Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138322e382e302f32332d3332203d3e203531313637.roa
File:                     3138352e3138322e382e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier:          zTpu7ok/fFyxSTXaLv0YCPVvjLOdLLDF/sxZQ0q0c/k=
Subject key identifier:   66:F3:26:DA:20:66:F9:A1:A8:98:6F:A8:2E:C8:36:7C:61:1B:20:2F
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       3B7A739253FF359781A9B85FEBF27C6B621146DD
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138322e382e302f32332d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:18 +0000
ROA not before:           Sat 22 Oct 2022 04:28:18 +0000
ROA not after:            Sat 21 Oct 2023 04:33:18 +0000
asID:                     51167
IP address blocks:        185.182.8.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:7a:73:92:53:ff:35:97:81:a9:b8:5f:eb:f2:7c:6b:62:11:46:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:18 2022 GMT
            Not After : Oct 21 04:33:18 2023 GMT
        Subject: CN=66F326DA2066F9A1A8986FA82EC8367C611B202F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0c:70:e6:46:ca:50:78:b1:b3:31:14:cd:94:
                    7a:2c:52:2b:9b:69:b2:7c:71:ae:19:e8:42:2c:20:
                    cc:83:c2:41:c9:ba:d3:30:40:0f:62:36:f5:1c:0d:
                    73:f5:f5:61:80:c6:43:f6:34:ba:f7:5b:c2:d4:99:
                    e9:72:ee:93:a5:79:76:d9:cd:ad:fb:cc:e1:0e:b7:
                    1d:fd:45:1e:a4:3b:b7:43:ee:9a:96:e6:3b:c1:3e:
                    c1:a3:8a:b5:6a:54:2c:7c:36:e9:a6:ed:19:40:5a:
                    b8:ca:17:47:4c:5f:fc:5c:9b:cb:af:b7:f2:62:91:
                    b2:6f:fe:b9:1a:dd:bf:5c:0a:63:f0:c2:ca:57:a7:
                    08:f7:7d:7c:df:a7:f3:1d:23:0c:08:80:80:53:0e:
                    d6:e3:46:ce:be:3e:20:fd:25:36:f9:5e:4c:87:29:
                    7b:33:52:47:56:ae:ec:fe:c1:6d:9f:14:46:1d:92:
                    e0:f8:6c:a0:19:c4:76:b6:10:ef:3c:2e:48:a7:5b:
                    55:17:ec:14:d0:5c:f3:81:b3:70:5a:e3:33:91:e7:
                    02:2d:d5:88:46:a9:a0:14:5b:88:6f:25:d8:12:79:
                    76:44:df:a2:21:1e:14:59:0b:c1:f6:6c:9c:8f:94:
                    96:d5:56:b5:49:4d:1d:43:42:c4:1e:59:9d:65:51:
                    a0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F3:26:DA:20:66:F9:A1:A8:98:6F:A8:2E:C8:36:7C:61:1B:20:2F
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138322e382e302f32332d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.182.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:5c:a6:c6:c8:f5:9c:e4:07:65:0f:7d:80:2b:04:b0:a5:6c:
         5e:a2:79:7f:09:bc:9e:3a:b5:7a:86:00:1c:27:2d:a9:52:f5:
         d3:64:13:ad:62:8b:83:32:3f:bd:87:86:f9:4c:7a:e7:6c:1a:
         67:70:e7:9c:f7:82:9f:56:cc:fc:9f:3e:57:48:44:7e:f1:eb:
         d6:aa:4f:42:c9:6f:ce:1f:8b:d3:46:ec:41:10:81:e7:4d:6f:
         d6:dd:c3:c0:af:96:b7:23:05:ae:bb:ed:ad:78:f6:2b:af:29:
         b8:3c:ac:23:24:a7:7c:c2:1e:46:db:ec:98:09:9a:11:eb:a2:
         51:c7:3a:00:83:c5:c4:2e:b0:db:bc:97:14:c0:74:02:98:eb:
         1b:c8:f6:1c:0a:84:d0:6e:c2:14:db:78:4d:59:20:c0:3b:d8:
         20:44:b0:d8:5c:39:f7:31:d8:5f:03:1e:ca:30:4b:21:42:c7:
         4a:1e:c8:b6:53:1d:e9:75:38:46:99:50:2d:e4:ce:d1:63:e1:
         f0:d5:27:2d:60:45:a5:50:ab:37:e7:0b:d1:27:03:f3:22:0b:
         fa:fb:9b:89:bb:18:4f:4e:ad:3a:68:13:75:82:21:43:ac:ca:
         50:1e:9f:10:62:e0:60:69:0f:83:ad:9a:e4:87:d8:a8:e9:cd:
         19:d4:70:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----