Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139392e3130302e302f32342d3332203d3e20313336373837.roa
File:                     3138352e3139392e3130302e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          /11/jg9QZQIFf8kt+Ss1ylbblcx1mcYVu3lsIoEe1RI=
Subject key identifier:   26:E1:76:5E:5E:EA:BB:49:5E:3B:08:36:6D:5B:3E:E1:1A:77:05:22
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       5DC5F37C5362A7A2BF83007DCAE42F455107EBB2
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139392e3130302e302f32342d3332203d3e20313336373837.roa
Signing time:             Wed 28 Dec 2022 09:33:25 +0000
ROA not before:           Wed 28 Dec 2022 09:28:25 +0000
ROA not after:            Wed 27 Dec 2023 09:33:25 +0000
asID:                     136787
IP address blocks:        185.199.100.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:c5:f3:7c:53:62:a7:a2:bf:83:00:7d:ca:e4:2f:45:51:07:eb:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Dec 28 09:28:25 2022 GMT
            Not After : Dec 27 09:33:25 2023 GMT
        Subject: CN=26E1765E5EEABB495E3B08366D5B3EE11A770522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9e:e7:18:4c:98:f0:fa:d2:4c:1a:fe:66:f1:
                    5f:ec:d6:35:5b:52:fa:bd:c6:d1:b6:e3:99:9a:28:
                    e4:f3:97:ca:65:c4:8f:2b:58:e9:81:7d:f2:28:07:
                    c9:ab:bd:46:c5:c7:29:6d:26:08:e0:b2:f1:64:26:
                    79:96:ad:b7:6a:4e:c4:4b:99:ca:26:fb:27:8c:bd:
                    c7:6a:01:85:15:36:d9:2d:d7:7e:e9:b3:88:e0:c7:
                    c3:db:46:d3:3e:04:ca:2b:0b:a2:3b:18:7f:0a:5e:
                    ca:1f:b0:43:af:63:19:ed:88:77:28:7d:46:bc:eb:
                    9c:e7:c8:60:9c:ee:89:9b:9a:3b:db:ca:e8:65:3a:
                    b8:fe:6a:b2:7b:b2:f1:d3:4c:28:ee:cb:17:43:f2:
                    d5:45:1f:23:f8:d4:c9:6a:b9:a6:b4:96:a5:22:5f:
                    3c:fd:87:ea:51:4a:1d:0f:41:2e:04:16:98:a3:b9:
                    1e:70:94:e2:ee:46:16:0d:e2:14:93:3f:e5:c5:ca:
                    92:91:13:77:e0:6d:15:7c:1f:a8:f7:52:f6:89:47:
                    ab:25:da:47:90:7d:8c:d9:a0:02:42:ae:59:8f:6a:
                    97:9f:bc:48:33:9f:5b:91:65:38:3d:1e:02:bb:35:
                    ff:a3:24:32:cc:00:c4:59:4a:6e:c5:3b:b4:9d:7b:
                    de:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E1:76:5E:5E:EA:BB:49:5E:3B:08:36:6D:5B:3E:E1:1A:77:05:22
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139392e3130302e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.199.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:38:41:1d:e4:51:32:23:9d:35:61:d4:d2:ad:6a:d6:e4:49:
         aa:0b:9f:b4:15:7b:b3:f5:0e:0b:d6:a5:42:9b:6a:bd:ac:56:
         3a:29:1c:b8:61:c4:0c:55:c2:56:42:0b:c3:e6:46:95:f0:45:
         57:a6:a0:6f:2d:30:3d:ff:3e:e9:14:d8:ca:1e:63:af:81:33:
         1b:72:be:00:00:2c:11:f2:11:b7:80:35:bd:6c:19:8b:82:7d:
         53:f1:71:15:8f:7f:a1:e9:46:ee:06:b5:c9:7c:b9:b5:c4:ed:
         81:59:26:02:4f:1c:89:33:1a:2a:1b:b5:9b:ee:33:58:ff:5d:
         14:d5:44:84:09:42:e9:58:11:31:b7:95:1b:7e:c1:dd:58:c2:
         f6:84:bd:42:87:58:c3:1e:7a:39:e5:74:8d:51:c0:1b:ec:f0:
         1c:46:8e:33:20:f2:5b:13:ab:6d:af:c4:4f:b0:26:26:5e:26:
         a8:4b:60:ff:80:e6:51:ed:c5:89:be:32:63:01:cc:56:1e:ca:
         e9:1e:a0:e7:37:a1:de:cc:7a:c1:ee:bd:51:88:5c:af:a5:35:
         4e:11:8b:aa:ce:d9:38:58:d6:fd:7f:81:d7:77:68:9e:8e:8c:
         66:d2:aa:2d:39:41:78:64:07:31:c5:68:1b:cc:2f:ee:70:4c:
         d3:90:0d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----