Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e35302e302f32342d3234203d3e203235303938.roa
File:                     38352e3230382e35302e302f32342d3234203d3e203235303938.roa (raw, json)
Hash identifier:          TqxuxclqWpZgKQMPAWi+88hFpgaU+jQKTNbVE5B1HcQ=
Subject key identifier:   2A:F1:98:8C:E6:E2:B3:5B:0C:11:31:18:09:F1:01:0F:CE:4C:7E:83
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       2FA926DFE08B55902315C7F55E71A1477E2C7864
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e35302e302f32342d3234203d3e203235303938.roa
Signing time:             Sat 22 Oct 2022 04:33:11 +0000
ROA not before:           Sat 22 Oct 2022 04:28:11 +0000
ROA not after:            Sat 21 Oct 2023 04:33:11 +0000
asID:                     25098
IP address blocks:        85.208.50.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a9:26:df:e0:8b:55:90:23:15:c7:f5:5e:71:a1:47:7e:2c:78:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:11 2022 GMT
            Not After : Oct 21 04:33:11 2023 GMT
        Subject: CN=2AF1988CE6E2B35B0C11311809F1010FCE4C7E83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f5:39:71:11:3d:bb:cd:3a:b3:08:cd:d0:cf:
                    8b:fd:a3:df:45:18:2c:0c:f6:39:7e:bd:da:a5:a0:
                    10:f3:e1:25:26:df:82:79:e8:f2:82:1e:3e:fa:78:
                    26:85:c9:04:05:fc:cc:3e:2f:7a:e0:63:41:08:eb:
                    f5:52:bc:39:00:29:1b:f3:bb:8e:b1:85:6f:bc:3e:
                    2b:b9:c8:f0:1f:16:a7:2d:f0:92:0f:ed:1f:10:82:
                    b1:4c:57:74:d7:cb:90:02:24:aa:50:3e:b2:59:71:
                    47:c0:4b:f4:7e:ff:6b:cd:34:a0:8a:22:c1:ae:e4:
                    7c:3a:59:43:26:4a:d0:1d:ee:95:4b:e1:8f:61:80:
                    df:f9:16:ce:18:dd:e0:fc:57:d4:7d:12:1d:76:b6:
                    01:dd:f7:8a:e8:2a:dd:f8:8c:e6:34:0b:e7:2f:11:
                    4f:f0:cf:c9:1a:54:fd:8f:3a:38:ad:e5:b4:68:0a:
                    43:e3:ae:9c:cf:62:64:30:a9:d7:2c:57:fc:63:f1:
                    57:00:ee:0c:3a:61:5e:2f:de:19:45:13:79:44:bf:
                    d5:52:d8:70:22:8d:6f:b1:f8:80:e7:10:46:a6:cf:
                    9c:a6:a0:01:7e:70:5e:24:32:7b:b1:22:64:d5:6e:
                    8e:1d:64:25:62:72:0d:00:8d:c1:d8:76:c5:c3:eb:
                    a4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F1:98:8C:E6:E2:B3:5B:0C:11:31:18:09:F1:01:0F:CE:4C:7E:83
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/38352e3230382e35302e302f32342d3234203d3e203235303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.208.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:85:1b:b7:f5:6a:2b:b4:8f:d1:80:ec:08:1f:95:a2:e7:94:
         ea:26:45:9d:61:08:f9:b7:37:31:6a:75:15:21:5a:87:f1:92:
         5b:dc:76:63:7e:5b:d1:6e:ec:2f:56:e2:f2:67:7f:e7:15:b8:
         47:bd:7a:94:34:00:72:e7:5f:3d:92:79:88:cb:93:97:82:ae:
         a7:c5:8f:99:14:50:7b:04:c4:b4:38:74:b2:34:c5:0f:ec:e2:
         b8:5a:87:d7:76:e7:58:ba:c9:fb:d0:3d:7c:ba:e2:78:da:70:
         69:c4:c9:bb:c9:d5:29:e2:10:5d:cf:03:c5:29:7a:d1:57:74:
         e1:bc:28:c4:d2:7b:32:de:e6:0c:c6:bb:c4:1a:99:af:a3:4a:
         9b:1d:13:ed:64:d1:5d:68:c7:b8:a6:15:47:3f:a5:c5:3d:80:
         1f:c6:f2:2a:bc:2a:09:0a:89:ed:e5:10:cf:74:75:2a:70:09:
         60:bd:8c:45:9c:f7:90:ec:14:cf:ca:4f:c0:98:42:28:15:ae:
         0a:c5:ca:de:5d:ea:74:81:19:53:ca:b5:90:88:e5:ff:8f:50:
         f1:c7:36:12:c0:80:6f:3c:8c:2d:8e:cd:66:bd:62:0c:a5:52:
         93:9e:af:47:d3:21:54:d3:3d:ac:d9:3d:bd:ca:ea:01:8c:04:
         e4:74:5d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----