Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3233372e3235322e302f32332d3332203d3e203531313637.roa
File:                     3138352e3233372e3235322e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier:          RQOUdoZ458Im+eWoM4aWI60DY52VZ7lONpuGYqIEPfI=
Subject key identifier:   81:CF:04:DD:D8:7E:F5:7B:6E:DE:03:CE:41:FD:04:0A:32:FB:C3:6B
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       11EB70941368B5B0C79B8F101DCB51FCECDD179C
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3233372e3235322e302f32332d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:19 +0000
ROA not before:           Sat 22 Oct 2022 04:28:19 +0000
ROA not after:            Sat 21 Oct 2023 04:33:19 +0000
asID:                     51167
IP address blocks:        185.237.252.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:eb:70:94:13:68:b5:b0:c7:9b:8f:10:1d:cb:51:fc:ec:dd:17:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:19 2022 GMT
            Not After : Oct 21 04:33:19 2023 GMT
        Subject: CN=81CF04DDD87EF57B6EDE03CE41FD040A32FBC36B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e5:30:f7:ce:47:f3:83:41:50:4f:34:09:e1:
                    2f:4b:d5:7f:41:c6:f8:8e:fc:02:a5:59:e4:d3:d2:
                    75:6c:e9:a7:d7:f3:1e:8a:c1:e2:bb:7f:c6:e9:6f:
                    46:53:ed:0a:c2:f0:da:59:6e:5b:db:51:ad:04:c8:
                    e8:b5:64:fa:71:c5:42:08:fc:ec:da:2e:56:df:fb:
                    1e:c4:a2:e5:b0:fc:56:bd:58:6f:cb:e3:71:fc:9f:
                    87:93:91:e0:be:86:0a:b9:8a:05:87:99:35:e5:d0:
                    80:fb:c3:e3:42:ec:18:3e:0e:96:b1:1b:50:75:c7:
                    14:be:c4:e6:09:ff:b0:44:1d:80:89:c4:36:5f:f8:
                    79:4f:cf:ac:b0:5c:f3:34:24:92:98:b3:27:60:c0:
                    11:48:c6:1f:aa:63:7e:93:89:8d:0f:0a:25:44:57:
                    36:49:fe:a7:fe:db:a5:6f:05:ca:d8:51:c2:7d:3f:
                    13:b8:2c:0f:f0:34:0a:64:11:51:d2:70:01:28:0d:
                    0c:4f:ab:45:f1:71:a1:85:65:06:b9:2b:8f:92:05:
                    06:74:b3:dd:b1:81:62:53:70:16:a2:ea:94:24:ce:
                    92:eb:d8:50:16:29:b5:38:d8:ac:91:a8:81:42:49:
                    70:8e:69:96:91:bf:39:a2:bc:b4:78:78:c7:70:fa:
                    89:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:CF:04:DD:D8:7E:F5:7B:6E:DE:03:CE:41:FD:04:0A:32:FB:C3:6B
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3233372e3235322e302f32332d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.237.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:d7:3d:09:ec:b3:1b:2f:b5:cb:1d:1d:8a:ce:bf:6b:77:2e:
         6a:2c:28:35:a8:a8:ac:2f:9d:dd:18:5f:ff:a7:34:ab:d6:da:
         fc:26:58:2f:30:32:57:d3:30:05:25:60:c1:b6:74:e6:87:9d:
         3b:93:9b:c3:cf:e1:0e:ea:c3:3c:84:23:0c:c5:c3:47:75:9f:
         90:4e:00:12:b4:96:ed:45:c3:9a:f5:95:a7:9f:17:87:bb:fb:
         47:8e:6c:38:40:3a:d4:03:be:80:1b:9e:71:f9:1a:58:4e:70:
         95:66:b0:ed:a7:18:17:5f:5b:06:58:7b:08:1d:17:f9:df:2b:
         cc:f1:09:b4:cd:2f:22:19:c8:c5:a3:32:04:39:8b:ca:cb:d3:
         08:26:09:28:8a:eb:de:cd:e5:cc:44:03:a8:a8:6e:07:6f:19:
         2b:04:93:e0:01:6e:69:93:61:26:30:80:c1:b7:51:6f:fc:d4:
         b6:8a:9f:7f:bd:71:dc:3c:7c:64:8e:73:54:3e:03:f3:97:9a:
         bc:12:05:56:35:d8:f9:d2:35:6d:d7:e2:78:81:32:c5:ba:97:
         3f:00:fb:56:34:79:f6:d7:3f:ed:2a:37:fc:c5:fc:b2:dc:bd:
         e6:9f:71:b0:52:cb:08:af:37:9b:9f:f8:7a:e1:da:8b:08:96:
         0a:e0:da:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----