Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139302e3134302e302f32342d3332203d3e203531313637.roa
File:                     3138352e3139302e3134302e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          aw5Lh+eWOC+rbSC5kjTgCwbtXMLQM9VICcUaZygkbMo=
Subject key identifier:   CD:E4:37:93:48:2C:19:11:C2:06:84:98:4B:9B:0D:04:B7:72:75:FA
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       424260C4E5AFC428315FE8E8E310C24D9BF621E3
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139302e3134302e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:13 +0000
ROA not before:           Sat 22 Oct 2022 04:28:13 +0000
ROA not after:            Sat 21 Oct 2023 04:33:13 +0000
asID:                     51167
IP address blocks:        185.190.140.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:42:60:c4:e5:af:c4:28:31:5f:e8:e8:e3:10:c2:4d:9b:f6:21:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:13 2022 GMT
            Not After : Oct 21 04:33:13 2023 GMT
        Subject: CN=CDE43793482C1911C20684984B9B0D04B77275FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fe:af:df:6b:05:92:59:0f:41:a8:f5:2c:4d:
                    4b:d9:24:6f:e2:52:cd:aa:b8:33:4e:6d:5b:f4:45:
                    c0:25:45:2c:db:9c:bf:be:b7:d9:15:5f:94:95:12:
                    54:81:31:4c:05:5f:6e:ef:a9:ba:0d:e3:7e:47:e4:
                    c8:02:75:f1:58:81:16:2e:2f:f4:3d:2c:88:45:c3:
                    7e:ed:77:6c:d5:78:a9:7b:63:17:98:19:d7:8c:86:
                    08:5a:fb:80:a3:24:3a:ce:7f:50:48:49:15:47:6d:
                    f3:58:ee:e7:01:31:97:c8:0a:c3:f8:bf:20:56:6c:
                    9a:c2:f8:cf:6e:6b:2d:e1:e3:5a:34:37:55:27:9f:
                    03:4f:a9:2d:a7:4f:d6:9a:f4:ea:41:f6:f8:e8:a7:
                    1e:3d:e2:89:17:a8:1e:1d:46:cc:ab:51:37:61:a9:
                    af:0f:b6:55:90:cb:d8:7b:7f:50:b5:95:9d:47:90:
                    c3:a4:47:85:68:24:93:b1:3a:75:18:84:de:6d:98:
                    4c:a4:2e:bf:ec:7d:38:2a:78:e7:91:3a:63:1e:63:
                    64:2c:33:7c:1a:15:63:0d:a7:91:39:38:9b:4b:1f:
                    09:ab:cd:fb:47:36:04:41:5b:1f:c5:87:1a:75:c7:
                    a1:39:61:bb:b1:ee:cf:9f:e2:ca:26:12:ec:d2:d2:
                    c6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E4:37:93:48:2C:19:11:C2:06:84:98:4B:9B:0D:04:B7:72:75:FA
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139302e3134302e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.190.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ea:a5:e9:4a:02:79:08:d3:69:8c:52:23:c3:eb:40:f9:96:c9:
         a9:6a:97:15:c9:2b:19:74:d3:cf:f3:74:54:7c:2f:c3:eb:ec:
         44:fe:27:ef:3d:c0:8c:04:12:b1:81:65:da:f2:aa:11:f5:bd:
         b2:34:6f:ad:f5:2a:0d:a7:96:b9:34:8a:ab:1c:eb:ee:5d:25:
         0b:07:7a:f2:92:c1:8e:cb:95:d8:29:b3:18:7c:e9:fc:e2:56:
         9b:16:90:69:df:4f:f4:f1:6d:11:96:d0:40:11:9a:7e:9f:8a:
         f3:bf:a1:f7:11:01:b2:27:46:7f:57:5c:8a:63:79:3c:1a:0d:
         cf:b6:b1:7a:4a:40:73:a5:45:42:7e:b6:50:38:45:2c:6f:69:
         a6:37:df:db:d7:b1:bd:06:7b:a8:b6:c0:91:78:e6:7a:9c:52:
         8c:14:27:8b:4a:96:5f:f8:63:d3:22:f5:c1:b7:0a:88:a4:91:
         a4:1c:b9:51:49:4a:45:ee:98:21:03:2d:4b:8b:ba:bd:6c:ba:
         9b:c9:00:0f:6c:de:fc:80:be:44:00:aa:84:8f:11:e6:56:6f:
         83:3a:e3:23:c1:38:3d:f9:81:3f:20:29:8c:4a:24:8f:1e:84:
         82:8b:d0:5c:65:64:7c:ab:92:a6:b8:07:ed:14:c4:2e:69:8f:
         3f:f7:62:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----