Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138322e3138362e302f32332d3332203d3e203531313637.roa
File:                     3138352e3138322e3138362e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier:          hCf0YwodVZU3xpn81jELtGYzNuhzQ0icHCBwM3uAaTM=
Subject key identifier:   C3:38:E6:27:B8:2F:6C:1C:66:D3:52:91:8A:9D:E9:2F:3C:34:BA:F9
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       7E81B987A75896B90D3F6F420921B9487977BC49
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138322e3138362e302f32332d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:19 +0000
ROA not before:           Sat 22 Oct 2022 04:28:19 +0000
ROA not after:            Sat 21 Oct 2023 04:33:19 +0000
asID:                     51167
IP address blocks:        185.182.186.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:81:b9:87:a7:58:96:b9:0d:3f:6f:42:09:21:b9:48:79:77:bc:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:19 2022 GMT
            Not After : Oct 21 04:33:19 2023 GMT
        Subject: CN=C338E627B82F6C1C66D352918A9DE92F3C34BAF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bc:62:05:8d:7c:ff:79:35:c9:ac:61:ae:e5:
                    d3:94:61:18:7e:72:4d:4c:36:2a:ca:49:b2:f0:23:
                    1f:52:f4:df:85:b0:82:31:a3:a0:db:99:dd:ec:04:
                    62:3c:ed:9c:6a:bd:6d:08:a7:0e:ba:46:e1:8f:22:
                    70:56:bc:eb:13:55:77:27:f4:ac:04:af:82:d0:ba:
                    3b:0e:94:fc:57:0b:77:71:da:b3:dc:27:1c:45:27:
                    79:72:5c:ea:c2:97:97:53:f0:30:d4:aa:91:8b:9a:
                    fc:44:c8:20:8e:86:56:11:8c:38:e5:74:79:a8:96:
                    19:77:40:95:65:bb:77:b1:83:75:b3:4b:90:5c:e4:
                    16:b4:4a:c5:a3:39:f2:3f:11:ee:88:79:d6:3f:92:
                    28:35:ef:b3:27:3c:e3:23:85:21:f6:29:9b:38:15:
                    96:fc:73:15:5e:de:a1:5a:76:80:d7:a3:04:0f:07:
                    05:08:44:c8:06:59:bd:42:2c:7e:73:30:98:53:3a:
                    f8:1e:7e:c8:2d:0c:9e:12:f3:5b:1b:0d:34:35:5d:
                    a5:6c:1d:fa:b1:88:6e:58:97:e2:11:b8:9c:d9:d5:
                    01:62:09:72:ad:6e:06:40:69:20:e4:7e:18:c2:ab:
                    b1:67:78:a9:51:82:a0:d7:a0:ba:19:20:04:45:d7:
                    e4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:38:E6:27:B8:2F:6C:1C:66:D3:52:91:8A:9D:E9:2F:3C:34:BA:F9
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138322e3138362e302f32332d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.182.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:19:44:9a:2c:d1:f3:3b:2f:e7:d6:a0:d6:d1:e3:3c:07:56:
         e2:4d:bb:b2:77:24:d1:10:19:c6:c4:ed:3b:84:5d:42:4a:c5:
         03:7a:00:26:cb:ff:8c:b3:63:8d:9a:3d:b0:6d:d9:4f:0e:b4:
         49:36:e7:07:9a:cf:71:26:ac:96:67:03:60:28:df:90:e7:26:
         fd:3a:1f:eb:67:b7:00:ec:c2:1c:04:02:89:a9:21:cd:46:56:
         39:2f:96:85:91:28:2f:41:0d:52:0a:01:af:be:6f:83:92:24:
         a1:ea:3e:55:b8:29:e2:8a:d9:57:ab:ee:d2:cf:dc:2e:5e:b9:
         2c:20:70:da:1d:58:09:ff:79:37:c1:98:7c:9d:51:a9:02:94:
         1f:fe:d2:19:a3:56:24:db:7b:02:84:ab:08:83:12:5a:0e:67:
         a2:bd:01:6d:d0:29:fc:68:f7:2a:d6:43:39:6c:60:a3:12:74:
         4f:e8:56:e9:09:35:a7:a1:d5:9a:51:76:dd:19:4b:37:ca:8f:
         5a:3e:94:c5:47:ea:33:2b:0d:b3:4a:ae:1d:53:0b:1c:fe:18:
         2a:44:11:bd:90:52:fd:b4:e2:89:c4:d8:58:b6:e7:95:dd:bc:
         55:cc:6e:9b:33:a9:d5:2b:f9:6f:75:39:e9:53:35:d5:07:20:
         aa:45:94:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----