Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3139342e33322e3233352e302f32342d3332203d3e20313336373837.roa
File:                     3139342e33322e3233352e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          UTo0aM0y4X9rkoWGztYnSQ8rbOvpFyzzS2AVdxo2M8w=
Subject key identifier:   5E:72:C3:49:26:43:A4:D8:2E:03:E0:60:EF:18:5A:9C:B0:88:66:F3
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       630F05448F8D7C6286197A6B93991D8E61A946FC
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3139342e33322e3233352e302f32342d3332203d3e20313336373837.roa
Signing time:             Wed 28 Dec 2022 09:40:22 +0000
ROA not before:           Wed 28 Dec 2022 09:35:22 +0000
ROA not after:            Wed 27 Dec 2023 09:40:22 +0000
asID:                     136787
IP address blocks:        194.32.235.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:0f:05:44:8f:8d:7c:62:86:19:7a:6b:93:99:1d:8e:61:a9:46:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Dec 28 09:35:22 2022 GMT
            Not After : Dec 27 09:40:22 2023 GMT
        Subject: CN=5E72C3492643A4D82E03E060EF185A9CB08866F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:db:de:98:8c:ba:f1:4c:44:e2:63:87:89:fc:
                    f4:f6:17:b5:be:84:e7:36:75:a8:51:87:79:b8:62:
                    6a:0a:fe:ba:15:9d:70:80:d6:a6:01:73:97:63:05:
                    fb:af:f7:b5:1d:62:c7:ea:3f:73:5b:1b:f4:61:4a:
                    e0:e4:95:21:75:db:ac:e8:15:ba:2b:0a:35:e1:40:
                    9b:6f:59:72:a1:9f:be:0a:10:f6:81:0f:55:bb:c4:
                    9f:c5:dc:4f:78:55:70:5a:00:73:55:5f:75:40:39:
                    48:d6:0c:a1:0e:4e:53:48:53:ed:61:cb:33:69:82:
                    03:52:34:d1:14:9c:03:b4:ce:e0:bf:f7:3d:69:10:
                    48:7f:5d:c9:48:68:43:2f:85:38:f5:c5:fc:fa:43:
                    08:0f:01:dc:40:65:9e:6d:3d:5f:7e:26:bf:04:79:
                    c8:50:22:ea:a5:aa:1d:2f:cc:41:db:92:6c:6c:c4:
                    ab:a0:2d:e5:79:a9:c6:bb:67:cd:1d:7f:b8:79:1e:
                    ae:dd:c0:28:88:f6:c0:f2:18:08:16:83:96:56:03:
                    2e:de:91:43:d1:d5:1e:b2:9c:01:c5:09:01:c1:5f:
                    bb:d0:01:d6:52:58:91:0c:76:7d:70:28:09:ea:ee:
                    2a:9b:57:3c:91:cf:26:07:74:e9:f4:bf:ee:6f:44:
                    3e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:72:C3:49:26:43:A4:D8:2E:03:E0:60:EF:18:5A:9C:B0:88:66:F3
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3139342e33322e3233352e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.32.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:2f:a8:fe:8e:62:1d:b4:b4:d9:e5:43:5c:9e:42:66:ba:91:
         49:de:75:d2:b0:e6:33:76:2e:33:90:f4:92:99:1c:a9:f8:6b:
         8f:75:10:ce:0d:9a:17:bf:89:1c:75:c5:5b:4e:89:2f:43:28:
         6d:90:90:97:21:9f:71:8f:16:d5:82:ab:29:99:79:47:6e:aa:
         2c:c6:dc:0b:c9:35:96:ab:8b:b9:e1:c6:d2:8d:b6:6c:c4:64:
         01:28:0d:14:5f:8a:52:f9:80:8b:0c:43:a6:6b:2b:57:b6:55:
         30:d5:73:9f:c1:02:2c:68:83:a2:2c:66:83:2e:2e:6f:eb:ac:
         9e:45:22:de:cf:d5:e7:7f:72:a4:44:5c:34:fc:80:f7:6e:bf:
         ab:5b:0a:b0:2c:21:9f:ed:43:63:e6:a6:05:71:b4:30:13:e0:
         08:d4:6e:11:10:7c:61:79:0c:eb:9c:e3:ff:5a:ba:49:29:97:
         23:19:ce:d4:3b:8b:3e:8e:1b:f1:44:84:8c:e0:cb:eb:05:32:
         4a:6b:c7:90:96:25:01:36:36:91:a3:d6:1b:12:dd:f1:01:ef:
         27:6a:de:63:c1:1b:90:d6:89:4b:ca:bd:4e:4f:44:61:36:44:
         4b:a2:03:89:92:f2:f3:67:7a:00:8c:e2:2f:c0:2a:bb:85:36:
         fb:07:19:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----