Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3233382e302f32332d3332203d3e203531313637.roa
File:                     3138352e3230322e3233382e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier:          1uy+leEHae2A4DRZempkgbYZ1SO5f9/Vv1+CgYYW8QQ=
Subject key identifier:   42:B2:B1:81:5A:CF:2C:4D:7E:C1:96:04:EE:F4:BE:A6:27:1D:22:5F
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       2E59B2D58FE7239F1DA30A5F6BBA63C5B02B0E29
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3233382e302f32332d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:23 +0000
ROA not before:           Sat 22 Oct 2022 04:28:23 +0000
ROA not after:            Sat 21 Oct 2023 04:33:23 +0000
asID:                     51167
IP address blocks:        185.202.238.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:59:b2:d5:8f:e7:23:9f:1d:a3:0a:5f:6b:ba:63:c5:b0:2b:0e:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:23 2022 GMT
            Not After : Oct 21 04:33:23 2023 GMT
        Subject: CN=42B2B1815ACF2C4D7EC19604EEF4BEA6271D225F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:eb:d1:1c:72:ef:5b:16:4a:9b:88:17:0a:a7:
                    4c:6e:f3:7d:09:2e:77:94:8f:6c:55:53:3a:e3:97:
                    e3:24:73:3f:99:44:e8:60:09:e5:29:de:83:2e:f2:
                    0d:18:36:26:d8:59:29:20:5c:bf:ef:fe:3d:4a:71:
                    d0:77:2c:dc:b7:f4:62:07:80:0a:ed:14:f6:cf:f4:
                    c6:60:ae:30:27:c8:3d:b1:0f:98:bc:ee:04:00:41:
                    2e:b1:3a:f5:56:ae:ac:52:b3:f9:26:63:fd:4d:a0:
                    b1:5b:10:01:cc:ac:4d:3b:95:d5:3c:a4:74:2a:d3:
                    4a:f4:ac:2b:71:9a:c7:76:dc:12:0c:17:4a:40:4c:
                    d1:b4:c0:97:0e:2a:4a:17:99:cd:f8:0b:2c:12:e8:
                    db:f6:76:8f:2c:05:5b:fd:ef:02:af:ce:24:04:1c:
                    1c:5b:6f:f8:6d:5a:02:35:c8:6f:3d:44:f7:80:c2:
                    e9:eb:c8:fa:03:cb:2c:76:0b:4d:b5:7f:d9:89:c3:
                    e5:41:d8:8a:db:cc:05:4d:c6:a8:7a:60:64:ea:5c:
                    37:a0:09:02:54:fb:87:96:49:19:4a:49:dc:78:ae:
                    9b:71:7f:c5:aa:5a:6d:b6:56:5e:b7:29:d0:d8:cd:
                    b1:1f:c1:be:fb:d7:ad:24:75:08:41:69:4f:ca:9f:
                    10:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B2:B1:81:5A:CF:2C:4D:7E:C1:96:04:EE:F4:BE:A6:27:1D:22:5F
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230322e3233382e302f32332d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:4f:98:6c:c1:a0:0a:7f:29:20:4e:a1:58:24:c5:51:1b:4d:
         da:18:a8:05:9d:33:87:60:61:53:c6:6e:6d:04:c8:83:4c:78:
         fe:46:9d:b4:25:66:7c:83:24:ad:9b:cc:82:19:1f:ff:8f:41:
         54:16:bd:62:90:30:0c:f9:19:26:41:30:1c:f8:60:74:2a:4a:
         d3:97:1a:72:d2:bd:fd:3e:cf:ed:84:b1:20:a0:49:30:e5:51:
         f3:4a:09:67:5b:b9:20:46:67:7c:18:1d:34:b3:d8:5e:20:a1:
         99:8c:46:2a:99:c5:db:66:da:d2:40:d1:ba:f7:d8:be:b1:d9:
         45:b2:c0:4a:c4:39:57:9c:fe:27:ef:f0:f9:17:5b:f0:2d:e4:
         34:53:8a:2a:66:28:c5:65:01:21:7a:c4:11:c6:a8:ce:47:41:
         f0:21:77:45:af:e4:74:f1:4f:f1:84:1d:33:e9:45:05:12:f8:
         95:da:1d:da:e4:d0:9d:d2:bb:df:85:9d:db:eb:a1:57:51:eb:
         59:3c:46:ae:b3:65:49:45:56:93:b5:06:ca:d7:54:09:8e:28:
         3e:be:67:9d:e9:86:b3:4f:3b:2c:b2:1b:ed:60:1f:bd:18:d1:
         b4:aa:c0:ec:3d:31:3f:ab:88:b6:f6:21:a8:81:5e:3f:ab:b4:
         3a:42:97:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----