Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234312e3135312e302f32342d3332203d3e203531313637.roa
File:                     3138352e3234312e3135312e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          M8b/6rV+Gudghxq4ayTiKm8nreeuTpEJ7v8TnvatSdg=
Subject key identifier:   69:D9:AA:4A:E5:9B:F8:2C:0D:04:43:9B:0D:7E:6E:1D:10:8F:1E:AF
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       61A348B6CF5649B03922C36B88F66307C98E90C2
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234312e3135312e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:18 +0000
ROA not before:           Sat 22 Oct 2022 04:28:18 +0000
ROA not after:            Sat 21 Oct 2023 04:33:18 +0000
asID:                     51167
IP address blocks:        185.241.151.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a3:48:b6:cf:56:49:b0:39:22:c3:6b:88:f6:63:07:c9:8e:90:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:18 2022 GMT
            Not After : Oct 21 04:33:18 2023 GMT
        Subject: CN=69D9AA4AE59BF82C0D04439B0D7E6E1D108F1EAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:84:f7:93:11:d5:04:6c:df:bb:f9:d5:26:90:
                    41:a8:2f:bd:c3:63:6b:98:0f:36:dd:1f:54:5f:3b:
                    4b:a7:1a:6e:2b:32:d7:fb:c8:e8:a6:59:04:5f:56:
                    2f:1a:e1:a1:07:1a:60:72:3d:c0:01:2e:ab:05:97:
                    4e:2b:99:13:13:e0:fa:01:3d:a8:5a:37:a1:4d:26:
                    24:eb:f4:69:b2:23:06:e4:cc:a0:72:d1:82:c9:f8:
                    6a:7c:07:d7:f1:e3:d6:08:5d:8c:91:0a:19:0c:0c:
                    44:82:12:f9:4d:19:7a:ed:d1:d7:33:f2:df:64:31:
                    a8:8c:6d:e2:6d:ab:a8:d1:01:de:0d:c5:d0:06:b1:
                    b6:c4:55:46:b9:10:f8:8c:68:d7:1b:06:34:60:a3:
                    86:bf:88:7b:18:09:38:2a:bd:a2:4d:b3:78:62:d4:
                    c2:76:87:41:37:cd:30:d2:84:34:63:dd:f0:3a:e0:
                    2e:92:36:fd:d0:10:a8:18:c7:dd:f6:7d:2f:f4:ca:
                    01:3f:f2:c3:50:fc:1b:45:ee:a2:2b:3a:c7:82:5a:
                    3c:ed:2a:3d:5f:b7:3d:a8:16:50:fa:83:2a:6f:7f:
                    7e:e2:fc:65:f4:f5:58:05:b3:09:76:92:f5:be:96:
                    4c:b6:5a:2e:bc:81:da:c6:80:6b:7d:96:6e:47:e3:
                    4e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D9:AA:4A:E5:9B:F8:2C:0D:04:43:9B:0D:7E:6E:1D:10:8F:1E:AF
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234312e3135312e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.241.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d2:a0:d0:26:b4:09:59:fa:bc:a5:b1:72:4f:67:46:39:c3:1b:
         22:61:20:14:a7:c3:20:73:81:fd:e9:0e:e3:02:3f:1f:5a:e0:
         66:f3:50:ef:2f:fb:01:b3:ce:93:6a:24:a1:b8:7e:55:43:d4:
         2c:62:70:d2:ce:04:ce:2d:e0:05:63:04:b5:08:c6:30:5b:f8:
         7c:2a:8c:ef:d3:db:52:13:e1:4f:4b:49:99:e3:97:99:e6:ef:
         c4:e8:3c:50:62:b8:a8:16:07:41:88:0f:fb:47:a3:84:a3:10:
         d7:40:86:c5:1b:b4:c8:cc:6e:11:ea:c1:52:c0:b9:65:57:71:
         3c:03:6b:da:7e:a1:07:06:2b:e6:48:4d:79:c3:b6:d0:2c:7f:
         29:d9:b5:91:d3:b3:6d:ad:4c:f9:70:de:9d:2b:9f:a0:c2:fa:
         69:5a:f2:d1:83:77:1c:33:2c:f1:3f:f1:fd:67:a0:b8:49:03:
         e5:c2:04:e6:a3:46:d3:f8:d7:8e:39:3b:dd:ce:72:12:65:d3:
         77:38:88:7c:b5:38:18:57:f4:65:c6:29:fb:31:3e:a8:88:d8:
         e7:d6:3e:17:56:e4:bf:ec:af:b3:24:1d:ca:d4:54:b0:7f:ba:
         fe:7d:4b:c5:b0:7b:99:4d:fb:9d:da:54:12:b3:e8:f7:f4:2d:
         e3:f0:4d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----