Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/3136302e3233382e33382e302f32342d3332203d3e20313336373837.roa
File:                     3136302e3233382e33382e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          X73ZvwB/31Kwka6o3PmmfUjS0BECTUg1ZAnrYxjH18I=
Subject key identifier:   A6:85:0D:19:A5:C1:3C:A9:4C:A0:53:27:64:12:0C:7F:A3:7E:89:2D
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       08CAF6F396932012FA5FECFECC73342A19634DFB
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/3136302e3233382e33382e302f32342d3332203d3e20313336373837.roa
Signing time:             Wed 28 Dec 2022 09:37:01 +0000
ROA not before:           Wed 28 Dec 2022 09:32:01 +0000
ROA not after:            Wed 27 Dec 2023 09:37:01 +0000
asID:                     136787
IP address blocks:        160.238.38.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ca:f6:f3:96:93:20:12:fa:5f:ec:fe:cc:73:34:2a:19:63:4d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Dec 28 09:32:01 2022 GMT
            Not After : Dec 27 09:37:01 2023 GMT
        Subject: CN=A6850D19A5C13CA94CA0532764120C7FA37E892D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:52:be:fe:55:c2:e4:b6:91:2d:30:69:6e:ce:
                    bc:2b:60:f3:3b:d6:82:f7:0d:00:52:94:d3:d8:85:
                    25:02:00:07:78:e8:08:3c:af:11:a2:2c:64:5a:14:
                    85:1b:0d:b5:02:dc:1f:80:5d:e5:5f:3d:ea:e0:a3:
                    fa:b7:80:33:73:56:51:94:07:fe:71:2e:e4:ce:0f:
                    63:bf:1c:2e:75:64:5e:75:b3:54:a8:4d:31:19:22:
                    83:86:81:04:dc:95:53:19:59:71:6a:93:49:4d:f5:
                    67:38:a1:2f:92:13:16:b8:c4:1c:ee:e4:2f:e1:46:
                    07:23:bf:6b:93:af:67:93:9e:94:31:00:f4:95:28:
                    f2:fa:6a:2f:4a:06:25:a0:d5:67:78:8a:aa:f8:8f:
                    32:de:e8:f1:6b:a1:bc:ce:b4:65:64:59:f1:fe:f4:
                    28:73:2a:fc:c4:ab:2a:6c:e6:c1:db:cf:e2:34:27:
                    79:71:a5:b3:98:30:bf:65:b2:b1:49:da:08:c3:9c:
                    d2:bb:6d:9c:a4:d0:49:19:2f:dd:e8:c0:8e:84:54:
                    95:e1:1a:5d:ad:c6:d5:ea:51:92:79:66:28:5c:d9:
                    70:63:1f:cc:95:cd:03:d5:cd:4b:52:7e:b4:fe:c3:
                    d1:c8:1f:2d:27:92:9c:cb:a9:53:d9:a4:d2:ff:42:
                    39:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:85:0D:19:A5:C1:3C:A9:4C:A0:53:27:64:12:0C:7F:A3:7E:89:2D
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/3136302e3233382e33382e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:0a:34:94:9e:07:f2:53:af:3f:fa:04:fc:b8:b1:61:2c:df:
         71:4f:ac:18:03:86:9e:9f:50:e4:b6:ee:e5:4a:73:61:ba:a6:
         b3:72:b9:c4:a4:5d:38:d5:e4:bc:d5:d4:59:15:14:b9:a4:b1:
         32:63:35:5d:39:ca:ee:b6:5a:52:d6:7c:ae:02:87:73:d3:8e:
         83:07:d5:55:c8:67:cf:ef:da:3b:5e:06:bf:c4:7b:8d:bc:b1:
         a8:41:5e:09:8e:a9:1d:f7:a8:32:5b:28:5b:6e:5c:01:0e:83:
         35:13:a7:e4:98:b4:ea:b3:28:a9:39:f9:cc:7a:dd:41:b2:3e:
         84:03:9c:2b:6a:13:e0:31:15:33:92:ff:54:0c:3e:14:9f:ca:
         d5:84:d7:b5:92:23:ff:8c:31:ab:02:b2:13:72:28:e8:a5:fd:
         6c:9d:11:ea:d8:f4:d0:31:8b:5d:70:bd:71:1c:31:ca:23:68:
         80:e3:6c:63:81:81:5f:0f:ce:1d:48:83:6c:2e:c1:34:66:96:
         3d:f7:5b:bc:10:03:20:8f:a7:be:1c:07:35:ca:2e:00:19:ac:
         e7:0e:4e:cf:e2:19:35:80:61:b4:5f:cb:21:12:6d:51:fb:1b:
         14:e6:64:1a:7a:16:cc:1b:96:8c:63:00:f6:ce:b9:dd:c0:16:
         7a:d7:7b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----