Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231312e352e302f32342d3332203d3e203531313637.roa
File:                     3138352e3231312e352e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          4IjRpuCbQK9dQr4Zo4q0aXTkokUBgSjOxG+QGIQvy/Y=
Subject key identifier:   A3:8E:E0:8A:CA:AD:12:9F:64:68:1B:9E:A4:78:42:20:E2:32:30:04
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       156C8A46F36AFC94D8C2683829AF2AF87FC11296
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231312e352e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:16 +0000
ROA not before:           Sat 22 Oct 2022 04:28:16 +0000
ROA not after:            Sat 21 Oct 2023 04:33:16 +0000
asID:                     51167
IP address blocks:        185.211.5.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:6c:8a:46:f3:6a:fc:94:d8:c2:68:38:29:af:2a:f8:7f:c1:12:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:16 2022 GMT
            Not After : Oct 21 04:33:16 2023 GMT
        Subject: CN=A38EE08ACAAD129F64681B9EA4784220E2323004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:10:4e:76:ec:36:a0:f0:69:9a:e5:01:cd:79:
                    85:e5:12:12:82:5f:5a:3d:6a:0a:5e:f3:62:80:9e:
                    f3:76:3c:ca:45:2f:b9:1b:af:11:be:79:71:ae:85:
                    61:fb:ba:5a:74:40:22:bc:7c:fb:49:2f:af:ab:9a:
                    98:bb:19:31:5a:29:d5:02:29:f9:2f:a1:e9:a5:29:
                    cb:a5:d2:be:ad:c6:af:ca:c6:8a:63:c9:a9:46:93:
                    b7:19:c4:84:51:06:61:b8:26:0f:ef:07:8c:c9:37:
                    d6:37:14:b8:3a:34:ca:0b:86:c9:cd:9d:8e:5f:bf:
                    74:96:90:ee:8b:ad:2d:00:05:df:9b:27:5b:fd:50:
                    75:5d:13:9b:8d:58:db:2d:85:0f:d6:ea:9a:5e:ff:
                    89:a5:da:fc:3b:a6:68:1d:14:6b:24:ef:15:0c:b4:
                    cf:09:91:40:91:05:98:22:00:b7:ff:3e:a0:61:6d:
                    8a:55:5e:b0:bc:6c:43:7b:f8:64:fa:29:aa:5b:0e:
                    21:d3:b4:16:6f:7e:bf:70:31:62:1c:8f:00:01:34:
                    30:ac:b8:d4:2e:9e:89:04:e2:b2:51:e8:30:c8:de:
                    6f:bf:bf:e7:01:f0:2f:89:73:13:e1:7a:d1:e6:22:
                    d4:0e:dc:69:2c:34:76:28:0f:d1:7f:d0:9e:c8:26:
                    6a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:8E:E0:8A:CA:AD:12:9F:64:68:1B:9E:A4:78:42:20:E2:32:30:04
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231312e352e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.211.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:99:93:5b:e9:d7:93:01:cd:90:24:4f:7b:37:48:ae:d8:6b:
         92:ce:3f:62:35:a2:67:7d:03:6e:47:2a:db:0b:38:f3:cb:f1:
         30:3d:72:45:9c:c7:b4:0c:3c:62:b2:27:22:27:86:24:43:0e:
         07:52:c4:ab:dc:e5:e6:d4:a6:0e:c8:30:3f:43:8f:3f:6a:ba:
         64:df:44:a3:ab:29:6a:07:c9:54:a4:eb:3b:8f:34:c6:31:7a:
         58:47:09:39:87:82:b0:d0:53:d1:85:35:b0:f4:5a:8f:55:c9:
         ab:fa:a3:a7:ef:ad:cf:81:bd:3f:73:1d:ad:af:37:4d:de:70:
         e9:41:39:00:2a:61:e7:48:df:27:38:73:35:79:fa:ca:2b:88:
         a8:b5:a3:f4:b9:7e:df:17:79:9e:ea:a9:db:41:a1:b1:a4:a3:
         ad:a6:61:8e:c2:98:27:ab:23:26:1a:35:1e:66:ac:08:cf:2a:
         7e:d7:88:93:14:eb:0f:30:39:79:f8:47:93:96:3e:2c:7d:ea:
         ec:4c:db:14:3e:d1:b1:fc:7c:bf:17:5e:87:49:00:90:a5:9d:
         73:b9:22:93:3b:d0:8d:4b:11:c4:cf:5f:ba:4e:aa:42:f9:24:
         87:9c:aa:ec:f2:3c:4e:20:73:72:e6:0a:bb:3b:71:53:dc:e0:
         8c:e2:3a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----