Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3139332e33362e3233372e302f32342d3234203d3e2030.roa
File:                     3139332e33362e3233372e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          AGm9bso0LdOd7exNlmhygOopwbRo5qXFesL/IKbeh6U=
Subject key identifier:   B8:1E:8D:16:D2:1B:5A:9E:F3:52:D5:89:36:E1:62:7A:BF:FE:9F:A4
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       01483A95B81ACC35DB9C387F78E0C2E136F8DB7C
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139332e33362e3233372e302f32342d3234203d3e2030.roa
Signing time:             Fri 03 Mar 2023 15:55:04 +0000
ROA not before:           Fri 03 Mar 2023 15:50:04 +0000
ROA not after:            Fri 01 Mar 2024 15:55:04 +0000
asID:                     0
IP address blocks:        193.36.237.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:48:3a:95:b8:1a:cc:35:db:9c:38:7f:78:e0:c2:e1:36:f8:db:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Mar  3 15:50:04 2023 GMT
            Not After : Mar  1 15:55:04 2024 GMT
        Subject: CN=B81E8D16D21B5A9EF352D58936E1627ABFFE9FA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:eb:85:e3:63:c1:e1:15:78:ed:7f:38:e9:e3:
                    24:0f:fc:1b:c8:26:6b:20:30:6f:5f:6a:fe:35:c2:
                    d5:73:a2:9a:dd:ed:57:8c:c0:1e:67:95:8e:fe:b5:
                    d3:7a:7f:a0:a9:bc:c6:62:16:63:73:ce:c4:c0:00:
                    91:0b:60:8a:26:ae:eb:fe:e1:06:a2:15:4f:df:86:
                    42:d3:4a:29:01:b6:f4:23:ee:24:d4:0e:b3:a9:46:
                    96:67:8b:f9:e5:bd:f4:fb:53:82:b7:f4:6f:cc:5b:
                    41:c3:ab:75:f2:31:70:dc:ca:29:4f:99:af:69:43:
                    fa:11:ed:d0:da:d2:ff:51:e1:7b:cd:f1:89:b5:aa:
                    f4:19:75:c5:f6:39:61:3c:51:cf:3e:23:d9:c9:8b:
                    6a:a8:0f:10:43:b4:af:e7:88:42:9f:cb:3a:c8:08:
                    07:10:c2:e4:04:2f:e5:15:be:65:b4:98:7d:bc:ed:
                    94:2d:00:a8:49:89:e3:da:38:e6:e6:f3:ed:1b:e0:
                    69:c3:25:1a:04:27:6e:b4:e7:11:30:13:b7:9f:34:
                    a2:ed:50:4f:48:57:f1:1e:94:e7:25:80:ca:69:9d:
                    51:52:f7:bc:c4:8d:40:f6:7f:99:a5:4c:f9:ee:13:
                    7c:52:14:84:18:a8:f8:25:74:38:d8:a1:46:fa:4b:
                    34:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1E:8D:16:D2:1B:5A:9E:F3:52:D5:89:36:E1:62:7A:BF:FE:9F:A4
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3139332e33362e3233372e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.36.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:a8:d1:f0:12:03:5a:50:73:44:3c:06:29:04:d8:33:cb:91:
         bc:51:c7:a0:12:18:58:f6:4a:3e:74:f7:51:3e:67:16:14:39:
         48:f4:53:ed:b3:05:4c:52:f6:f5:68:bd:7d:a6:a9:f9:41:7f:
         33:52:97:8b:56:b4:e9:67:99:9f:48:5b:60:94:82:14:67:be:
         20:af:81:10:1c:6a:b6:4b:31:a3:ae:0b:cd:0d:61:96:1d:be:
         9a:75:2b:2a:2b:2f:c2:aa:8f:bb:3e:5f:d5:0e:f0:a4:f4:6a:
         d9:aa:0a:0d:f8:1f:7b:aa:ec:4c:5a:5a:1a:5a:7b:0d:a0:a8:
         12:bc:b9:86:fe:a3:73:37:be:40:5b:7b:97:07:0a:2d:a9:ad:
         02:80:52:f5:c7:fa:47:8e:74:29:83:60:63:5a:86:78:1f:97:
         28:0c:a8:f2:6b:30:f0:f4:75:f1:7c:da:26:f3:56:69:bf:87:
         b8:ee:9d:2e:c0:48:34:e5:c1:9b:c8:ba:30:21:d1:d5:77:8a:
         cd:85:db:f2:3c:74:84:e4:06:be:eb:a6:de:c3:63:67:e5:0b:
         72:c0:83:c1:a0:fa:3f:93:4a:37:66:d2:f7:7c:bf:67:6b:2c:
         84:ae:11:e7:f7:ab:50:39:69:f2:62:1b:9a:35:87:cd:5d:8e:
         78:ba:c6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----