Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3233342e36392e302f32342d3332203d3e203531313637.roa
File:                     3138352e3233342e36392e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          khbCeU8Ejgkb9OtkRhpqSa4lCyfBnINehL5sKTBmhcs=
Subject key identifier:   33:FD:DD:7B:8D:5F:CD:17:AD:7E:00:56:9B:CB:40:AA:21:64:69:AD
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       592EB42A1D614C91902A55BE973A0A2308AED33A
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3233342e36392e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:18 +0000
ROA not before:           Sat 22 Oct 2022 04:28:18 +0000
ROA not after:            Sat 21 Oct 2023 04:33:18 +0000
asID:                     51167
IP address blocks:        185.234.69.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:2e:b4:2a:1d:61:4c:91:90:2a:55:be:97:3a:0a:23:08:ae:d3:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:18 2022 GMT
            Not After : Oct 21 04:33:18 2023 GMT
        Subject: CN=33FDDD7B8D5FCD17AD7E00569BCB40AA216469AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:93:20:8a:d7:09:94:72:01:62:41:e5:c2:08:
                    7e:a8:fb:24:ff:0d:95:84:1a:2f:eb:cd:93:83:d4:
                    dd:e9:08:b5:78:92:86:61:f0:ed:22:8a:af:17:38:
                    10:05:41:dc:e3:0a:9b:40:c5:1c:4a:12:e1:e1:96:
                    ee:e1:06:00:5e:c4:4c:c7:26:f1:7a:d3:97:ca:c6:
                    48:7d:3c:a8:d1:7a:e0:99:27:9c:f5:1f:56:8d:96:
                    dc:20:7e:d5:85:5f:99:9c:5b:4a:7e:cc:cb:ed:54:
                    1a:c6:82:af:16:fb:95:70:60:a5:47:62:7f:71:a6:
                    04:43:2b:ad:d7:69:43:27:6e:42:a1:ab:dc:eb:4f:
                    9c:a1:04:96:09:09:57:3d:39:53:00:f9:c0:56:f4:
                    b3:69:e9:41:0a:32:c6:1e:21:d6:ee:08:5f:46:87:
                    fc:29:05:3b:01:43:fc:77:a4:2b:51:7c:da:3b:36:
                    39:f8:10:5e:c7:35:64:b3:75:34:3c:58:a4:98:3d:
                    dc:99:ec:16:d8:ad:02:22:ac:5e:aa:65:9c:92:f1:
                    18:15:88:ed:ac:77:36:ef:d8:6c:9f:a1:07:5e:e8:
                    f7:95:be:6d:94:64:e9:20:c4:1c:53:e0:70:2d:ef:
                    10:bf:07:4e:fe:96:b0:d1:d0:e7:86:7a:54:db:d2:
                    9a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:FD:DD:7B:8D:5F:CD:17:AD:7E:00:56:9B:CB:40:AA:21:64:69:AD
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3233342e36392e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.234.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:43:f9:15:a7:73:e5:32:f5:7d:ae:27:b4:a6:cf:20:58:10:
         02:cd:8a:07:59:f8:dd:65:37:d7:60:7f:e6:c3:5d:9c:f7:c1:
         e7:cb:57:0c:4d:f5:fb:49:fa:cc:0b:ce:72:81:f5:a8:58:6f:
         48:36:62:0c:e2:23:fd:67:ea:30:04:78:f2:40:78:95:5c:1e:
         91:0f:7f:03:f8:2a:81:61:51:32:ec:87:a8:a1:3e:58:82:d2:
         9a:c8:99:54:5f:32:f0:cb:8a:e1:e4:5d:28:24:cd:02:37:35:
         5c:ef:16:82:4a:e0:07:ec:8a:2c:cd:0b:37:e0:e7:89:ec:7a:
         26:82:53:98:d4:5b:71:e6:8c:f2:a1:44:75:f8:60:38:41:f2:
         5d:f2:48:9c:c9:93:b0:0d:9d:82:4f:e9:7b:a6:8e:a5:13:27:
         60:48:bf:09:97:b3:ad:b5:75:1e:a3:27:04:fd:49:b0:1f:0c:
         f7:27:f0:55:22:f9:f8:ba:a9:a1:99:4d:5a:fb:87:2b:85:7f:
         e6:65:92:c8:e6:fa:3c:98:c3:66:e2:03:c7:36:8a:6c:8e:72:
         27:61:4a:de:13:09:6e:ce:90:b6:c4:5d:97:1c:7e:24:a6:3d:
         15:64:1c:52:56:ec:aa:c2:64:d7:20:40:2e:b7:9f:27:d1:68:
         30:6c:83:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----