Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230392e3232332e302f32342d3332203d3e203531313637.roa
File:                     3138352e3230392e3232332e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          89exv/rW98xsKaGHnqoIUGZ3/wnnf5DgYfxASDOSMi0=
Subject key identifier:   82:5F:87:37:29:3A:76:55:10:77:98:09:1A:BB:89:F6:06:87:FA:43
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       4DEED06C84441F96229554C48BB01ED0ADA474D4
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230392e3232332e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:16 +0000
ROA not before:           Sat 22 Oct 2022 04:28:16 +0000
ROA not after:            Sat 21 Oct 2023 04:33:16 +0000
asID:                     51167
IP address blocks:        185.209.223.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:ee:d0:6c:84:44:1f:96:22:95:54:c4:8b:b0:1e:d0:ad:a4:74:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:16 2022 GMT
            Not After : Oct 21 04:33:16 2023 GMT
        Subject: CN=825F8737293A7655107798091ABB89F60687FA43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:13:a6:6f:70:11:f9:b3:02:33:09:c5:4b:1d:
                    73:23:d4:60:e8:29:56:da:83:33:34:b3:10:95:6f:
                    dd:22:4d:4d:59:64:ef:ac:9c:b6:99:7b:8e:5c:5c:
                    21:c0:d3:5c:61:16:c4:bf:70:3d:c4:e3:8f:8e:c4:
                    e3:86:95:b5:a6:1d:5c:9c:76:8e:7b:0b:ba:30:4c:
                    0f:60:78:ec:29:93:e1:fb:9e:4e:f7:2d:c7:52:36:
                    cb:ec:be:14:56:ad:b0:2f:60:01:7d:66:95:fc:57:
                    e4:c0:d3:b7:73:66:e6:65:92:cf:1e:62:f3:5d:78:
                    3c:cb:b0:d7:f5:4d:f7:38:74:55:26:e0:76:5f:73:
                    4d:dd:59:30:48:1b:0c:e8:76:5d:f1:48:81:c7:19:
                    10:c7:a3:e6:69:73:fc:4f:9e:00:c7:36:f3:15:11:
                    62:45:2f:c6:27:8a:fc:10:16:81:ac:1d:c9:d6:6b:
                    fc:78:d7:29:1a:ce:ce:b6:97:0f:3d:bb:75:12:c5:
                    68:af:b7:20:4a:b4:85:09:29:71:8a:ef:42:4c:a1:
                    a0:33:da:33:47:b3:4b:6e:aa:72:fc:b3:a3:6a:87:
                    fe:4d:3e:eb:5e:b0:48:82:bd:9a:f7:89:92:f3:65:
                    24:6a:54:85:0b:9c:b6:7e:08:8c:4b:22:ca:76:bf:
                    d7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:5F:87:37:29:3A:76:55:10:77:98:09:1A:BB:89:F6:06:87:FA:43
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230392e3232332e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.209.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e4:08:f6:ae:e6:91:fb:b8:fb:01:1f:58:45:69:c0:a0:5f:58:
         80:33:95:11:95:91:62:6d:28:ce:ed:a5:aa:36:bc:81:42:58:
         0e:85:6e:a0:ed:43:1a:f0:96:b7:f6:0e:ba:9f:e6:f7:b4:11:
         e3:a1:81:54:14:8d:4e:58:bb:f6:11:da:01:bb:93:41:4c:30:
         20:cc:24:89:88:aa:81:66:99:f5:dd:4a:1e:70:35:5e:ff:d6:
         0e:27:58:f4:b0:ff:a6:86:12:0e:92:df:4b:fc:8f:5e:48:85:
         8e:c9:cb:61:ca:3b:41:ad:af:7a:42:59:36:2f:c4:c9:79:d9:
         3f:b8:f4:3d:d2:74:18:94:60:c4:1a:88:dd:88:b6:81:3b:46:
         35:a7:90:bc:31:f9:65:10:55:da:fc:50:55:8f:ea:ee:9a:d1:
         34:bb:ba:32:e4:86:8a:8f:92:76:4e:54:23:0a:ce:16:27:71:
         b1:ed:c7:25:ed:1e:26:77:95:9b:d5:8e:27:f7:db:c9:30:8f:
         80:8a:6c:b3:20:1e:0f:dd:1f:4c:0e:4e:5d:81:fa:8d:7c:c0:
         00:2d:7a:4a:c8:1d:34:f0:4b:cd:00:fc:67:22:2e:ef:fb:3e:
         a0:a8:8a:e0:31:6e:1f:b0:8e:01:37:29:a3:6c:61:63:e3:84:
         a5:73:3b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----