Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3234332e302f32342d3332203d3e203632323430.roa
File:                     3138352e3138372e3234332e302f32342d3332203d3e203632323430.roa (raw, json)
Hash identifier:          Ogc6Q89H4rjAeKglb/BLKH9YjXLXZFfw1JWnOLSPwmg=
Subject key identifier:   16:FB:CA:E9:DA:77:0B:98:19:2F:48:C2:59:09:7B:1E:D0:F3:33:C9
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       4A83DD237939CAD76DC12F9CBD299E5EDCBC8E94
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3234332e302f32342d3332203d3e203632323430.roa
Signing time:             Wed 28 Dec 2022 09:34:31 +0000
ROA not before:           Wed 28 Dec 2022 09:29:31 +0000
ROA not after:            Wed 27 Dec 2023 09:34:31 +0000
asID:                     62240
IP address blocks:        185.187.243.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:83:dd:23:79:39:ca:d7:6d:c1:2f:9c:bd:29:9e:5e:dc:bc:8e:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Dec 28 09:29:31 2022 GMT
            Not After : Dec 27 09:34:31 2023 GMT
        Subject: CN=16FBCAE9DA770B98192F48C259097B1ED0F333C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a7:37:f2:04:0e:1d:94:21:fc:ca:6d:59:32:
                    bc:92:58:34:8e:9e:d6:31:75:51:2a:40:0b:e6:ed:
                    f8:6e:01:84:3a:2a:3f:09:8d:d4:de:58:a4:b4:36:
                    b2:da:6d:0c:26:39:68:fd:ba:fe:c9:2a:e8:d4:73:
                    95:09:62:b2:41:c1:7b:8d:ba:e5:94:e1:83:c7:c1:
                    1b:d2:cd:f9:e0:5d:c8:b8:07:8a:9a:9a:a0:61:65:
                    c0:22:be:bc:00:d9:35:a2:e1:29:73:39:f4:95:fb:
                    fb:98:6e:0f:80:79:b3:22:18:32:2e:93:ad:a2:be:
                    5c:0c:95:27:08:95:9c:71:5a:50:c4:6c:d9:3f:e4:
                    7f:6c:6a:d1:4f:87:3e:fa:78:c8:34:ae:58:e5:a2:
                    c8:2c:6c:c0:53:26:28:31:04:32:86:33:80:d7:3f:
                    fd:21:9f:73:db:66:7b:d2:2b:32:0c:07:3d:99:7a:
                    e3:e6:0a:f8:79:30:2a:9a:73:d1:4e:d7:b7:97:b9:
                    3f:32:ad:9e:44:37:4b:ee:56:f7:e2:e7:ee:fa:70:
                    99:bb:b7:26:34:9a:4e:da:9e:78:79:0e:93:29:e8:
                    11:f8:05:90:3a:83:be:bc:de:b6:a9:90:5a:5f:25:
                    5e:f9:c6:0e:77:cb:6a:eb:46:e9:61:5f:bb:45:02:
                    ea:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:FB:CA:E9:DA:77:0B:98:19:2F:48:C2:59:09:7B:1E:D0:F3:33:C9
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138372e3234332e302f32342d3332203d3e203632323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:44:cd:86:76:35:c7:bc:6f:bb:19:90:3b:62:84:7c:50:8c:
         96:8f:57:3d:60:62:43:60:d6:d4:7a:25:99:34:c3:b7:0a:94:
         eb:a1:a6:9e:a7:cc:e6:97:7d:39:69:92:e5:85:db:9e:c4:90:
         42:9d:c2:fc:51:5e:d4:8d:3a:65:ae:ab:c5:97:30:c8:29:3e:
         9d:f8:5f:e9:22:f0:72:75:1b:88:37:2d:37:40:ce:4c:0b:2a:
         10:9c:7a:64:06:22:ba:ee:22:66:b1:de:5b:86:95:b1:57:aa:
         67:82:91:ee:2a:f8:c0:15:f5:6c:b7:f5:c2:5e:3f:ba:bc:65:
         46:4e:32:d4:d7:37:3c:ba:11:ac:3c:e3:61:69:3e:67:8f:98:
         75:f5:da:f3:a8:17:1d:59:82:8b:95:9c:f6:46:f7:76:86:92:
         0a:b0:0f:5f:3b:1b:0e:ae:f2:4b:90:46:d2:b2:39:49:73:06:
         7d:be:cf:bb:76:22:af:4b:8a:a2:d8:f5:cb:b6:a0:d5:c0:8a:
         f2:c9:4c:72:07:c9:48:5e:2e:10:29:d7:70:86:06:d7:3f:96:
         59:90:c3:6e:b9:d0:12:fd:88:d9:0f:4d:58:95:5c:1b:a7:12:
         e3:ed:3f:35:04:21:9d:01:c0:24:42:89:b6:57:02:58:95:86:
         ac:35:56:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----