Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232352e3233342e302f32342d3332203d3e20313336373837.roa
File:                     3138352e3232352e3233342e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          4PQHKXz3JiROZ+Ctb3vedjJqJxY2oQrkx8nCMnyfeT8=
Subject key identifier:   07:C1:7D:DD:37:32:32:60:11:29:0F:19:B5:24:B1:F0:18:70:EB:7A
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       2D4072D3D5755779C221A3E0A869F52A074A2701
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232352e3233342e302f32342d3332203d3e20313336373837.roa
Signing time:             Wed 28 Dec 2022 09:29:46 +0000
ROA not before:           Wed 28 Dec 2022 09:24:46 +0000
ROA not after:            Wed 27 Dec 2023 09:29:46 +0000
asID:                     136787
IP address blocks:        185.225.234.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:40:72:d3:d5:75:57:79:c2:21:a3:e0:a8:69:f5:2a:07:4a:27:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Dec 28 09:24:46 2022 GMT
            Not After : Dec 27 09:29:46 2023 GMT
        Subject: CN=07C17DDD3732326011290F19B524B1F01870EB7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c3:4a:a1:1e:74:f5:e8:9d:62:70:40:95:42:
                    1b:79:83:41:41:83:b0:db:3c:98:46:b7:f5:31:65:
                    a5:f5:b6:c5:53:52:ac:39:bc:36:92:26:6c:69:09:
                    2f:e9:25:96:e6:0b:04:1b:54:69:9e:09:3c:52:46:
                    a2:2b:4a:4c:ea:8a:dd:06:1b:8d:83:cb:b3:a3:f9:
                    1c:db:cd:7f:2e:d6:79:ba:3f:ba:de:68:6a:90:20:
                    a2:fb:60:51:a7:60:3e:72:68:29:36:0f:8f:85:fa:
                    30:a4:cc:3e:c4:35:52:c8:ad:29:8a:fc:0b:90:2f:
                    85:e0:59:d6:dc:9f:ba:b5:59:1e:09:b3:6f:5f:6b:
                    5f:37:96:4e:53:da:3d:7f:1f:19:0f:d4:0e:5b:7d:
                    a1:f6:ec:04:17:1d:3f:db:2f:f5:9f:21:0f:bb:c7:
                    ed:ad:9f:70:78:0b:ee:ea:b2:43:2c:c0:63:65:58:
                    10:5f:94:31:eb:53:17:83:64:2f:3a:ff:26:89:f4:
                    5c:97:eb:9d:3d:08:08:c8:e4:ee:69:e9:10:cc:05:
                    a9:f0:0a:a1:94:65:99:0e:09:d8:21:a3:30:6e:4c:
                    fe:20:be:58:6a:5b:3e:1e:da:cf:7d:63:4b:43:27:
                    06:00:3b:c7:a7:65:8a:6e:55:fe:7f:3a:0a:8b:65:
                    e0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C1:7D:DD:37:32:32:60:11:29:0F:19:B5:24:B1:F0:18:70:EB:7A
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232352e3233342e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.225.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:28:e2:8f:7b:f4:6f:6e:69:c2:88:69:a1:dc:1c:1b:49:4d:
         81:2e:9e:82:18:0f:4e:37:a2:63:81:1e:1e:d5:77:4c:7b:56:
         0a:19:05:27:7e:12:25:7b:46:44:ae:2a:56:c5:ef:62:a5:b9:
         b2:3e:3b:d8:47:1c:25:3b:56:77:8c:8d:d4:7e:23:23:d2:c8:
         ce:f3:57:0b:b6:3b:e7:cc:62:73:45:c3:70:ca:07:d4:10:e1:
         d4:ad:4d:f1:4c:80:ee:55:e9:88:13:06:dd:3c:75:2e:18:75:
         b7:38:5d:6f:3c:2a:b0:86:01:38:aa:fb:a0:ad:17:7a:dc:e3:
         71:1b:5e:cc:91:39:5e:7d:11:8d:9f:37:49:3e:ca:03:13:b8:
         22:5a:76:3f:8a:ae:0e:e4:e5:96:a9:71:6f:4b:4b:ef:8e:92:
         89:c7:07:6b:ea:42:80:fb:99:17:51:67:e6:96:8e:3b:01:78:
         4b:db:5f:da:90:95:09:da:5b:d4:bc:98:ae:4d:53:48:ae:55:
         bf:bf:12:05:77:57:46:6a:35:6e:60:6e:d6:d4:f6:fe:51:63:
         82:b4:9d:be:dd:ef:ca:c0:5a:63:9d:2b:e7:2b:7d:00:7b:c2:
         10:f2:4e:17:71:ad:d1:d6:a7:83:58:0f:11:30:89:20:ed:e5:
         d2:18:64:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----