Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3136302e3233382e33392e302f32342d3332203d3e20313336373837.roa
File:                     3136302e3233382e33392e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          r4LFe1tgJWdvEuCIk4oWnpVF+dgOn5ELBqUF6v91x6I=
Subject key identifier:   14:82:56:A8:C9:06:73:5B:74:84:3D:D1:90:24:01:57:9B:EB:44:C8
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       3E477EB3FC5061C64C6BE2AC14D97D2417986D6C
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3136302e3233382e33392e302f32342d3332203d3e20313336373837.roa
Signing time:             Wed 28 Dec 2022 09:37:17 +0000
ROA not before:           Wed 28 Dec 2022 09:32:17 +0000
ROA not after:            Wed 27 Dec 2023 09:37:17 +0000
asID:                     136787
IP address blocks:        160.238.39.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:47:7e:b3:fc:50:61:c6:4c:6b:e2:ac:14:d9:7d:24:17:98:6d:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Dec 28 09:32:17 2022 GMT
            Not After : Dec 27 09:37:17 2023 GMT
        Subject: CN=148256A8C906735B74843DD1902401579BEB44C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8b:83:7e:de:67:18:df:7c:2e:2b:39:a4:92:
                    4d:c2:2f:d6:af:66:c5:23:d8:01:d9:61:bf:bc:ab:
                    8c:21:bf:9f:dc:36:b9:80:07:b4:5f:7a:ba:86:46:
                    38:2e:17:61:fa:b3:a9:7b:f3:1d:38:4a:48:cc:25:
                    7d:c7:7a:af:b3:94:22:84:1e:ce:76:c7:86:2d:21:
                    a0:45:3e:56:7a:90:17:74:70:9e:ae:31:fb:a7:35:
                    fa:2c:25:33:f6:f0:41:3a:16:6e:27:1c:86:39:49:
                    77:54:39:95:4d:ac:b2:a3:aa:48:69:da:d2:2f:2b:
                    6d:28:9c:f9:cb:8c:ef:2c:a9:29:c1:3a:27:74:ea:
                    ae:4d:e7:3b:46:bf:a8:66:af:66:3d:4a:c1:d6:51:
                    33:ce:82:d2:65:54:7d:1b:e8:01:8d:ac:60:5b:84:
                    e6:33:34:a5:1e:e3:1c:df:e2:ea:2a:f7:51:c0:93:
                    6a:c9:fa:4a:12:f0:a8:b5:5b:7e:a1:4d:41:38:ae:
                    6c:85:41:72:57:96:e3:35:5a:1d:3b:00:0a:f9:21:
                    ec:d2:c6:c1:60:c3:98:62:43:bf:8c:fd:8c:5c:35:
                    6e:9e:86:7c:03:4b:2a:40:da:4f:80:99:ee:8f:33:
                    06:25:dd:ac:99:c8:f5:1b:f2:ea:f0:a3:9f:2a:90:
                    6d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:82:56:A8:C9:06:73:5B:74:84:3D:D1:90:24:01:57:9B:EB:44:C8
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3136302e3233382e33392e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:00:84:1b:c6:60:c9:53:52:6f:31:96:a7:65:45:4f:97:14:
         40:1c:0b:e3:80:e3:e4:47:79:9d:c2:64:16:9f:35:f2:eb:5d:
         30:aa:78:d8:a6:f0:33:e8:8a:23:9f:0b:7c:da:08:a5:b3:65:
         27:2f:2f:29:61:fc:95:cb:e0:f5:0f:c3:43:c2:2a:51:0d:23:
         88:68:f7:b5:71:4b:f9:7a:8d:d4:7e:71:36:b6:ac:00:79:fa:
         2a:f1:a4:95:ca:be:f0:bb:c6:fc:e0:51:5b:45:e8:3a:3d:b8:
         17:78:e8:cb:ec:4c:07:28:a0:4a:8b:7c:f5:d3:cb:78:bf:2f:
         49:e4:06:bb:66:c8:70:ee:93:c5:69:e8:30:fc:3d:08:06:d9:
         84:57:0f:38:0f:1c:1c:d2:29:db:06:a1:b0:83:5f:4d:91:d0:
         9e:35:df:99:11:d7:46:a2:58:81:95:0f:3a:99:62:a5:1f:2b:
         15:c1:fb:32:8c:25:4d:96:28:32:6f:34:61:71:c4:0e:cf:e4:
         0a:86:30:c9:2b:1e:2f:a1:89:28:ec:14:40:79:0d:62:c6:0b:
         d0:6a:d1:00:bc:10:62:88:7b:9f:a0:d4:7b:e2:42:47:34:13:
         70:1a:14:0f:08:b5:b9:bf:39:c9:24:19:5f:63:79:44:c2:d9:
         52:a8:96:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----