Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231382e3132372e302f32342d3332203d3e20313336373837.roa
File:                     3138352e3231382e3132372e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          zdmC4LarR2k4br2Hi4wimzwYFjhAMRi8zvYeENR9Cwo=
Subject key identifier:   41:2F:C6:86:D7:4B:EB:4E:74:CD:94:8A:18:BE:97:FC:1C:2E:1A:FE
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       7BFB3054751CAA449F043458A52CE47D2D3FDC28
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231382e3132372e302f32342d3332203d3e20313336373837.roa
Signing time:             Wed 28 Dec 2022 09:39:04 +0000
ROA not before:           Wed 28 Dec 2022 09:34:04 +0000
ROA not after:            Wed 27 Dec 2023 09:39:04 +0000
asID:                     136787
IP address blocks:        185.218.127.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:fb:30:54:75:1c:aa:44:9f:04:34:58:a5:2c:e4:7d:2d:3f:dc:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Dec 28 09:34:04 2022 GMT
            Not After : Dec 27 09:39:04 2023 GMT
        Subject: CN=412FC686D74BEB4E74CD948A18BE97FC1C2E1AFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:33:31:6c:90:90:16:35:e0:a7:0f:64:fa:46:
                    c6:90:fe:c6:28:0e:0d:63:64:6e:ec:36:b0:45:2c:
                    3a:47:97:e2:75:93:7a:60:60:a6:07:8d:2b:5c:00:
                    77:37:d0:41:f1:ae:14:27:8a:2f:21:2b:71:1f:07:
                    6f:3f:9a:f6:b4:6b:b4:e7:2b:90:f8:2c:30:b3:dc:
                    b9:af:5c:03:10:a0:e8:b0:c1:19:83:d7:0d:97:01:
                    c1:ec:8f:21:e8:9a:91:ee:02:d4:70:e9:df:c3:a2:
                    c3:2f:02:d9:9f:1f:6e:f5:92:c2:1d:12:c2:cc:32:
                    f1:f9:76:a6:1d:e7:93:b2:ac:94:79:07:1f:1d:5c:
                    ed:0c:06:fd:b3:a9:19:45:1c:da:c1:f6:b4:ab:8e:
                    e8:cc:0f:5b:65:25:46:6a:2c:21:6c:49:1a:3b:4e:
                    0a:78:4a:94:00:9b:dc:80:73:06:80:45:5b:b3:a9:
                    e8:d8:f6:46:e8:be:cf:cd:ec:19:67:13:76:9f:12:
                    43:31:59:78:b9:b5:0e:48:a4:b4:ae:cc:9c:a2:ff:
                    fc:03:3d:0b:f3:e0:b8:19:80:23:ef:ed:45:ac:16:
                    f1:d7:fd:14:97:aa:e8:17:30:71:52:a8:67:1f:6b:
                    6e:83:6a:eb:3a:db:b1:48:84:ed:e5:49:2f:72:a7:
                    ec:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:2F:C6:86:D7:4B:EB:4E:74:CD:94:8A:18:BE:97:FC:1C:2E:1A:FE
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3231382e3132372e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.218.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:e3:30:73:18:3a:42:49:aa:c0:41:7b:6a:ad:08:1a:ac:59:
