Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232322e3234302e302f32342d3234203d3e203631333137.roa
File:                     3138352e3232322e3234302e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          czYy+8C8LQn7XmTJwUqqhzNidNUwTihW7HLOCqUjidw=
Subject key identifier:   62:42:D7:B9:3D:38:56:64:83:D0:7B:4F:B0:89:1C:93:4E:10:3B:AA
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       4FE746D6C23E79AB5EDF940CAEC321A0CD5C61D5
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232322e3234302e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 29 Oct 2021 16:00:00 +0000
ROA not before:           Fri 29 Oct 2021 15:55:00 +0000
ROA not after:            Fri 28 Oct 2022 16:00:00 +0000
asID:                     61317
IP address blocks:        185.222.240.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:e7:46:d6:c2:3e:79:ab:5e:df:94:0c:ae:c3:21:a0:cd:5c:61:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 29 15:55:00 2021 GMT
            Not After : Oct 28 16:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:21:b4:11:97:d7:a4:73:4c:e9:c2:24:b0:08:
                    84:54:40:30:d8:8c:49:b5:24:fe:1a:4c:bb:a3:41:
                    1f:2b:d6:c7:19:c2:2e:f2:94:61:39:57:8e:68:03:
                    a3:82:95:68:21:45:15:2c:53:26:4e:1c:42:74:73:
                    0e:8f:54:15:63:51:6c:e6:e6:99:74:15:58:19:50:
                    67:3a:0c:22:a5:c1:53:9c:56:57:c6:8e:e2:27:2d:
                    23:4e:c9:3e:1d:2f:db:aa:c3:ef:af:8b:ad:7e:2c:
                    d6:0f:70:c0:ad:1c:14:5f:8f:8f:e9:5d:58:e6:3b:
                    d6:c7:60:0d:3f:c9:01:59:86:4d:51:56:ea:f9:72:
                    d0:96:af:99:de:3b:ae:c7:56:67:1f:05:a2:47:4b:
                    79:8a:8d:c2:0e:26:e5:a1:83:c5:a6:05:05:8d:9e:
                    92:fb:26:0f:92:4c:ea:fd:da:64:85:2e:ae:2a:18:
                    85:85:53:4b:40:f2:fa:7f:76:d9:3d:24:81:68:38:
                    21:ec:5b:4b:8f:8a:25:29:0e:0d:c1:8e:4b:8d:0e:
                    de:38:4a:e1:91:fb:6c:ee:7e:16:1c:e4:9e:3a:09:
                    af:b6:c4:d6:a5:f8:3e:4e:cc:e9:1c:51:dc:43:1e:
                    1f:ce:65:38:21:e2:19:4d:53:08:81:dc:b8:40:24:
                    83:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:42:D7:B9:3D:38:56:64:83:D0:7B:4F:B0:89:1C:93:4E:10:3B:AA
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232322e3234302e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.222.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:f0:6c:3b:55:2b:55:83:33:1e:f3:58:33:d2:48:8b:81:f6:
         07:3d:1c:2b:14:39:22:54:48:a6:65:a3:75:e0:8e:83:01:da:
         7b:7e:6d:a9:bc:b1:f8:15:f7:50:55:16:9b:ff:7c:29:21:db:
         d5:3e:f5:12:69:f3:d6:62:df:db:f9:36:f5:25:c6:b9:ef:81:
         ac:12:57:aa:a1:ae:d1:77:b0:d2:96:32:60:6c:42:d3:1e:9f:
         ce:f6:1d:ae:d1:e5:b7:e2:91:9b:af:d7:be:d4:09:71:58:ff:
         38:0f:a3:56:38:71:b3:d0:84:f9:53:a2:9b:6b:3e:17:94:f9:
         7c:a6:a2:63:73:f5:97:10:2c:a2:91:d2:d9:de:48:b6:b0:ed:
         91:1b:05:26:cb:ef:b8:2f:da:15:00:7f:75:b5:09:76:9a:2c:
         21:6e:94:2f:22:70:7d:5f:50:8c:f1:aa:05:23:2a:93:a3:8b:
         5c:27:ca:f3:86:5e:84:a7:f0:67:9b:c2:2d:86:ea:ff:b5:ef:
         05:73:b0:26:34:51:90:dc:98:d4:46:e7:aa:bb:4a:ab:18:e2:
         cd:fc:b1:52:46:b8:c8:03:50:5e:9c:b7:cd:cb:a6:a9:c0:7f:
         e8:b3:ed:16:e1:bb:b9:1f:f2:38:ac:94:ca:fd:08:08:58:0c:
         c2:cb:58:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----