Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231382e3132342e302f32332d3332203d3e203531313637.roa
File:                     3138352e3231382e3132342e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier:          mGSzwTzTfGo3RvckvHzPqHTRAr8tgI4t4wYl2d21z50=
Subject key identifier:   74:7C:57:33:A9:0F:7E:77:F3:58:13:C9:F1:EF:79:00:8F:FE:38:77
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       5C981A527FAED574877594CE8C6C43B02F24F5B2
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231382e3132342e302f32332d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:20 +0000
ROA not before:           Sat 22 Oct 2022 04:28:20 +0000
ROA not after:            Sat 21 Oct 2023 04:33:20 +0000
asID:                     51167
IP address blocks:        185.218.124.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:98:1a:52:7f:ae:d5:74:87:75:94:ce:8c:6c:43:b0:2f:24:f5:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:20 2022 GMT
            Not After : Oct 21 04:33:20 2023 GMT
        Subject: CN=747C5733A90F7E77F35813C9F1EF79008FFE3877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:54:67:2c:f4:70:3c:81:bb:f5:20:70:d1:8e:
                    2f:16:31:f5:38:20:32:26:c6:7e:62:ad:1f:fb:00:
                    e9:6c:a2:c7:b3:ea:e9:19:a4:d1:c9:11:6d:ac:f4:
                    23:dd:ef:91:48:05:f2:b4:f4:8f:2f:74:cb:ef:1b:
                    69:96:dc:e4:ad:72:98:f2:51:b1:2f:7f:29:4c:84:
                    20:32:f8:48:31:24:76:bf:b3:ca:83:36:f3:42:84:
                    59:74:3e:a0:46:24:3a:f7:a2:a9:5d:cb:97:2d:6d:
                    a5:74:64:c7:f9:4e:3a:f3:d7:fe:26:03:32:cc:05:
                    8f:55:54:4d:63:dd:5c:e7:02:17:fb:ad:3f:70:a9:
                    f9:57:22:e9:a1:5d:9f:5f:af:94:85:70:6e:c0:1d:
                    b7:6b:ff:75:6c:cd:b8:2d:62:1c:42:d8:9f:42:84:
                    49:5b:fb:9c:12:10:3f:3f:85:68:4f:3d:c1:d9:ae:
                    06:7f:5e:7d:b2:31:04:06:9a:7c:91:48:75:76:11:
                    d8:15:61:01:04:94:54:6d:90:3e:b2:4f:57:41:5f:
                    0d:9b:1d:f6:37:1b:b2:2b:59:eb:1e:1b:6d:4a:f0:
                    5f:14:c1:1c:b2:91:82:10:9c:2e:ab:c7:34:6e:5a:
                    99:c4:27:3e:ed:05:93:b8:be:00:19:27:a6:1a:87:
                    1a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:7C:57:33:A9:0F:7E:77:F3:58:13:C9:F1:EF:79:00:8F:FE:38:77
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231382e3132342e302f32332d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.218.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:ef:9c:97:80:ef:3e:8d:1d:e7:f8:a5:0c:e0:c5:e0:b8:46:
         f4:23:f6:0a:bf:41:58:86:a2:07:68:58:3c:6d:d0:8e:15:0b:
         ba:14:77:68:e0:2c:b3:88:c6:8c:ad:61:81:be:47:8a:f1:e1:
         30:4f:dd:c6:c0:13:cf:6c:d5:7a:69:44:20:28:19:63:e0:dc:
         e5:cf:c0:67:dd:26:29:b1:12:49:1d:da:a3:d1:53:7f:14:c3:
         75:41:38:54:4b:fc:e9:6e:c5:24:19:16:35:28:f9:8e:50:3e:
         ba:f6:04:d7:90:c0:92:88:c1:47:a8:c1:12:76:7c:0b:ba:d1:
         c5:05:ed:58:51:91:6d:00:de:ed:c7:ba:9f:06:0b:c6:c0:82:
         a1:0d:a0:27:26:0b:18:93:53:33:4b:45:c3:2a:68:68:44:a6:
         d4:7d:52:38:c7:71:ee:47:6c:b5:7e:94:8e:2a:77:97:74:9a:
         95:fb:3f:d7:48:76:6d:b3:9b:17:2a:eb:53:df:9a:2a:12:21:
         b3:b3:5d:39:ec:35:29:83:b0:33:98:12:19:d0:6f:59:f3:35:
         a0:a0:bf:16:15:f5:14:ea:59:6e:73:16:8c:ef:4d:05:1e:af:
         68:b4:de:8d:03:05:18:75:31:12:07:38:15:e9:d7:f3:ff:c5:
         1f:f1:08:82
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUXJgaUn+u1XSHdZTOjGxDsC8k9bIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5OTRlZTkzYmFiZTYwYzEzZTA0NDg3ZmE1Y2QzNGZk
MjNmYzkzZjAeFw0yMjEwMjIwNDI4MjBaFw0yMzEwMjEwNDMzMjBaMDMxMTAvBgNV
BAMTKDc0N0M1NzMzQTkwRjdFNzdGMzU4MTNDOUYxRUY3OTAwOEZGRTM4NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyVGcs9HA8gbv1IHDRji8WMfU4
IDImxn5irR/7AOlsosez6ukZpNHJEW2s9CPd75FIBfK09I8vdMvvG2mW3OStcpjy
UbEvfylMhCAy+EgxJHa/s8qDNvNChFl0PqBGJDr3oqldy5ctbaV0ZMf5Tjrz1/4m
AzLMBY9VVE1j3VznAhf7rT9wqflXIumhXZ9fr5SFcG7AHbdr/3VszbgtYhxC2J9C
hElb+5wSED8/hWhPPcHZrgZ/Xn2yMQQGmnyRSHV2EdgVYQEElFRtkD6yT1dBXw2b
HfY3G7IrWeseG21K8F8UwRyykYIQnC6rxzRuWpnEJz7tBZO4vgAZJ6YahxrtAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUdHxXM6kPfnfzWBPJ8e95AI/+OHcwHwYDVR0j
BBgwFoAUYZlO6Tur5gwT4ESH+lzTT9I/yT8wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzYvNjE5OTRFRTkzQkFCRTYwQzEzRTA0NDg3RkE1Q0QzNEZE
MjNGQzkzRi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1labE82VHVyNWd3VDRF
U0gtbHpUVDlJX3lUOC5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Ni8zMTM4MzUyZTMyMzEzODJlMzEzMjM0MmUzMDJmMzIzMzJkMzMzMjIwM2QzZTIw
MzUzMTMxMzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbnafDANBgkqhkiG9w0BAQsFAAOCAQEASu+c
l4DvPo0d5/ilDODF4LhG9CP2Cr9BWIaiB2hYPG3QjhULuhR3aOAss4jGjK1hgb5H
ivHhME/dxsATz2zVemlEICgZY+Dc5c/AZ90mKbESSR3ao9FTfxTDdUE4VEv86W7F
JBkWNSj5jlA+uvYE15DAkojBR6jBEnZ8C7rRxQXtWFGRbQDe7ce6nwYLxsCCoQ2g
JyYLGJNTM0tFwypoaESm1H1SOMdx7kdstX6Ujip3l3Salfs/10h2bbObFyrrU9+a
KhIhs7NdOew1KYOwM5gSGdBvWfM1oKC/FhX1FOpZbnMWjO9NBR6vaLTejQMFGHUx
Egc4FenX8//FH/EIgg==
-----END CERTIFICATE-----