Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3233392e3230382e302f32332d3332203d3e203531313637.roa
File:                     3138352e3233392e3230382e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier:          9xyZluEx5qHh4yMO1WgCK/WAwud98kSPNc+v/yjoQjY=
Subject key identifier:   BA:A0:B7:E1:E8:1E:11:BE:F3:77:93:35:FE:56:09:99:C1:A1:00:14
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       524E16419F73DDCE6F8CF15AE89EFED828EB4347
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3233392e3230382e302f32332d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:14 +0000
ROA not before:           Sat 22 Oct 2022 04:28:14 +0000
ROA not after:            Sat 21 Oct 2023 04:33:14 +0000
asID:                     51167
IP address blocks:        185.239.208.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:4e:16:41:9f:73:dd:ce:6f:8c:f1:5a:e8:9e:fe:d8:28:eb:43:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:14 2022 GMT
            Not After : Oct 21 04:33:14 2023 GMT
        Subject: CN=BAA0B7E1E81E11BEF3779335FE560999C1A10014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2e:7a:40:ac:ed:f3:44:ab:27:9e:e3:a6:ed:
                    9a:a2:09:90:54:c3:3a:30:78:ba:3d:4c:ab:8b:98:
                    86:41:12:54:e3:e9:a3:39:44:76:d1:a7:0d:fe:69:
                    5b:f8:26:a0:df:de:00:82:63:bf:d5:f4:ae:4e:ae:
                    15:16:bc:a4:7a:b5:87:8f:5a:5c:2b:d7:72:49:31:
                    1f:aa:5d:87:85:15:9f:2f:11:02:49:7e:ac:79:9a:
                    03:82:ec:7e:b6:8a:3d:e2:bf:0d:a1:19:a8:e9:28:
                    ca:6a:5e:12:e9:c1:78:69:78:bf:5e:f1:ff:f8:8b:
                    ce:46:c9:27:bc:d3:18:0c:27:0e:c9:9d:6a:71:68:
                    b6:2c:7f:fc:b1:fa:03:84:48:8d:03:53:13:63:13:
                    f6:61:aa:2f:c4:25:75:ff:aa:bc:78:73:c9:f9:46:
                    fa:1b:f3:3b:4e:ae:db:61:fa:e3:9b:14:96:a1:a9:
                    57:06:f7:4e:79:46:eb:ec:a1:5e:ff:05:db:8d:a4:
                    bb:27:9b:ca:dd:df:bc:5c:c6:94:75:59:0e:f0:7f:
                    6c:88:56:2f:77:62:b2:e5:58:c7:f0:a3:cc:d2:c5:
                    3c:67:e4:8f:02:f7:5e:8d:47:2c:f6:9c:6a:7f:cb:
                    49:26:83:3f:68:82:5f:6a:36:0f:80:f6:b8:19:9c:
                    1f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A0:B7:E1:E8:1E:11:BE:F3:77:93:35:FE:56:09:99:C1:A1:00:14
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3233392e3230382e302f32332d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.239.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d7:f7:7d:7b:c1:39:28:40:05:8b:08:1f:1a:eb:9e:52:f2:75:
         38:93:11:81:86:0b:ef:ec:b3:55:0a:1b:0d:ac:fc:91:26:2b:
         0b:d1:ae:58:29:89:0c:56:70:4f:3d:4a:3a:95:be:b9:ca:5e:
         42:33:be:f0:2f:a2:1a:c2:14:84:c0:9b:40:f3:bf:25:26:99:
         c9:28:a7:f3:12:13:ae:7a:b7:36:fe:06:03:33:11:a8:e8:0a:
         9b:aa:11:9d:06:1a:3e:c6:5e:c7:3f:e6:03:f7:4c:10:fd:ec:
         c3:24:35:b7:c9:45:7e:2f:cb:60:60:3e:92:32:67:8a:33:ef:
         46:66:33:1b:f7:fb:16:9f:3e:37:3e:9d:59:71:6c:ad:32:40:
         5e:67:3b:5a:73:6d:e1:cd:17:fc:2b:ec:b5:18:b5:75:27:76:
         c2:6d:0d:c7:5d:24:4b:14:2a:f7:f9:d7:ee:5b:0d:b4:0c:23:
         0e:fc:10:aa:ad:52:d5:53:95:11:6c:1b:ac:50:88:7e:e8:93:
         47:76:51:0c:d6:b7:ba:1f:24:7a:34:97:86:79:c2:b4:77:5c:
         02:5e:55:d1:46:e0:c8:5d:45:cc:8a:d6:6a:d7:02:0c:55:c5:
         13:82:a8:bd:f9:fc:75:99:b7:69:05:02:a1:02:86:4a:bd:a5:
         bd:55:28:7f
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUUk4WQZ9z3c5vjPFa6J7+2CjrQ0cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5OTRlZTkzYmFiZTYwYzEzZTA0NDg3ZmE1Y2QzNGZk
MjNmYzkzZjAeFw0yMjEwMjIwNDI4MTRaFw0yMzEwMjEwNDMzMTRaMDMxMTAvBgNV
BAMTKEJBQTBCN0UxRTgxRTExQkVGMzc3OTMzNUZFNTYwOTk5QzFBMTAwMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxLnpArO3zRKsnnuOm7ZqiCZBU
wzoweLo9TKuLmIZBElTj6aM5RHbRpw3+aVv4JqDf3gCCY7/V9K5OrhUWvKR6tYeP
Wlwr13JJMR+qXYeFFZ8vEQJJfqx5mgOC7H62ij3ivw2hGajpKMpqXhLpwXhpeL9e
8f/4i85GySe80xgMJw7JnWpxaLYsf/yx+gOESI0DUxNjE/Zhqi/EJXX/qrx4c8n5
Rvob8ztOrtth+uObFJahqVcG9055RuvsoV7/BduNpLsnm8rd37xcxpR1WQ7wf2yI
Vi93YrLlWMfwo8zSxTxn5I8C916NRyz2nGp/y0kmgz9ogl9qNg+A9rgZnB+zAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUuqC34egeEb7zd5M1/lYJmcGhABQwHwYDVR0j
BBgwFoAUYZlO6Tur5gwT4ESH+lzTT9I/yT8wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzYvNjE5OTRFRTkzQkFCRTYwQzEzRTA0NDg3RkE1Q0QzNEZE
MjNGQzkzRi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1labE82VHVyNWd3VDRF
U0gtbHpUVDlJX3lUOC5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Ni8zMTM4MzUyZTMyMzMzOTJlMzIzMDM4MmUzMDJmMzIzMzJkMzMzMjIwM2QzZTIw
MzUzMTMxMzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbnv0DANBgkqhkiG9w0BAQsFAAOCAQEA1/d9
e8E5KEAFiwgfGuueUvJ1OJMRgYYL7+yzVQobDaz8kSYrC9GuWCmJDFZwTz1KOpW+
ucpeQjO+8C+iGsIUhMCbQPO/JSaZySin8xITrnq3Nv4GAzMRqOgKm6oRnQYaPsZe
xz/mA/dMEP3swyQ1t8lFfi/LYGA+kjJnijPvRmYzG/f7Fp8+Nz6dWXFsrTJAXmc7
WnNt4c0X/CvstRi1dSd2wm0Nx10kSxQq9/nX7lsNtAwjDvwQqq1S1VOVEWwbrFCI
fuiTR3ZRDNa3uh8kejSXhnnCtHdcAl5V0UbgyF1FzIrWatcCDFXFE4Kovfn8dZm3
aQUCoQKGSr2lvVUofw==
-----END CERTIFICATE-----