Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230372e3235312e302f32342d3332203d3e203531313637.roa
File:                     3138352e3230372e3235312e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          MPvm10HDL/M4VLkHvzDEpq8HVGzvrntSmaLvvNTyl8w=
Subject key identifier:   A7:29:9A:95:BF:A5:89:5F:4A:3E:B0:33:2B:63:0A:E0:F0:0D:17:1A
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       02DAB724A0151018724799D6AEBEFB42D0EB7465
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230372e3235312e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:17 +0000
ROA not before:           Sat 22 Oct 2022 04:28:17 +0000
ROA not after:            Sat 21 Oct 2023 04:33:17 +0000
asID:                     51167
IP address blocks:        185.207.251.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:da:b7:24:a0:15:10:18:72:47:99:d6:ae:be:fb:42:d0:eb:74:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:17 2022 GMT
            Not After : Oct 21 04:33:17 2023 GMT
        Subject: CN=A7299A95BFA5895F4A3EB0332B630AE0F00D171A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d9:60:56:96:3a:d6:d1:e0:d0:c2:86:aa:8d:
                    8f:34:90:ec:22:89:1d:ec:7e:25:92:4b:59:f3:5c:
                    f1:b1:2b:3a:2e:04:b6:0a:9b:dc:54:da:24:2a:ef:
                    0b:d5:60:22:ed:bd:12:65:26:2d:ba:7f:6e:4d:f6:
                    32:98:eb:d3:0a:7c:bb:cf:6b:e8:00:39:1f:e0:a0:
                    0b:1b:fb:de:4a:79:1f:3f:f1:b4:16:32:bb:2a:96:
                    96:af:56:41:ea:49:1f:df:af:53:f7:13:4f:1b:54:
                    a4:0d:a8:0b:d8:16:0c:da:b2:a8:a3:3e:41:69:50:
                    6f:57:14:7d:e4:8b:f1:29:26:d9:9e:1b:6a:c2:bc:
                    55:d7:17:3f:a5:ed:9c:25:5c:29:88:28:a6:fb:ae:
                    d8:5c:31:46:d2:4e:d7:9d:e3:60:ab:26:b8:65:b5:
                    86:31:d6:7f:3d:91:1f:40:22:aa:10:1f:c6:7c:af:
                    04:5f:a8:ef:76:2b:3d:d4:a7:4b:fb:12:4f:b5:da:
                    e1:27:f5:3d:22:22:b3:2b:24:27:ae:2a:c8:e0:ee:
                    02:b0:62:b1:29:9a:37:9a:b3:de:58:c3:3d:ea:8e:
                    aa:6c:68:b1:96:fb:c8:f1:3c:ac:f8:dc:34:3f:ba:
                    8c:15:15:1a:37:57:cb:03:14:bb:4a:dd:88:23:4d:
                    c8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:29:9A:95:BF:A5:89:5F:4A:3E:B0:33:2B:63:0A:E0:F0:0D:17:1A
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230372e3235312e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.207.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:54:d1:45:99:09:6d:cd:84:9c:45:1f:71:97:e8:c6:07:21:
         29:7a:a5:c6:30:a3:4d:a9:d4:7a:63:cc:80:c3:c5:cb:30:30:
         72:ea:57:8f:a7:e8:0f:b4:da:5c:12:61:a2:73:24:88:3b:c7:
         81:6e:42:a8:2a:2a:99:8f:b4:e2:95:75:7c:49:4c:f1:aa:8e:
         1b:b8:68:14:ae:6a:52:53:77:71:5d:4c:4d:2a:59:87:2f:75:
         6a:57:fb:c9:0c:ee:ff:b2:42:d6:5f:3a:6a:b5:6e:50:ab:95:
         9a:a2:ec:6f:1b:82:c3:69:92:ae:eb:62:a5:79:dd:95:c8:a0:
         e2:e7:8f:31:6d:0b:4f:dc:a3:d6:54:e7:ec:2a:fd:f1:dd:23:
         78:c6:79:b5:e6:9a:cd:18:04:98:2f:1e:3c:b4:26:58:ba:bd:
         a5:af:c3:87:a0:59:3c:39:c3:20:4e:08:63:a2:43:ce:58:ec:
         27:8e:b2:03:c9:d6:9d:76:da:c4:14:e7:9b:0e:d8:fe:87:43:
         03:92:d0:f7:42:e8:ff:94:91:a7:f7:c8:b2:ff:18:f4:e2:52:
         f6:58:5f:92:ec:9d:7a:d8:7f:b4:33:49:b8:bb:1b:81:23:df:
         90:7c:53:7b:e5:41:6c:dd:90:9f:b5:66:bd:a7:79:8d:67:aa:
         ab:f2:2d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----