Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/7/39312e3139362e3232302e302f32342d3332203d3e203632323430.roa
File:                     39312e3139362e3232302e302f32342d3332203d3e203632323430.roa (raw, json)
Hash identifier:          84akFXL9LAkcPPVIb+k+v8Ip3n2Y0GGxXI60+wH7XFA=
Subject key identifier:   26:8C:BA:4E:79:25:74:01:B0:3D:4C:83:02:8A:B6:40:9F:43:3F:06
Certificate issuer:       /CN=5dc970755824cb967cad6f3b964709b092d43069
Certificate serial:       0274618363496BDAAFEC9283C2EAE5742BBF6D4B
Authority key identifier: 5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/7/39312e3139362e3232302e302f32342d3332203d3e203632323430.roa
Signing time:             Wed 28 Dec 2022 09:32:18 +0000
ROA not before:           Wed 28 Dec 2022 09:27:18 +0000
ROA not after:            Wed 27 Dec 2023 09:32:18 +0000
asID:                     62240
IP address blocks:        91.196.220.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:74:61:83:63:49:6b:da:af:ec:92:83:c2:ea:e5:74:2b:bf:6d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc970755824cb967cad6f3b964709b092d43069
        Validity
            Not Before: Dec 28 09:27:18 2022 GMT
            Not After : Dec 27 09:32:18 2023 GMT
        Subject: CN=268CBA4E79257401B03D4C83028AB6409F433F06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:58:37:ba:ac:cc:34:2a:f6:b2:61:be:7a:bf:
                    80:1e:35:6f:af:e4:aa:8f:8a:c6:b1:b8:28:59:37:
                    e4:b1:5f:5d:63:7f:77:a4:77:aa:75:f8:cc:e1:f1:
                    7d:cb:d5:59:1c:91:bd:57:ff:14:24:bd:91:bf:1f:
                    cd:fa:cd:7f:87:9b:a4:99:8c:1b:72:97:0f:1f:ce:
                    75:a0:6f:f4:a5:9f:29:c6:47:12:6e:42:86:12:c1:
                    b6:35:af:af:c5:28:63:46:a1:8b:c6:c4:8f:91:33:
                    62:d1:00:7b:22:24:d5:06:47:d2:66:9c:3a:ae:b8:
                    d6:d1:e1:d7:5a:75:09:d8:22:6a:6a:97:91:85:ed:
                    1e:94:d0:14:f4:a0:97:f5:35:50:ab:26:5b:80:16:
                    58:19:1b:13:87:d4:7a:c5:2f:5e:d8:d4:56:53:7d:
                    a0:e4:af:a5:89:6e:ba:95:7a:d3:00:c5:cc:73:f2:
                    02:b6:af:69:ef:26:8c:fb:83:6c:16:30:02:4e:8e:
                    f3:a2:36:cd:db:b1:ff:da:2f:dc:9c:c9:03:b5:bd:
                    b7:10:4c:42:1a:70:e3:84:03:8e:3d:f5:1f:ba:a6:
                    80:e9:05:75:cd:4e:5f:fe:eb:3c:bf:fd:18:57:62:
                    57:7f:73:92:06:13:d7:22:ec:39:e3:94:a4:14:1f:
                    28:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8C:BA:4E:79:25:74:01:B0:3D:4C:83:02:8A:B6:40:9F:43:3F:06
            X509v3 Authority Key Identifier:
