Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139372e3139342e302f32342d3234203d3e203534323532.roa
File:                     3138352e3139372e3139342e302f32342d3234203d3e203534323532.roa (raw, json)
Hash identifier:          F6OGin46QgiOgllWG3//U3fOUBrK0aw3UaoidV7WGhs=
Subject key identifier:   B1:E6:68:8C:28:BB:B1:23:50:AE:72:FD:1D:8F:BA:CA:55:83:B0:77
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       565363450CC994533294B44717B3D2AD139EBD71
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139372e3139342e302f32342d3234203d3e203534323532.roa
Signing time:             Mon 25 Oct 2021 15:20:53 +0000
ROA not before:           Mon 25 Oct 2021 15:15:53 +0000
ROA not after:            Mon 24 Oct 2022 15:20:53 +0000
asID:                     54252
IP address blocks:        185.197.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:53:63:45:0c:c9:94:53:32:94:b4:47:17:b3:d2:ad:13:9e:bd:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 25 15:15:53 2021 GMT
            Not After : Oct 24 15:20:53 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7c:c9:c9:15:e0:2b:b3:ee:91:80:b8:71:08:
                    8d:29:2b:c1:a4:67:83:ea:fd:8c:06:d5:88:f7:9e:
                    e7:da:62:82:53:e7:fb:0a:76:76:a2:76:c2:f6:1c:
                    51:5f:15:37:c5:fc:5b:30:eb:f7:da:ab:f0:52:8f:
                    d1:72:44:00:95:de:8b:52:84:ed:8a:87:52:c1:28:
                    a9:ac:60:1c:b8:5b:e1:67:c5:1b:a5:c5:8c:22:28:
                    01:8f:c3:57:88:d6:9c:45:5a:7d:5c:5c:ac:48:d5:
                    b1:c5:43:86:a8:64:2e:de:23:e2:b1:73:14:5c:8d:
                    15:ad:26:c4:df:2f:20:d3:f0:63:2c:c1:bc:ee:e3:
                    cd:3f:0c:f8:1e:9c:75:a4:d3:cf:b7:b6:fc:bf:c4:
                    72:07:0e:9a:0b:f5:ba:a8:b7:f9:7b:6d:0c:aa:2d:
                    e2:46:f9:d7:db:ad:39:dd:74:d4:57:b2:ce:e6:79:
                    e6:03:4b:6d:5b:9d:69:3c:73:d7:47:06:4d:44:00:
                    93:6f:8d:30:77:26:6d:d1:6f:1f:8e:90:26:02:4d:
                    4b:5b:2a:12:51:50:df:0c:fa:64:aa:6d:b4:f7:42:
                    d7:86:34:86:b7:8a:6f:22:ca:02:b5:72:bf:0b:8e:
                    52:91:78:d6:9b:be:7c:17:21:4b:42:62:6e:58:7e:
                    98:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E6:68:8C:28:BB:B1:23:50:AE:72:FD:1D:8F:BA:CA:55:83:B0:77
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3139372e3139342e302f32342d3234203d3e203534323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.197.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:5a:66:fb:ef:3b:36:d6:db:90:3c:da:ab:45:dd:30:7c:9e:
         ca:63:0a:20:b4:db:4b:06:b0:b7:da:c1:66:5b:d4:f0:c3:a9:
         a2:fc:a1:66:7b:27:82:e9:88:f4:b3:28:69:1a:54:05:d0:7c:
         dd:ae:9a:38:0c:54:ec:ba:a8:ab:88:3f:1d:d4:41:54:12:e3:
         1f:d4:6b:29:6d:47:2b:72:e0:bf:b1:f0:51:6d:69:8b:db:1d:
         8a:25:f8:12:2f:9d:7b:67:96:4c:8d:6e:dd:73:91:bd:93:3e:
         0f:68:82:a0:d0:65:55:04:63:82:3e:80:30:23:ec:5b:e3:02:
         99:1c:06:2f:79:c0:a7:dd:5e:a5:76:8d:70:a9:24:59:db:c8:
         18:3e:35:90:a5:41:18:8e:8c:54:a6:02:72:af:66:a1:2a:3c:
         5f:de:e5:51:ec:09:d1:09:28:ac:31:71:65:18:ee:0a:67:eb:
         b6:99:4e:08:55:db:69:27:bb:82:bd:b4:48:5b:18:da:33:21:
         45:5a:19:6e:bf:68:9a:03:ac:24:fe:41:64:59:fd:28:09:34:
         39:ac:ba:e8:fc:96:27:56:f8:f3:1a:32:3a:95:f8:e0:f3:ab:
         30:84:34:7e:76:e6:89:90:f5:bb:6f:8f:87:90:f4:d0:70:d6:
         ae:af:65:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----