Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e34382e302f32342d3332203d3e203531313637.roa
File:                     38352e3230382e34382e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          WX1cg0/ZEhUT15pGaEXG08VoYu09Ygjs5QGGeiTbvHw=
Subject key identifier:   C9:BC:9F:45:3C:E8:5B:A4:3C:83:A4:CC:EA:F9:FA:8F:5E:CE:9C:87
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       1A677D3093DF199E35633911F7636851B99704A9
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e34382e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:12 +0000
ROA not before:           Sat 22 Oct 2022 04:28:12 +0000
ROA not after:            Sat 21 Oct 2023 04:33:12 +0000
asID:                     51167
IP address blocks:        85.208.48.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:67:7d:30:93:df:19:9e:35:63:39:11:f7:63:68:51:b9:97:04:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:12 2022 GMT
            Not After : Oct 21 04:33:12 2023 GMT
        Subject: CN=C9BC9F453CE85BA43C83A4CCEAF9FA8F5ECE9C87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e2:4d:00:71:69:26:e3:89:bf:6e:c5:1b:4f:
                    81:ed:7b:b5:e4:0f:5c:93:84:cb:8a:ca:b4:3c:f1:
                    e7:38:6e:c1:93:97:e7:94:ed:1d:e2:7c:b8:3d:c5:
                    7f:e9:09:72:13:92:ee:ad:de:b0:c3:df:7e:f4:69:
                    b1:4a:ed:11:7f:f1:f3:03:9b:36:36:3e:0d:f3:1d:
                    47:a1:29:26:a2:a2:d1:f0:a0:d1:4b:b5:7f:86:9d:
                    78:cd:eb:7a:d8:18:f7:9a:6a:a9:90:61:de:11:8d:
                    9f:11:6d:e4:4d:b9:3a:a8:0c:1f:e0:0b:7a:86:53:
                    ce:a0:db:33:14:c1:49:53:c8:8d:48:18:60:9e:c9:
                    9e:86:30:97:c4:20:2e:f8:da:7f:f7:c2:b1:45:90:
                    d8:1a:ef:bf:a5:fc:74:82:b9:8d:59:ff:08:a7:ec:
                    e5:b5:e7:c8:12:4e:de:29:2a:a7:dd:44:e2:76:4e:
                    fc:d5:85:e2:19:77:ef:52:7f:84:3e:75:01:31:09:
                    0e:01:7e:9d:26:4c:51:07:0c:51:e1:5f:b9:3d:ec:
                    79:fa:b3:8b:da:e1:a2:7a:49:0c:ad:ed:85:69:75:
                    24:68:0b:36:a3:ce:9f:8c:25:c0:e3:39:c1:7d:ec:
                    ad:2e:be:45:5b:8a:20:09:36:9f:2a:da:7b:8f:79:
                    57:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:BC:9F:45:3C:E8:5B:A4:3C:83:A4:CC:EA:F9:FA:8F:5E:CE:9C:87
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e34382e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.208.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:95:cc:0e:f9:1b:7d:8c:96:b8:ae:4f:73:2c:6c:25:f3:3d:
         6b:32:f7:2f:30:9e:07:36:8b:15:2c:93:f1:0d:99:f2:86:b4:
         22:d6:1e:4b:6d:e8:a8:aa:38:6d:55:fa:45:38:6e:73:47:79:
         87:e9:32:cd:1b:c6:01:e6:48:ca:54:f3:77:ac:18:1d:db:45:
         bb:74:7e:66:af:a6:fc:d5:5a:63:e2:c6:64:80:f8:27:32:c5:
         99:21:ab:ae:88:2b:1d:3c:3b:0d:d9:14:d7:22:6d:b3:13:ce:
         0a:ad:a2:1b:9c:a1:d0:02:a8:8f:ce:10:29:5e:21:eb:cc:cb:
         d9:ec:3e:0e:6e:bc:b0:7c:5a:00:4e:b0:f9:6d:59:20:cd:61:
         52:29:f5:86:d2:f9:92:27:58:a6:87:a1:0a:4a:3d:46:1a:a8:
         d1:3a:88:11:88:1f:a9:b6:2d:09:72:24:67:7e:41:da:67:e8:
         b3:ae:2f:e8:57:af:c2:d6:19:3b:7b:93:53:8c:48:00:f1:8e:
         75:6c:10:44:34:f4:46:34:17:9c:54:df:f8:8c:93:c3:d3:a1:
         60:23:2d:38:ad:d3:6c:6f:df:09:66:c5:80:c6:98:2b:04:f9:
         1e:99:fd:74:5c:09:e2:42:d4:e9:48:f5:e1:7f:77:91:bb:db:
         72:66:cf:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----