Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232392e3131392e302f32342d3332203d3e203531313637.roa
File:                     3138352e3232392e3131392e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          SXCDKSWe6HbgyYXuDjf04DK8v8yTmINCDBJHQ6X2Xgo=
Subject key identifier:   27:C0:6D:22:30:AF:3D:0E:C3:7F:58:E8:02:D2:8B:02:22:B9:14:2F
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       18DFDEDC323EF2BDAAD78F57102208EEAE8F7DE9
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232392e3131392e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:11 +0000
ROA not before:           Sat 22 Oct 2022 04:28:11 +0000
ROA not after:            Sat 21 Oct 2023 04:33:11 +0000
asID:                     51167
IP address blocks:        185.229.119.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:df:de:dc:32:3e:f2:bd:aa:d7:8f:57:10:22:08:ee:ae:8f:7d:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:11 2022 GMT
            Not After : Oct 21 04:33:11 2023 GMT
        Subject: CN=27C06D2230AF3D0EC37F58E802D28B0222B9142F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:92:f0:61:e3:55:64:60:4d:bb:6f:63:dc:42:
                    bd:41:03:6a:07:89:cc:02:0c:82:73:ac:9c:f6:d2:
                    3e:f0:51:df:73:1e:7d:72:8f:56:f9:e4:e8:d5:ec:
                    e0:27:df:0b:09:9a:1b:58:85:24:3e:ba:4b:94:88:
                    2c:5b:fc:5c:0c:79:c9:f8:29:b5:f1:70:06:14:30:
                    cd:2e:11:43:35:58:13:bc:e6:c9:fa:1c:b0:c2:4f:
                    3f:46:ab:90:99:96:de:6e:db:37:26:20:6e:81:b0:
                    d9:c3:54:8b:92:b8:30:49:0b:44:2c:25:a7:3c:2f:
                    d2:9b:aa:c4:a6:c1:75:5b:3d:e0:e4:06:40:23:2b:
                    08:02:08:80:c3:65:55:f8:90:a6:42:27:97:fa:2d:
                    53:4b:d5:38:24:f0:69:16:36:51:0d:1a:3f:b3:3a:
                    e3:2b:0b:25:a6:82:aa:f2:9f:37:bf:b3:3c:d5:51:
                    30:d8:c7:8a:a2:f2:d8:64:e6:94:97:6f:ad:7e:a4:
                    06:97:62:b6:88:d4:ed:9e:58:2f:e7:93:13:8c:bf:
                    15:98:6a:9e:30:dd:fc:8c:de:ee:2b:42:a3:d5:6f:
                    3c:4c:0d:e2:5f:0b:48:c9:bb:df:96:32:62:86:d8:
                    0b:7f:20:ef:92:e7:16:7a:82:e2:e4:25:cf:cf:0a:
                    f2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C0:6D:22:30:AF:3D:0E:C3:7F:58:E8:02:D2:8B:02:22:B9:14:2F
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232392e3131392e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.229.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ef:ec:a0:93:21:78:62:fe:35:9d:eb:c7:73:96:51:96:ce:27:
         9a:49:a0:df:ec:b2:b7:0d:a0:6e:41:a3:7d:a3:46:af:a8:ef:
         63:c6:e6:42:47:f7:db:03:42:3a:73:3a:c0:3a:c3:01:5a:0d:
         e0:7d:df:92:c2:4a:d6:f5:d6:60:0e:33:c5:bb:84:42:d3:e2:
         1e:7b:96:e8:a2:ef:cc:b5:a9:6f:a2:01:42:dd:53:14:c3:a4:
         32:a4:f5:8a:a1:6c:56:82:2f:7c:8e:7c:b1:c3:40:ac:d1:cc:
         be:4f:38:6a:80:25:77:2a:8d:f8:5f:ad:b0:e6:be:46:61:c4:
         d3:9f:cc:71:45:85:f9:07:35:c6:63:7c:b6:91:3c:2d:ac:c0:
         73:40:eb:4f:98:ee:30:2d:cd:6c:35:73:90:7e:1d:b1:3f:68:
         e4:5c:22:90:29:1b:51:ae:7a:1c:77:9e:23:21:12:e2:2d:eb:
         3d:5e:e7:e6:a1:83:37:63:c2:a0:6e:4f:61:5c:f4:42:82:d4:
         06:18:ba:73:b6:53:75:ec:3e:79:13:4d:a5:f7:dd:03:66:98:
         ca:d9:22:9f:75:22:04:07:ac:2d:ff:e9:84:2b:68:7e:e5:8d:
         ca:32:ee:88:a4:58:94:45:6b:09:64:98:31:88:52:44:ba:dc:
         df:bc:a0:a2
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUGN/e3DI+8r2q149XECII7q6PfekwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5OTRlZTkzYmFiZTYwYzEzZTA0NDg3ZmE1Y2QzNGZk
MjNmYzkzZjAeFw0yMjEwMjIwNDI4MTFaFw0yMzEwMjEwNDMzMTFaMDMxMTAvBgNV
BAMTKDI3QzA2RDIyMzBBRjNEMEVDMzdGNThFODAyRDI4QjAyMjJCOTE0MkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDskvBh41VkYE27b2PcQr1BA2oH
icwCDIJzrJz20j7wUd9zHn1yj1b55OjV7OAn3wsJmhtYhSQ+ukuUiCxb/FwMecn4
KbXxcAYUMM0uEUM1WBO85sn6HLDCTz9Gq5CZlt5u2zcmIG6BsNnDVIuSuDBJC0Qs
Jac8L9KbqsSmwXVbPeDkBkAjKwgCCIDDZVX4kKZCJ5f6LVNL1Tgk8GkWNlENGj+z
OuMrCyWmgqrynze/szzVUTDYx4qi8thk5pSXb61+pAaXYraI1O2eWC/nkxOMvxWY
ap4w3fyM3u4rQqPVbzxMDeJfC0jJu9+WMmKG2At/IO+S5xZ6guLkJc/PCvJtAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUJ8BtIjCvPQ7Df1joAtKLAiK5FC8wHwYDVR0j
BBgwFoAUYZlO6Tur5gwT4ESH+lzTT9I/yT8wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzYvNjE5OTRFRTkzQkFCRTYwQzEzRTA0NDg3RkE1Q0QzNEZE
MjNGQzkzRi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1labE82VHVyNWd3VDRF
U0gtbHpUVDlJX3lUOC5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Ni8zMTM4MzUyZTMyMzIzOTJlMzEzMTM5MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIw
MzUzMTMxMzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALnldzANBgkqhkiG9w0BAQsFAAOCAQEA7+yg
kyF4Yv41nevHc5ZRls4nmkmg3+yytw2gbkGjfaNGr6jvY8bmQkf32wNCOnM6wDrD
AVoN4H3fksJK1vXWYA4zxbuEQtPiHnuW6KLvzLWpb6IBQt1TFMOkMqT1iqFsVoIv
fI58scNArNHMvk84aoAldyqN+F+tsOa+RmHE05/McUWF+Qc1xmN8tpE8LazAc0Dr
T5juMC3NbDVzkH4dsT9o5FwikCkbUa56HHeeIyES4i3rPV7n5qGDN2PCoG5PYVz0
QoLUBhi6c7ZTdew+eRNNpffdA2aYytkin3UiBAesLf/phCtofuWNyjLuiKRYlEVr
CWSYMYhSRLrc37ygog==
-----END CERTIFICATE-----