Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138322e3138342e302f32332d3332203d3e203531313637.roa
File:                     3138352e3138322e3138342e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier:          8tfFM9ejcjZ0f6K2EF0g3++ot09P5L2IJr/VypeHKUM=
Subject key identifier:   9A:A6:64:50:88:F6:9D:8E:E7:D0:95:A2:EA:07:F1:0F:F7:E4:67:16
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       424A02FCEE438C6FE1DBBBEC628653C0D8B17A9F
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138322e3138342e302f32332d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:13 +0000
ROA not before:           Sat 22 Oct 2022 04:28:13 +0000
ROA not after:            Sat 21 Oct 2023 04:33:13 +0000
asID:                     51167
IP address blocks:        185.182.184.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:4a:02:fc:ee:43:8c:6f:e1:db:bb:ec:62:86:53:c0:d8:b1:7a:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:13 2022 GMT
            Not After : Oct 21 04:33:13 2023 GMT
        Subject: CN=9AA6645088F69D8EE7D095A2EA07F10FF7E46716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:aa:ee:04:83:30:34:08:ac:02:19:f4:fd:4f:
                    08:76:60:6e:36:48:62:45:a8:da:83:3e:5e:3f:58:
                    e7:bb:a9:f6:28:5e:81:69:c0:2a:3c:dc:80:3f:50:
                    0d:d7:46:d1:d6:b7:a7:23:ca:4d:14:b2:5f:42:eb:
                    25:f4:52:5e:04:cf:f6:1a:9c:cb:35:b7:42:5b:93:
                    05:a2:9c:99:67:58:2a:e9:9a:0a:4b:55:85:1b:bc:
                    af:76:68:bf:bf:b5:53:59:58:b4:a7:29:a2:dc:31:
                    c7:e7:a5:85:90:c7:b1:ec:e0:9d:28:c3:03:fe:e1:
                    7f:a7:91:cf:d0:0c:d5:72:ba:08:f8:d8:01:83:6f:
                    bf:6b:8b:6d:f3:87:ba:a0:85:48:da:71:e7:b7:d9:
                    be:63:52:7c:0b:24:7c:10:ed:50:05:0c:1a:96:34:
                    f6:5c:94:9e:42:0c:92:37:7b:3f:5b:4a:36:e2:86:
                    1c:23:76:5f:1e:51:db:7f:8b:a7:18:03:b1:11:ee:
                    96:65:24:3f:d0:89:9f:94:59:a8:4a:e0:8c:5b:c6:
                    d1:0e:79:ef:cc:d3:49:4f:ad:bb:99:04:ee:aa:2e:
                    dc:2c:ea:67:c3:6b:80:e0:9e:d5:ae:76:3c:1d:e7:
                    6d:39:6c:b8:26:e0:b0:95:16:79:c1:40:0b:3b:0a:
                    49:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A6:64:50:88:F6:9D:8E:E7:D0:95:A2:EA:07:F1:0F:F7:E4:67:16
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3138322e3138342e302f32332d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.182.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bc:fe:ea:20:ea:40:5f:00:dd:8e:17:e9:cc:3a:54:33:c6:1b:
         f7:c9:7b:91:31:49:42:f3:fa:1d:cd:b1:5a:df:aa:35:0c:ba:
         72:ab:b7:32:56:9a:9a:7c:89:15:97:d7:b0:9e:08:6c:a6:3c:
         af:58:c7:79:60:7f:9c:8d:d9:f6:5b:77:8d:2f:59:f8:4e:50:
         71:84:33:04:fe:c5:5c:3e:6f:69:0a:4c:e0:a3:d7:3f:7e:84:
         4d:7c:56:84:df:01:0e:65:06:36:58:ac:65:ce:05:75:1f:07:
         19:7a:8e:3b:0c:40:00:b6:35:50:94:79:79:34:b9:6c:77:dc:
         71:1b:98:02:f2:f0:b2:04:2f:bd:e0:33:40:1f:b2:b9:8d:16:
         4d:94:7d:ab:75:74:ab:17:4e:0b:4e:e5:d2:5a:ec:90:b2:71:
         a2:b5:9d:ba:f8:c0:9d:b3:b1:02:ec:b2:af:8d:46:4b:52:6b:
         bb:00:15:7d:67:1e:5d:44:da:2b:29:79:c8:8a:c9:e6:f0:b3:
         79:14:7c:40:4b:79:cb:7d:a6:ce:f4:ca:ff:75:3a:22:2a:37:
         19:16:b9:ba:22:e1:34:91:65:36:b9:4e:b9:80:e5:75:67:1b:
         9e:66:d0:40:8c:dc:47:92:82:e9:a5:6f:77:9f:a9:2d:49:4c:
         13:7c:41:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----