Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3235302e33362e302f32332d3332203d3e203531313637.roa
File:                     3138352e3235302e33362e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier:          N7tdPZdDB2eDpIJeYRhqvg0JwYkWxR5JcP9FxVSYeS8=
Subject key identifier:   37:93:77:57:F5:5F:54:8A:6B:0A:6E:AF:E1:80:2B:62:5D:DC:7A:36
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       5E9D5A8A670254719812330BDD64A5A57C5040
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3235302e33362e302f32332d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:14 +0000
ROA not before:           Sat 22 Oct 2022 04:28:14 +0000
ROA not after:            Sat 21 Oct 2023 04:33:14 +0000
asID:                     51167
IP address blocks:        185.250.36.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:9d:5a:8a:67:02:54:71:98:12:33:0b:dd:64:a5:a5:7c:50:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:14 2022 GMT
            Not After : Oct 21 04:33:14 2023 GMT
        Subject: CN=37937757F55F548A6B0A6EAFE1802B625DDC7A36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:94:a5:c6:13:b5:01:29:3d:ff:32:36:a5:b3:
                    02:df:02:d7:13:bd:86:2b:d0:92:66:00:37:fc:49:
                    0a:51:bf:29:58:49:37:89:40:0f:9d:d0:b8:d2:a6:
                    9a:87:38:9c:57:e6:34:5b:f1:c8:64:e7:d7:37:20:
                    6f:c5:15:db:1a:e9:27:2f:bd:5c:27:bc:9f:b0:6d:
                    d0:87:d7:79:70:6f:4e:e8:03:df:00:3b:b0:0b:58:
                    aa:81:ef:4f:5e:05:a3:0d:80:87:e4:95:34:90:9b:
                    91:6c:6d:2f:c2:83:95:51:69:eb:5c:51:a9:94:80:
                    64:9c:da:a2:9c:ba:08:78:0b:2a:c0:26:8b:66:26:
                    50:ee:53:f1:97:bf:a2:ff:51:c5:cc:14:66:9f:88:
                    9b:a1:6b:8f:25:2f:6c:f0:94:79:41:a0:49:ec:0b:
                    5f:20:76:57:1a:53:b5:59:9e:bf:35:6a:fe:ef:4f:
                    8b:c7:f5:5c:f6:db:69:4c:5d:d7:52:2f:3b:9d:f3:
                    d3:6e:2d:fd:e2:ff:f8:a3:02:fa:0c:a7:b5:1b:09:
                    48:91:b4:94:12:69:ae:5e:85:18:8f:b3:14:3e:8b:
                    cb:a5:0d:ec:72:de:f2:9f:72:c3:a8:48:24:a8:26:
                    f5:46:25:c1:2e:43:a3:93:0b:f1:4a:c8:0e:c9:0e:
                    99:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:93:77:57:F5:5F:54:8A:6B:0A:6E:AF:E1:80:2B:62:5D:DC:7A:36
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3235302e33362e302f32332d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.250.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:5b:e8:c9:bc:39:ad:62:06:dd:19:83:ab:39:0e:96:2e:aa:
         31:a8:f9:3f:65:d8:0b:9e:db:fe:fc:c0:29:20:8f:66:53:2a:
         4c:17:a2:66:3d:9b:6d:00:d0:0a:3d:29:c2:9f:79:51:25:db:
         09:60:60:1a:71:86:b7:13:98:67:dc:f6:33:a0:3a:0e:10:16:
         53:64:03:d8:e3:b8:7b:99:2f:b9:1b:d8:73:70:46:a3:0a:45:
         03:d0:1d:ee:10:fc:7b:91:95:05:98:e6:c2:31:7a:d5:10:36:
         7d:27:f5:b6:ef:42:7b:98:92:8b:72:30:f0:47:f4:51:75:8b:
         4a:b7:87:0c:ec:38:4b:f8:1a:e1:b7:73:56:4f:f4:83:e6:0e:
         a6:78:1d:56:bb:f0:f6:1c:f8:09:02:0d:0b:8e:b1:ca:04:d4:
         f9:de:ef:cd:96:c7:70:58:29:f5:b6:02:73:bc:bd:39:45:1b:
         78:41:6b:e6:31:bd:27:95:9e:8e:45:d9:b1:48:cc:18:9c:77:
         f6:9f:91:f4:e7:e3:4a:2e:a6:12:1e:3f:4b:34:a9:05:7a:c4:
         0e:87:ee:7d:51:60:72:5c:84:28:59:99:38:7f:0b:b3:4a:f6:
         24:68:77:52:ff:cd:ce:57:86:ca:88:01:f1:93:ef:41:4e:54:
         4e:10:d6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----