         9b:55:ea:d1:3d:a1:d3:cb:45:1f:b9:ec:cb:2a:a5:67:29:0d:
         37:db:21:5f:f3:fd:8d:26:0d:81:f1:1b:ff:89:ad:ad:30:69:
         f1:18:43:5b:c9:23:30:6b:d7:1a:1e:e0:33:53:a3:c0:04:5d:
         96:9f:ac:82:18:b7:75:a4:dd:13:d3:9c:c4:10:f5:21:63:94:
         f2:8d:95:00:e0:a5:7a:2c:8b:6d:54:66:74:65:ce:bd:5d:73:
         7c:d9:e9:6b:24:22:b5:53:97:7d:bc:6b:a6:73:86:2f:16:6e:
         7d:a0:a0:a4:7c:f2:82:c2:8c:9d:8e:11:83:66:ad:ff:7e:93:
         a4:d6:f5:c3:9c:7a:e7:7a:01:cf:df:59:4d:6d:a5:cb:25:50:
         c0:f4:9d:e7:b0:5e:cd:df:2d:82:89:b1:62:9e:b2:d6:f3:55:
         ef:80:89:86:06:22:da:f0:39:1a:a6:ec:d1:c0:23:56:53:d1:
         af:65:7d:e6:f3:5a:13:13:65:26:00:38:32:60:3c:19:8c:a7:
         fd:0f:82:c1:52:1e:a9:6e:5f:b9:2e:9d:80:6d:37:49:85:03:
         7f:a7:c9:63:0f:73:58:4d:8b:2b:b1:f2:a7:45:d9:e3:f6:cb:
         6e:a3:ff:60
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUe/swVHUcqkSfBDRYpSzkfS0/3CgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5OTRlZTkzYmFiZTYwYzEzZTA0NDg3ZmE1Y2QzNGZk
MjNmYzkzZjAeFw0yMjEyMjgwOTM0MDRaFw0yMzEyMjcwOTM5MDRaMDMxMTAvBgNV
BAMTKDQxMkZDNjg2RDc0QkVCNEU3NENEOTQ4QTE4QkU5N0ZDMUMyRTFBRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0MzFskJAWNeCnD2T6RsaQ/sYo
Dg1jZG7sNrBFLDpHl+J1k3pgYKYHjStcAHc30EHxrhQnii8hK3EfB28/mva0a7Tn
K5D4LDCz3LmvXAMQoOiwwRmD1w2XAcHsjyHompHuAtRw6d/DosMvAtmfH271ksId
EsLMMvH5dqYd55OyrJR5Bx8dXO0MBv2zqRlFHNrB9rSrjujMD1tlJUZqLCFsSRo7
Tgp4SpQAm9yAcwaARVuzqejY9kbovs/N7BlnE3afEkMxWXi5tQ5IpLSuzJyi//wD
PQvz4LgZgCPv7UWsFvHX/RSXqugXMHFSqGcfa26Daus627FIhO3lSS9yp+yNAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUQS/GhtdL6050zZSKGL6X/BwuGv4wHwYDVR0j
BBgwFoAUYZlO6Tur5gwT4ESH+lzTT9I/yT8wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzYvNjE5OTRFRTkzQkFCRTYwQzEzRTA0NDg3RkE1Q0QzNEZE
MjNGQzkzRi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1labE82VHVyNWd3VDRF
U0gtbHpUVDlJX3lUOC5jZXIwgY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuG
cHJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0
LzYvMzEzODM1MmUzMjMxMzgyZTMxMzIzNzJlMzAyZjMyMzQyZDMzMzIyMDNkM2Uy
MDMxMzMzNjM3MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnafzANBgkqhkiG9w0BAQsFAAOCAQEA
TOMwcxg6QkmqwEF7aq0IGqxZm1Xq0T2h08tFH7nsyyqlZykNN9shX/P9jSYNgfEb
/4mtrTBp8RhDW8kjMGvXGh7gM1OjwARdlp+sghi3daTdE9OcxBD1IWOU8o2VAOCl
eiyLbVRmdGXOvV1zfNnpayQitVOXfbxrpnOGLxZufaCgpHzygsKMnY4Rg2at/36T
pNb1w5x653oBz99ZTW2lyyVQwPSd57Bezd8tgomxYp6y1vNV74CJhgYi2vA5Gqbs
0cAjVlPRr2V95vNaExNlJgA4MmA8GYyn/Q+CwVIeqW5fuS6dgG03SYUDf6fJYw9z
WE2LK7Hyp0XZ4/bLbqP/YA==
-----END CERTIFICATE-----