Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231382e3132362e302f32342d3332203d3e203531313637.roa
File:                     3138352e3231382e3132362e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          +r5P2rjhzGsS8dQaVFDLHrkCU7ijpIheHgI8B8K4Lmw=
Subject key identifier:   C6:47:2C:FF:E1:A4:3A:E3:0B:BB:27:7B:88:1D:DF:D6:C5:DB:4B:14
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       1981F5FF779EFAAC6175215098E59D7E65BD9F79
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231382e3132362e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:18 +0000
ROA not before:           Sat 22 Oct 2022 04:28:18 +0000
ROA not after:            Sat 21 Oct 2023 04:33:18 +0000
asID:                     51167
IP address blocks:        185.218.126.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:81:f5:ff:77:9e:fa:ac:61:75:21:50:98:e5:9d:7e:65:bd:9f:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:18 2022 GMT
            Not After : Oct 21 04:33:18 2023 GMT
        Subject: CN=C6472CFFE1A43AE30BBB277B881DDFD6C5DB4B14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:aa:4d:04:0d:ed:e4:3e:3d:d0:7b:21:44:8a:
                    03:5a:fd:2f:cc:a2:fe:b5:15:3c:f0:64:7e:4d:ec:
                    af:23:de:de:ec:61:8b:3e:41:bf:a3:0c:f1:40:00:
                    cc:44:93:0b:f3:18:5d:5d:53:ca:c2:e2:2d:01:86:
                    2f:d2:3a:c3:ba:8d:e5:5b:b5:9e:15:1e:13:76:ec:
                    c2:05:e8:2b:79:2e:3c:02:e4:b7:3a:43:41:e8:82:
                    fb:7d:08:c4:c8:cf:09:a8:08:8d:ed:58:b4:fa:73:
                    5c:31:07:8f:ba:38:35:3e:5a:cb:01:80:88:e7:df:
                    0c:d6:41:b4:96:e8:f0:d3:bb:60:a6:cb:1e:b6:cf:
                    1b:74:eb:d3:c6:35:33:06:20:8f:f9:50:50:56:9d:
                    f0:93:71:af:5c:70:ca:7f:e2:96:4f:71:b6:a4:1b:
                    64:9c:b3:f7:da:9d:31:bd:d8:5a:ca:05:d7:06:b1:
                    6d:20:55:32:98:97:a3:91:d9:87:d7:75:5c:2f:08:
                    f8:f3:a7:eb:01:96:f4:74:18:3d:34:5c:c4:83:8b:
                    71:dc:22:5e:61:43:88:52:a6:0e:4c:03:35:26:bd:
                    68:f8:80:49:48:e9:b1:6e:a3:dc:e0:b7:77:7e:94:
                    f0:f1:50:59:9f:ef:b3:33:c3:ac:95:20:44:bc:9d:
                    79:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:47:2C:FF:E1:A4:3A:E3:0B:BB:27:7B:88:1D:DF:D6:C5:DB:4B:14
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231382e3132362e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.218.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:e0:64:cd:fd:83:b8:e9:77:d6:00:74:8f:67:09:7d:e8:4f:
         c8:1c:bd:84:d7:76:bc:f9:8d:c6:5f:12:9e:98:29:92:53:41:
         97:c0:a3:8c:c9:b1:ac:58:78:a6:51:73:c4:fc:17:e0:b9:1b:
         8c:08:ac:dd:d1:76:2a:38:c6:57:42:f9:b6:6a:5a:9b:dd:fd:
         87:90:3a:9a:4b:c2:78:f2:cd:31:18:da:7c:fd:9d:1e:20:f2:
         61:9e:be:44:2e:2a:3d:e7:61:f4:6b:b6:c3:b6:32:2d:c7:83:
         88:4a:5a:f4:7d:91:2d:4e:2e:4e:9c:70:71:54:18:40:ff:b0:
         55:54:75:4c:87:94:f5:33:49:0a:9b:5c:b9:b8:0e:bc:0d:ce:
         f1:a6:5b:a9:f7:c8:3d:87:c6:ab:21:cf:fd:f7:f6:45:f9:36:
         81:c7:30:a3:bf:30:56:76:1a:4d:57:cc:9d:6b:bf:74:a6:2a:
         39:d1:04:30:d0:2e:59:c0:40:75:f9:52:10:2d:47:9e:14:27:
         71:db:5e:00:8f:3f:de:a5:1a:b1:f5:0f:25:c8:ce:c7:04:bc:
         01:9c:7e:4f:a0:19:e9:d4:5c:2e:3d:a7:87:ac:93:58:eb:f2:
         2f:e2:d7:8e:2d:04:b2:3b:e9:a5:5b:b1:aa:99:fd:07:61:10:
         a5:08:42:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----