Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/38342e35342e32332e302f32342d3332203d3e203531313637.roa
File:                     38342e35342e32332e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          r45TBEqEcBGK1fFk2fIBmvJBJ9VJ+x5effVnRr/wXG0=
Subject key identifier:   7F:26:CE:63:70:DA:57:39:55:A2:C3:A9:23:82:02:FB:93:34:14:B7
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       4141EFDE5894ECBCC1C9C834BC10C36311D869FD
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/38342e35342e32332e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:13 +0000
ROA not before:           Sat 22 Oct 2022 04:28:13 +0000
ROA not after:            Sat 21 Oct 2023 04:33:13 +0000
asID:                     51167
IP address blocks:        84.54.23.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:41:ef:de:58:94:ec:bc:c1:c9:c8:34:bc:10:c3:63:11:d8:69:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:13 2022 GMT
            Not After : Oct 21 04:33:13 2023 GMT
        Subject: CN=7F26CE6370DA573955A2C3A9238202FB933414B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:e3:48:b9:48:11:73:e3:14:15:02:2a:ac:22:
                    4b:a2:a8:5a:d2:56:5e:a3:6f:8e:00:ef:96:d2:66:
                    f4:c9:90:48:c5:24:e0:93:03:c0:7b:86:56:a0:1e:
                    83:54:62:94:d9:69:12:dd:0b:c2:a5:92:c3:6c:a8:
                    22:c6:7f:04:60:b7:74:54:14:a5:eb:fe:f5:85:38:
                    0f:5b:59:ea:3d:89:7e:c8:a6:c3:b2:33:47:9a:27:
                    8c:13:4d:32:db:fe:c3:b9:9a:50:f1:3b:a3:5e:38:
                    61:7d:f6:6d:e3:7f:b0:2e:01:e5:63:a6:f7:21:b3:
                    22:b4:6c:03:7b:f5:4e:4d:c8:81:d1:7c:92:67:cb:
                    c9:4d:4d:e3:52:14:03:de:59:e7:2f:1e:56:36:4c:
                    f5:c4:6a:62:89:9d:38:3d:1d:39:a5:95:83:94:05:
                    74:6f:23:83:36:27:e9:38:91:b4:24:a7:b3:24:c8:
                    f9:88:4e:f5:06:b0:9a:c9:64:73:9f:fa:27:35:0a:
                    ea:24:e3:20:38:d6:f3:f3:26:28:98:4e:52:be:71:
                    e8:c1:f7:97:3e:69:cf:93:1a:37:ce:ec:a4:72:d4:
                    07:be:e0:82:6f:6b:4d:0f:42:20:7c:a5:81:95:f1:
                    50:53:4d:eb:d6:c1:34:81:0e:f7:77:0a:45:12:2b:
                    31:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:26:CE:63:70:DA:57:39:55:A2:C3:A9:23:82:02:FB:93:34:14:B7
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/38342e35342e32332e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.54.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:2e:e4:cd:0e:74:cd:cd:74:cc:d2:59:ad:1e:e5:31:37:79:
         23:f9:4c:00:11:62:96:2f:94:b9:ae:d1:b3:49:e9:ec:9e:1d:
         57:53:55:e2:2b:bd:88:24:42:c6:c1:1d:60:a3:e4:60:e6:a1:
         45:b8:19:17:60:d5:f6:52:7b:83:36:a8:16:60:c8:c4:04:7a:
         8c:b9:72:a6:be:7e:f9:01:f8:92:67:9b:ec:fa:c8:e1:a8:8e:
         02:3d:5a:36:3e:9a:60:10:7b:b1:72:d1:fd:33:2a:76:6b:38:
         83:89:a8:fa:76:28:3c:df:10:c8:01:db:aa:fb:a6:e8:2d:f0:
         97:50:2d:e4:b2:bc:7b:51:0b:4e:aa:3d:56:c0:de:7e:7c:5a:
         35:33:e3:d4:35:c6:aa:2f:81:26:6b:2e:3a:62:e8:1d:7e:5a:
         00:d3:e7:27:26:8b:68:28:49:5d:43:cb:ed:be:47:fc:cf:85:
         26:1c:05:86:77:2d:e8:63:2a:f2:8d:5a:46:ee:3f:49:9a:e1:
         da:f4:fc:65:93:96:4a:56:a0:3a:3f:00:f4:b5:4a:e7:91:dc:
         56:1c:70:54:5b:c3:bd:8b:ce:5f:bf:a6:31:3e:0b:98:f3:cd:
         48:78:c9:3b:54:ee:02:a8:9c:e8:42:b0:14:55:64:33:78:ad:
         2c:ec:a4:7d
-----BEGIN CERTIFICATE-----
MIIE4zCCA8ugAwIBAgIUQUHv3liU7LzBycg0vBDDYxHYaf0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5OTRlZTkzYmFiZTYwYzEzZTA0NDg3ZmE1Y2QzNGZk
MjNmYzkzZjAeFw0yMjEwMjIwNDI4MTNaFw0yMzEwMjEwNDMzMTNaMDMxMTAvBgNV
BAMTKDdGMjZDRTYzNzBEQTU3Mzk1NUEyQzNBOTIzODIwMkZCOTMzNDE0QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy40i5SBFz4xQVAiqsIkuiqFrS
Vl6jb44A75bSZvTJkEjFJOCTA8B7hlagHoNUYpTZaRLdC8KlksNsqCLGfwRgt3RU
FKXr/vWFOA9bWeo9iX7IpsOyM0eaJ4wTTTLb/sO5mlDxO6NeOGF99m3jf7AuAeVj
pvchsyK0bAN79U5NyIHRfJJny8lNTeNSFAPeWecvHlY2TPXEamKJnTg9HTmllYOU
BXRvI4M2J+k4kbQkp7MkyPmITvUGsJrJZHOf+ic1Cuok4yA41vPzJiiYTlK+cejB
95c+ac+TGjfO7KRy1Ae+4IJva00PQiB8pYGV8VBTTevWwTSBDvd3CkUSKzFBAgMB
AAGjggHtMIIB6TAdBgNVHQ4EFgQUfybOY3DaVzlVosOpI4IC+5M0FLcwHwYDVR0j
BBgwFoAUYZlO6Tur5gwT4ESH+lzTT9I/yT8wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzYvNjE5OTRFRTkzQkFCRTYwQzEzRTA0NDg3RkE1Q0QzNEZE
MjNGQzkzRi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1labE82VHVyNWd3VDRF
U0gtbHpUVDlJX3lUOC5jZXIwgYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4Zo
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Ni8zODM0MmUzNTM0MmUzMjMzMmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzUzMTMx
MzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAFQ2FzANBgkqhkiG9w0BAQsFAAOCAQEAJS7kzQ50zc10
zNJZrR7lMTd5I/lMABFili+Uua7Rs0np7J4dV1NV4iu9iCRCxsEdYKPkYOahRbgZ
F2DV9lJ7gzaoFmDIxAR6jLlypr5++QH4kmeb7PrI4aiOAj1aNj6aYBB7sXLR/TMq
dms4g4mo+nYoPN8QyAHbqvum6C3wl1At5LK8e1ELTqo9VsDefnxaNTPj1DXGqi+B
JmsuOmLoHX5aANPnJyaLaChJXUPL7b5H/M+FJhwFhnct6GMq8o1aRu4/SZrh2vT8
ZZOWSlagOj8A9LVK55HcVhxwVFvDvYvOX7+mMT4LmPPNSHjJO1TuAqic6EKwFFVk
M3itLOykfQ==
-----END CERTIFICATE-----