:
                    98:e7:48:53:a9:d5:29:74:76:3d:b6:14:42:79:5b:
                    9c:c5:36:c2:dc:ef:52:04:95:73:21:d1:32:55:14:
                    2b:89:ec:96:88:c5:c8:b5:3a:05:35:52:d8:f8:8e:
                    90:74:f1:8f:63:e9:1d:8a:8a:f6:a2:16:d6:6d:bd:
                    76:98:03:e2:4d:c4:36:b1:00:85:a9:02:a6:04:88:
                    b9:6a:0e:22:d4:b4:05:36:5c:5b:48:15:ed:02:c0:
                    3b:cf:8e:3b:62:09:cf:25:5b:ff:6a:df:7b:f6:ba:
                    e8:a0:18:5e:10:9e:ea:11:36:c6:ed:3a:25:40:5d:
                    0f:5f:5c:b7:10:40:47:0d:46:df:67:c6:89:d7:e3:
                    10:80:0a:d7:12:ee:53:81:f0:a6:fd:81:24:a0:0a:
                    5e:2f:48:de:37:61:09:f5:f0:fc:65:48:69:43:fa:
                    05:13:50:ef:31:e2:10:eb:49:ca:7b:16:61:ed:2b:
                    14:e1:84:7e:0e:5e:0f:65:85:fc:91:66:6a:5b:d8:
                    a9:e1:76:49:44:f5:af:0a:8e:a8:e3:99:d8:08:7d:
                    63:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:43:0E:30:63:62:AA:0C:D5:8B:DE:77:15:11:A4:F4:2E:0E:5F:CD
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/38362e34382e31362e302f32302d3332203d3e203430303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.48.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:e2:3e:04:b2:97:e7:63:2d:0a:3f:ab:4d:a3:71:d3:8c:d2:
         ec:0f:8a:65:04:a5:8b:9b:a1:e2:af:ec:6d:9e:f7:9d:29:f4:
         de:05:5d:47:07:20:41:85:5f:7b:38:02:aa:73:8b:5a:b1:5d:
         7f:63:0f:a5:4c:10:8e:79:d6:91:c5:6e:b5:82:6b:57:32:83:
         48:8f:ee:61:93:6a:18:13:4f:85:3d:60:dd:3a:fb:dd:d0:e7:
         0a:a3:ab:62:a6:08:20:01:88:5b:0b:3c:6b:d4:a5:62:fa:20:
         e0:d0:45:5b:55:e5:d7:d2:4c:cf:07:f5:bd:b0:cd:bf:36:cf:
         bb:de:fb:10:65:02:53:d6:76:44:c3:04:c1:2a:cc:35:5d:08:
         3c:ab:33:13:58:91:2d:ec:95:3d:1a:e0:2c:cd:5c:f1:95:5c:
         e7:b6:78:af:98:b3:3e:07:a9:f8:2f:5a:47:8b:16:97:1a:d8:
         21:b6:6b:94:06:a8:73:92:d6:94:be:8c:c1:26:63:6a:23:63:
         38:4c:8e:a1:6c:8d:c9:fc:72:cb:9e:d0:e1:50:42:f3:d9:b2:
         a6:19:f0:02:74:11:ea:d1:78:ba:96:a3:62:5e:d2:70:84:0c:
         17:e3:0a:e6:79:d4:a2:f5:79:41:9e:03:f1:7d:0d:07:f1:f0:
         7a:c0:3c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----