Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139392e3130322e302f32342d3332203d3e20313336373837.roa
File:                     3138352e3139392e3130322e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          bye/VjiAHaxfROOzdoPb7E+rUWhtAaV2KN1rwNTO5VU=
Subject key identifier:   49:CD:99:DE:86:B5:7D:CA:A5:C6:BB:29:9B:86:5A:46:69:7D:95:77
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       4674453F3F9889A01F8957C225373F92F99A20B0
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139392e3130322e302f32342d3332203d3e20313336373837.roa
Signing time:             Wed 28 Dec 2022 09:34:48 +0000
ROA not before:           Wed 28 Dec 2022 09:29:48 +0000
ROA not after:            Wed 27 Dec 2023 09:34:48 +0000
asID:                     136787
IP address blocks:        185.199.102.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:74:45:3f:3f:98:89:a0:1f:89:57:c2:25:37:3f:92:f9:9a:20:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Dec 28 09:29:48 2022 GMT
            Not After : Dec 27 09:34:48 2023 GMT
        Subject: CN=49CD99DE86B57DCAA5C6BB299B865A46697D9577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c6:8a:a4:05:69:b0:29:ea:b4:24:3c:b2:88:
                    51:5d:a9:f2:aa:8c:15:f7:47:af:cc:9d:8e:d7:fd:
                    66:10:ea:7d:23:89:34:11:77:0c:3d:f7:85:c6:c1:
                    f6:4f:57:a5:14:8a:ff:50:77:b7:61:ba:87:f1:78:
                    86:ff:2d:97:91:b0:1b:dd:f7:b8:86:20:37:e0:54:
                    c5:95:ec:0f:0c:11:09:89:96:0b:2f:33:c9:d9:2a:
                    8f:39:75:41:44:4b:d7:c2:b9:53:7a:06:c6:c6:98:
                    3e:43:ea:ce:70:d0:09:0b:3c:56:7d:df:a6:be:45:
                    f6:c5:49:6d:99:ce:0f:56:3b:4e:e5:51:1e:0e:98:
                    3a:17:d1:3e:be:72:02:f4:96:b7:a8:10:b1:8f:30:
                    48:45:cc:4a:29:a4:34:9d:2b:89:18:c8:d4:f7:72:
                    07:84:4d:ff:d9:83:f4:b2:26:fa:ca:49:db:d2:50:
                    e2:ef:ac:f2:f8:3a:a7:74:4b:4e:99:6e:f6:fd:5c:
                    8b:bb:91:0d:b0:5b:ee:8b:d7:00:45:49:34:d9:59:
                    dc:3f:ed:c0:1b:42:5e:bd:1b:4f:12:e2:3e:4e:df:
                    2a:d8:2f:f8:95:b7:4f:3f:5e:44:0c:df:fc:1f:3e:
                    87:92:7d:fe:ca:51:29:f0:dd:6a:73:88:ec:10:95:
                    88:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:CD:99:DE:86:B5:7D:CA:A5:C6:BB:29:9B:86:5A:46:69:7D:95:77
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139392e3130322e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.199.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:0f:e5:9e:0f:48:bd:ef:6e:c0:e0:6f:44:ae:c3:c8:8c:52:
         63:b7:c6:2d:30:fc:c8:26:fd:28:35:27:ec:33:8a:6e:cb:75:
         50:ce:a8:ba:d6:4d:28:cf:a3:85:47:91:8a:a0:cf:e6:d5:20:
         bf:fd:bf:04:35:81:a1:50:d0:3d:d2:1f:7e:6a:23:15:88:67:
         08:3f:a5:57:92:c7:68:87:a5:e6:f3:cd:2f:c2:9e:50:23:5f:
         6c:a5:f7:b9:44:17:b1:5f:d4:c5:4b:52:4e:58:ff:ba:16:59:
         e8:b4:b1:60:63:d1:2f:e6:56:b6:fb:91:71:3b:4f:d3:3f:de:
         ec:ee:56:ca:6b:f8:c8:86:73:84:2b:af:fa:af:0d:89:d5:62:
         b4:59:77:ad:76:02:17:0e:08:69:b7:46:22:b8:ca:93:7b:d0:
         f5:9e:1d:e4:30:c8:1d:f9:34:92:3d:96:38:39:fe:78:f1:49:
         4d:a6:2f:f8:7e:ec:7a:0c:34:73:a4:56:06:d6:00:66:a1:7c:
         40:e0:ca:ae:3b:95:48:12:35:32:1c:5f:12:e8:d8:50:08:5c:
         6f:b8:00:60:14:d2:6c:07:35:62:c5:bc:f5:61:11:82:c5:e6:
         2e:45:c4:d2:47:1d:8b:fd:ef:ec:21:74:64:3f:e3:28:ec:d3:
         16:c6:73:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----