Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233352e302f32342d3332203d3e203430303231.roa
File:                     3138352e3138372e3233352e302f32342d3332203d3e203430303231.roa (raw, json)
Hash identifier:          nqYcIsjxGMrHOeNCWtAZ1FuZKFghyRSbG0j4Xp0vNvE=
Subject key identifier:   4C:F0:63:7F:B6:8B:D0:20:7E:67:9D:24:32:3F:7F:B0:7B:08:C5:F6
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       270B07DB028BB3EAA606B53E8C39E75152A92596
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233352e302f32342d3332203d3e203430303231.roa
Signing time:             Sat 22 Oct 2022 04:33:12 +0000
ROA not before:           Sat 22 Oct 2022 04:28:12 +0000
ROA not after:            Sat 21 Oct 2023 04:33:12 +0000
asID:                     40021
IP address blocks:        185.187.235.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:0b:07:db:02:8b:b3:ea:a6:06:b5:3e:8c:39:e7:51:52:a9:25:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:12 2022 GMT
            Not After : Oct 21 04:33:12 2023 GMT
        Subject: CN=4CF0637FB68BD0207E679D24323F7FB07B08C5F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:18:76:33:7d:65:45:6d:00:e4:e2:b7:88:83:
                    7f:ce:45:2e:4a:f9:45:ad:b9:13:98:a7:8e:92:29:
                    68:23:b0:9e:fd:4d:c0:23:b6:de:0c:ce:83:ff:12:
                    88:31:55:45:64:3d:d7:e2:47:bd:ca:98:6a:3b:a4:
                    82:1c:6e:ff:a0:2c:32:d2:f2:a8:3d:40:d6:d9:9d:
                    5b:f9:01:77:1b:d7:8c:6b:52:4a:c9:f6:8c:28:1c:
                    bd:14:19:08:e5:91:c3:68:fb:67:37:1e:7b:27:53:
                    f8:98:b0:8e:61:92:55:34:fe:c4:28:d4:b4:d6:db:
                    6e:e1:78:4e:22:a5:c5:6a:83:7d:cd:5a:73:c8:3f:
                    64:53:b2:c7:1a:aa:3c:cd:2d:8c:88:48:43:ba:51:
                    c8:68:3f:72:72:5c:c6:95:14:2d:86:3d:67:49:35:
                    9e:05:43:2e:29:f2:a1:87:c2:99:c3:6a:34:a0:de:
                    d6:91:f3:d4:3c:9c:2b:eb:ca:e9:f5:de:c9:01:c6:
                    c6:36:6d:c1:22:77:44:c3:a8:3a:c8:4e:71:b6:2a:
                    74:35:4a:1f:e3:f7:45:30:87:eb:cc:8d:ca:90:f9:
                    b0:f7:f8:ce:0d:33:5b:2d:c9:d8:ed:b2:c3:2f:ee:
                    41:b1:23:c1:ac:2e:c9:66:2f:39:a9:60:a1:d7:ba:
                    b4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F0:63:7F:B6:8B:D0:20:7E:67:9D:24:32:3F:7F:B0:7B:08:C5:F6
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3233352e302f32342d3332203d3e203430303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:11:20:6c:8d:2c:6f:af:c8:4d:5a:74:45:cc:0d:fc:96:37:
         83:2b:91:87:08:ee:5f:3d:e1:4c:f9:b6:be:b5:a2:ba:46:9a:
         64:fe:64:68:23:0d:b4:43:c1:db:f1:dc:8e:22:5c:3a:7a:2c:
         a7:64:12:51:fe:93:91:e8:02:39:fb:d6:d7:4d:69:b1:22:e4:
         7a:74:76:41:db:6c:48:a4:6c:89:78:a3:e8:89:bd:78:93:4a:
         03:71:ce:73:a6:07:a4:30:de:20:44:68:dc:9f:76:d7:66:77:
         c1:bb:1d:19:89:09:96:af:05:ff:25:6f:7f:7b:41:0d:12:82:
         31:d9:36:8e:0a:cb:55:9e:c9:4c:a5:70:b6:8d:23:b8:80:34:
         38:71:60:1d:e8:54:28:36:f4:73:36:50:c3:19:7d:c7:8f:fa:
         4c:13:9f:f1:b8:0b:2d:57:e2:98:79:15:fa:13:9a:3d:67:13:
         ae:73:7e:e9:2f:b2:c4:c7:9b:7b:f0:53:0e:8a:9a:7f:4c:6e:
         fa:4e:f6:04:06:b3:7a:95:ce:71:d6:fc:64:d3:a4:e8:17:8a:
         50:98:cb:ff:31:53:56:45:18:ce:5d:b8:8d:83:ea:1a:27:ff:
         d6:cf:b9:b8:89:e7:2a:42:7a:31:b1:c4:49:e4:f2:e8:09:d8:
         58:c9:35:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----