Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230372e3235302e302f32342d3332203d3e203531313637.roa
File:                     3138352e3230372e3235302e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          tJ9cJTEYldmQrnuywteIpC2dGWXR6PPr88nWgFIwD94=
Subject key identifier:   25:96:7F:EF:81:F1:76:69:83:92:77:53:D1:B2:84:DD:5A:C0:0B:E4
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       1637FB516AA1A5F0D22C1D0BD6D77AD3FDBA0159
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230372e3235302e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:23 +0000
ROA not before:           Sat 22 Oct 2022 04:28:23 +0000
ROA not after:            Sat 21 Oct 2023 04:33:23 +0000
asID:                     51167
IP address blocks:        185.207.250.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:37:fb:51:6a:a1:a5:f0:d2:2c:1d:0b:d6:d7:7a:d3:fd:ba:01:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:23 2022 GMT
            Not After : Oct 21 04:33:23 2023 GMT
        Subject: CN=25967FEF81F1766983927753D1B284DD5AC00BE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:24:43:e4:f5:c5:9c:ef:91:76:6f:cf:33:8a:
                    86:1e:83:ca:f4:13:2f:b2:fe:35:a9:0e:8b:77:a2:
                    7f:d0:2f:0f:96:0f:58:30:d1:6a:32:b2:7c:cc:ca:
                    4d:35:8e:08:0f:37:2f:e9:44:c2:1f:97:f5:28:c6:
                    56:d7:04:75:23:0f:23:2b:81:5a:65:b8:2b:24:a3:
                    62:b9:99:17:0b:82:27:4b:64:51:df:cd:e3:79:b1:
                    7b:c1:78:2d:e7:db:b8:1c:e5:a7:8d:fc:94:de:74:
                    a1:73:f6:fe:cb:29:3c:b0:29:0f:da:9c:db:46:f1:
                    af:41:39:61:1d:e0:de:c6:2b:04:d8:f0:a6:a0:e1:
                    89:1c:c6:8b:72:c1:29:a7:49:38:fc:39:8c:fe:5f:
                    50:6d:54:86:55:b1:20:46:7d:77:46:71:4d:07:1b:
                    95:c5:29:87:bf:f8:e4:ac:c1:a7:65:33:5a:a1:e7:
                    bc:94:61:65:d8:15:97:ff:1a:8c:2f:2a:a4:6d:64:
                    70:45:1c:11:c9:e9:e7:37:8e:ec:74:c0:13:20:72:
                    ea:d7:a9:94:d8:90:b2:ea:f2:3d:11:17:de:c0:d2:
                    03:fd:cc:68:40:40:cb:17:9f:6c:5e:f7:cc:f1:cc:
                    da:6a:bb:86:94:75:d6:bc:a3:74:bf:af:0d:b5:d9:
                    a0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:96:7F:EF:81:F1:76:69:83:92:77:53:D1:B2:84:DD:5A:C0:0B:E4
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230372e3235302e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.207.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:ad:59:26:ab:c1:14:18:50:51:10:52:71:25:ec:fa:d9:c2:
         4a:f3:3f:a7:52:37:1f:94:05:2b:e7:9a:e9:d9:7c:66:7b:b8:
         de:f7:00:2c:44:03:2f:46:ea:f4:f2:54:b0:41:35:cc:16:83:
         13:38:94:a8:3a:35:21:3e:01:d1:4d:c7:d3:11:47:8e:ec:b7:
         65:ab:78:1b:c9:85:6d:4a:da:37:43:be:03:17:f8:35:48:5a:
         30:e7:03:d9:32:1e:2a:71:97:80:8d:a8:8e:c3:8e:9c:29:79:
         b0:d2:b6:2c:63:fe:2d:ac:5d:3b:8c:37:7b:83:fd:6b:cb:04:
         fc:09:5f:7c:64:8e:a2:0f:77:c5:ec:1b:0b:aa:29:b3:85:02:
         77:cd:2f:6a:c8:b6:8f:0a:34:e4:2a:20:2d:15:a4:c8:70:a7:
         11:e7:49:ce:6a:39:a5:1d:53:e3:84:1c:da:1f:a5:30:52:0c:
         b7:8e:2b:b3:6e:83:72:25:22:fc:2f:63:af:de:e2:78:3e:09:
         0e:60:3d:8d:7b:a2:b8:a0:6d:19:59:ed:f6:7e:fb:c7:2d:bd:
         be:06:df:52:8b:98:d5:ee:76:20:45:c6:b3:f2:a7:e2:c5:99:
         d8:d2:51:d7:88:07:29:9c:68:f1:d9:f6:58:e9:d5:28:86:fd:
         a4:f0:31:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----