                keyid:5D:C9:70:75:58:24:CB:96:7C:AD:6F:3B:96:47:09:B0:92:D4:30:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/5DC970755824CB967CAD6F3B964709B092D43069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XclwdVgky5Z8rW87lkcJsJLUMGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/7/39312e3139362e3232302e302f32342d3332203d3e203632323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.196.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:af:5d:23:a9:8d:a6:c4:7e:9f:ea:f2:a7:e3:59:c6:83:02:
         d3:0f:40:57:12:5b:85:4d:34:1a:bb:f8:cb:8f:29:d4:68:b9:
         da:49:a2:c0:57:73:c9:94:12:0c:9a:70:09:29:cd:18:51:5b:
         4c:a6:16:d1:5f:fb:f4:3b:45:5c:be:0d:1e:e8:23:da:ab:14:
         89:a8:ff:18:fb:26:dd:81:9d:4c:66:fe:90:60:6d:a3:6a:ac:
         74:4e:be:bd:83:f6:e8:87:0e:38:79:20:13:79:4d:32:84:f2:
         15:61:50:16:b6:47:e9:93:df:7c:e2:a2:40:e7:f0:90:2d:01:
         d2:50:fa:2e:31:0b:9e:8e:4b:af:16:cb:55:a7:4a:77:a3:0d:
         1d:f5:d1:0d:e8:31:0e:92:65:b4:71:be:d1:16:13:0b:f1:a8:
         da:83:ac:a8:29:8d:56:14:29:47:5a:31:07:94:c3:a2:17:a1:
         7f:65:4d:91:39:6b:94:c6:58:cb:f6:a2:f7:68:d6:0e:20:03:
         28:59:f5:df:eb:89:82:cd:fd:89:8d:b2:ea:d5:91:e4:b1:01:
         e2:da:3b:59:d9:52:a2:9a:10:e6:82:3d:60:23:2f:bd:70:d8:
         fa:36:d8:fd:29:5e:bf:b5:30:4b:b3:49:c5:13:a0:2d:60:1c:
         61:40:f8:93
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUAnRhg2NJa9qv7JKDwurldCu/bUswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWRjOTcwNzU1ODI0Y2I5NjdjYWQ2ZjNiOTY0NzA5YjA5
MmQ0MzA2OTAeFw0yMjEyMjgwOTI3MThaFw0yMzEyMjcwOTMyMThaMDMxMTAvBgNV
BAMTKDI2OENCQTRFNzkyNTc0MDFCMDNENEM4MzAyOEFCNjQwOUY0MzNGMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLWDe6rMw0KvayYb56v4AeNW+v
5KqPisaxuChZN+SxX11jf3ekd6p1+Mzh8X3L1Vkckb1X/xQkvZG/H836zX+Hm6SZ
jBtylw8fznWgb/SlnynGRxJuQoYSwbY1r6/FKGNGoYvGxI+RM2LRAHsiJNUGR9Jm
nDquuNbR4ddadQnYImpql5GF7R6U0BT0oJf1NVCrJluAFlgZGxOH1HrFL17Y1FZT
faDkr6WJbrqVetMAxcxz8gK2r2nvJoz7g2wWMAJOjvOiNs3bsf/aL9ycyQO1vbcQ
TEIacOOEA4499R+6poDpBXXNTl/+6zy//RhXYld/c5IGE9ci7DnjlKQUHygnAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUJoy6TnkldAGwPUyDAoq2QJ9DPwYwHwYDVR0j
BBgwFoAUXclwdVgky5Z8rW87lkcJsJLUMGkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzcvNURDOTcwNzU1ODI0Q0I5NjdDQUQ2RjNCOTY0NzA5QjA5
MkQ0MzA2OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hjbHdkVmdreTVaOHJX
ODdsa2NKc0pMVU1Hay5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Ny8zOTMxMmUzMTM5MzYyZTMyMzIzMDJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM2
MzIzMjM0MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBABbxNwwDQYJKoZIhvcNAQELBQADggEBALOvXSOp
jabEfp/q8qfjWcaDAtMPQFcSW4VNNBq7+MuPKdRoudpJosBXc8mUEgyacAkpzRhR
W0ymFtFf+/Q7RVy+DR7oI9qrFImo/xj7Jt2BnUxm/pBgbaNqrHROvr2D9uiHDjh5
IBN5TTKE8hVhUBa2R+mT33ziokDn8JAtAdJQ+i4xC56OS68Wy1WnSnejDR310Q3o
MQ6SZbRxvtEWEwvxqNqDrKgpjVYUKUdaMQeUw6IXoX9lTZE5a5TGWMv2ovdo1g4g
AyhZ9d/riYLN/YmNsurVkeSxAeLaO1nZUqKaEOaCPWAjL71w2Po22P0pXr+1MEuz
ScUToC1gHGFA+JM=
-----END CERTIFICATE-----