Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/3/3138352e3232382e342e302f32322d3234203d3e20323034313730.roa
File:                     3138352e3232382e342e302f32322d3234203d3e20323034313730.roa (raw, json)
Hash identifier:          wsfAxZsZjZZmkjQaRoRbGo/MkUqMYY+ZdbuWPgq0tUU=
Subject key identifier:   DC:DC:EB:D7:83:46:08:EB:7D:60:97:CD:91:01:4B:FA:0B:00:5B:47
Certificate issuer:       /CN=22d29c996abcc72c72279ef78987951b825ae400
Certificate serial:       4E13904ABA430B86B6676149649F2BD912B587E9
Authority key identifier: 22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3232382e342e302f32322d3234203d3e20323034313730.roa
Signing time:             Sat 22 Oct 2022 04:34:06 +0000
ROA not before:           Sat 22 Oct 2022 04:29:06 +0000
ROA not after:            Sat 21 Oct 2023 04:34:06 +0000
asID:                     204170
IP address blocks:        185.228.4.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:13:90:4a:ba:43:0b:86:b6:67:61:49:64:9f:2b:d9:12:b5:87:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d29c996abcc72c72279ef78987951b825ae400
        Validity
            Not Before: Oct 22 04:29:06 2022 GMT
            Not After : Oct 21 04:34:06 2023 GMT
        Subject: CN=DCDCEBD7834608EB7D6097CD91014BFA0B005B47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:b1:22:09:36:e0:a3:f4:f2:6c:a9:7c:92:86:
                    cc:25:34:02:d7:90:e7:82:56:ef:6b:d2:a5:f1:a8:
                    bb:49:7f:43:d6:a6:78:60:ca:ad:a7:85:72:01:bb:
                    5f:ea:bb:6c:e0:34:cb:88:2d:9e:11:b3:87:9d:15:
                    f2:37:76:0d:8c:95:2a:d8:b4:97:a8:82:dd:9f:96:
                    c6:e6:e9:77:2b:29:d2:40:89:a9:9b:11:0a:36:21:
                    92:84:93:e1:b8:d4:6c:6a:70:de:d6:1e:a9:d3:de:
                    90:e3:68:ef:35:50:bc:c7:50:24:81:f2:8b:a0:2b:
                    88:75:a7:5b:06:fd:f6:a3:73:27:48:a2:a6:82:20:
                    0b:3c:a7:5c:b9:ef:cd:17:d5:33:ac:f9:26:c6:1f:
                    7a:c9:ed:6d:59:fe:b8:19:5e:26:69:99:fe:e2:85:
                    88:b8:a2:e5:5f:cc:93:7c:1a:4f:61:2a:92:bd:f4:
                    9f:1d:ee:18:28:da:84:32:55:78:52:6c:a0:e4:78:
                    ab:44:73:ab:a9:aa:f9:83:d8:db:61:74:ec:76:b1:
                    50:20:39:38:ac:9e:0e:91:5d:56:a6:60:52:12:2d:
                    e5:f6:a3:e4:5e:d3:4a:f2:b2:8b:2a:29:fe:b0:04:
                    6d:d6:55:d6:ad:6d:ac:10:ab:ed:b7:65:5f:25:9d:
                    d8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:DC:EB:D7:83:46:08:EB:7D:60:97:CD:91:01:4B:FA:0B:00:5B:47
            X509v3 Authority Key Identifier:
                keyid:22:D2:9C:99:6A:BC:C7:2C:72:27:9E:F7:89:87:95:1B:82:5A:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/22D29C996ABCC72C72279EF78987951B825AE400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItKcmWq8xyxyJ573iYeVG4Ja5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/3/3138352e3232382e342e302f32322d3234203d3e20323034313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.228.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:2c:c9:36:57:aa:68:66:23:d1:05:93:52:a4:77:6b:6f:de:
         b0:dc:d1:a0:8b:48:92:cc:bb:eb:03:39:49:55:24:50:89:b2:
         f1:2f:69:c2:a4:34:bc:60:9b:2f:ba:e8:09:13:bc:9d:d9:12:
         80:15:e3:d3:f5:75:df:d6:42:50:05:b3:7e:b8:88:a3:53:5d:
         49:a7:cb:9b:fd:fa:0b:08:cc:d2:81:69:4a:2d:e8:cb:35:12:
         ec:ff:c0:d2:a6:7b:53:09:33:d8:5c:fb:49:65:60:39:31:eb:
         79:07:9f:c5:90:72:07:d8:3b:7b:92:eb:f9:9d:7e:b4:93:53:
         bd:a6:74:06:d6:a4:0b:04:5f:85:9c:53:81:a4:3c:91:d6:f0:
         f3:b6:08:d1:9e:3f:5d:36:7f:8b:36:ba:bb:b7:e8:34:ba:a7:
         c5:72:ac:25:2c:17:9c:ab:a7:a1:14:b8:16:e8:f1:8f:52:88:
         24:7f:3c:6b:26:17:67:99:43:71:a6:0d:f7:4e:88:81:2a:f6:
         82:2a:07:61:f9:62:49:5e:6a:62:ec:ae:65:05:5c:30:17:08:
         a3:98:de:35:26:b1:6c:1e:60:d9:68:95:58:b9:aa:80:6c:8e:
         e6:f1:48:dd:da:ac:36:5e:8e:00:92:3e:25:97:d0:9e:4e:8c:
         07:f6:cc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----