Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139332e36362e302f32332d3332203d3e203531313637.roa
File:                     3138352e3139332e36362e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier:          XxYga/k4u4dr1ldvoQ4WxqxcwRnkBVPaWNNrlWOqhWY=
Subject key identifier:   FE:96:98:FE:07:6A:70:27:A4:69:4E:2E:95:3C:46:43:5E:1B:55:91
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       51BF6C5EF228388A285B372DB31C7D0D85F065A7
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139332e36362e302f32332d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:17 +0000
ROA not before:           Sat 22 Oct 2022 04:28:17 +0000
ROA not after:            Sat 21 Oct 2023 04:33:17 +0000
asID:                     51167
IP address blocks:        185.193.66.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:bf:6c:5e:f2:28:38:8a:28:5b:37:2d:b3:1c:7d:0d:85:f0:65:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:17 2022 GMT
            Not After : Oct 21 04:33:17 2023 GMT
        Subject: CN=FE9698FE076A7027A4694E2E953C46435E1B5591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7e:91:2e:66:40:6d:4c:b1:31:6d:08:65:8b:
                    8c:38:b9:70:1c:35:d3:d7:a9:20:fd:06:f3:3b:d4:
                    6b:80:91:81:9d:d2:ae:52:5b:da:03:ec:58:ad:9e:
                    0e:ca:39:3f:5f:b0:20:87:99:9b:1b:8e:33:c8:24:
                    c1:b7:c1:c7:30:82:bf:97:16:ee:93:7d:f0:83:a3:
                    28:45:35:90:fc:1a:a2:b9:82:98:a4:74:8c:be:55:
                    78:07:67:6a:4d:ec:0b:65:89:32:21:bd:d5:5d:db:
                    f1:05:ff:a2:27:95:34:4e:1d:6e:b8:26:46:b8:e9:
                    d4:02:40:42:13:9c:3a:b0:b0:41:0f:d4:d9:89:f5:
                    41:99:74:b5:49:e6:2f:1b:5c:03:8a:d9:f4:5a:e2:
                    16:d1:ad:1b:40:b9:7a:32:d3:03:ea:3c:29:44:c8:
                    bd:cd:37:89:86:fd:d8:5f:c9:2f:38:53:c8:62:03:
                    59:9d:e5:63:46:62:b6:0b:ac:c3:62:f8:dc:e4:ed:
                    51:8e:d6:ed:34:4c:48:4a:8e:b3:e9:af:4a:71:5e:
                    c0:74:72:ef:28:d3:36:8d:21:9d:ca:a3:fa:d4:16:
                    50:e8:62:49:9d:ae:fe:69:2d:42:8e:1b:0e:8a:83:
                    63:ab:9f:8c:c1:24:71:63:e0:8a:41:79:84:e2:44:
                    f0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:96:98:FE:07:6A:70:27:A4:69:4E:2E:95:3C:46:43:5E:1B:55:91
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139332e36362e302f32332d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.193.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e9:4b:01:7d:8e:9e:84:45:3a:24:49:61:ab:5c:9d:cd:ec:ef:
         7a:fc:35:da:b5:f5:3d:7b:d1:e0:e7:8c:7b:74:05:16:74:e8:
         ee:32:11:8f:10:7a:fd:da:e3:08:0f:af:47:c6:10:61:9b:92:
         44:07:4e:d8:05:f2:04:bf:b1:6d:db:69:ef:0c:24:45:9c:ff:
         1b:6a:1f:a0:9a:12:2b:ac:b5:54:7f:c6:9e:cd:90:97:2e:6c:
         45:36:d4:4e:86:25:5b:9b:51:35:c0:0a:cb:8a:e4:77:1a:3b:
         5e:70:f3:9b:8b:70:66:95:83:58:c3:3f:e2:81:c4:75:00:cf:
         8c:3f:85:c6:51:2a:13:23:33:c9:fc:5f:8c:76:24:05:2e:ae:
         bd:11:80:43:6d:cd:dd:80:85:10:68:09:c0:0a:4f:12:0d:61:
         64:72:e8:58:e1:74:ad:81:b9:f8:f0:24:c9:52:d0:0b:be:92:
         9b:21:5f:6c:8e:c7:52:fc:06:82:ef:d5:ec:4b:13:1b:bb:8b:
         0a:45:16:87:ad:0b:cf:e2:52:2c:75:6a:82:73:db:fa:01:c6:
         3a:88:0f:65:7a:b9:b7:2a:40:94:65:16:ed:e3:17:fe:30:c7:
         82:f8:e8:9c:58:ec:41:c0:fc:b0:cf:85:eb:50:b4:fd:c1:e3:
         40:80:68:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----