Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230392e3232332e302f32342d3234203d3e20323031383832.roa
File:                     3138352e3230392e3232332e302f32342d3234203d3e20323031383832.roa (raw, json)
Hash identifier:          DpNmttVqCBXiT3xTIRRRefhUVAPhRKeoZ7O4sEGM+z4=
Subject key identifier:   68:34:E8:B4:41:46:8E:15:48:7A:8A:27:C9:EA:7B:73:0B:D9:5E:B9
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       41186C0CE7614AC4A1E79D9C0B7D6B7864B449A6
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230392e3232332e302f32342d3234203d3e20323031383832.roa
Signing time:             Fri 29 Oct 2021 16:00:02 +0000
ROA not before:           Fri 29 Oct 2021 15:55:02 +0000
ROA not after:            Fri 28 Oct 2022 16:00:02 +0000
asID:                     201882
IP address blocks:        185.209.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:18:6c:0c:e7:61:4a:c4:a1:e7:9d:9c:0b:7d:6b:78:64:b4:49:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 29 15:55:02 2021 GMT
            Not After : Oct 28 16:00:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:aa:4d:cd:64:4d:23:ca:eb:76:1c:a5:b2:39:
                    b2:4e:b7:41:06:c4:4c:c0:bd:ab:17:cd:88:fa:81:
                    18:f3:8d:59:1a:ce:90:36:3c:c1:b4:1d:50:98:d7:
                    fb:b6:f7:8a:c1:dd:91:82:1b:87:54:36:b0:c9:22:
                    d8:4e:82:41:95:5a:bb:77:01:eb:98:f3:49:ab:6f:
                    30:3c:ad:3e:02:34:b9:fe:f3:02:d3:d8:4d:dd:9a:
                    be:c5:4c:2c:98:87:5a:48:fd:09:5d:2f:11:8a:d1:
                    f4:39:66:0a:af:89:6f:ee:a9:0b:29:a9:f1:3e:57:
                    c8:41:99:30:09:dd:e8:bc:6b:bd:21:51:07:0f:84:
                    2e:c3:63:5d:80:27:a8:14:8e:b5:b9:6b:09:72:30:
                    ac:51:bb:c6:eb:2a:d0:d2:22:e4:94:49:a4:44:22:
                    3e:23:a0:ad:20:3b:9b:65:5a:be:d7:01:38:db:a7:
                    a1:d5:91:2c:61:88:c0:f7:0f:68:58:d5:54:93:2c:
                    52:80:60:ac:06:77:e3:78:c2:13:cd:3a:00:75:d8:
                    66:7b:9d:68:39:99:73:0e:b1:11:d5:64:da:51:eb:
                    33:db:40:0f:f0:63:7f:e0:8b:14:9c:5a:14:dd:df:
                    6f:20:65:a7:3f:6c:09:0d:95:fa:78:8e:35:77:dc:
                    70:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:34:E8:B4:41:46:8E:15:48:7A:8A:27:C9:EA:7B:73:0B:D9:5E:B9
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230392e3232332e302f32342d3234203d3e20323031383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.209.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:05:b5:06:bf:6d:48:b6:d8:a4:f5:da:01:bc:fa:d4:3d:d9:
         ed:1c:ca:e3:50:14:62:96:67:f9:14:a8:3b:ea:bd:d0:ef:d6:
         9d:df:e1:bd:ca:68:f6:a0:46:32:ff:b3:59:52:db:24:84:e9:
         61:d4:37:bd:8b:1e:ec:85:85:b2:d6:1e:a7:31:86:c1:16:28:
         fe:e7:61:68:9f:19:72:4c:c0:ac:d2:9f:07:64:37:94:b0:37:
         d6:73:e2:5a:27:93:74:8f:12:92:fd:46:61:ed:f1:93:0c:95:
         f3:3c:dd:3b:91:a2:06:bf:48:fe:28:a0:29:c0:d5:21:24:ca:
         58:be:47:1a:99:24:b2:a5:1b:6e:57:fa:4f:3f:3d:95:65:0b:
         1b:70:8c:bb:5c:c5:85:41:19:97:b0:e4:60:bb:5d:23:b9:f4:
         0f:fe:25:60:63:c3:a9:b1:8c:e9:ed:54:c1:52:60:e4:1a:79:
         77:5a:41:57:ad:5a:56:42:38:9e:46:31:52:ee:29:9a:6e:4e:
         03:28:72:27:45:c1:ae:c2:3a:18:a8:ed:80:4a:d0:02:44:03:
         9b:0b:1e:84:91:b9:95:31:ca:0e:62:41:6a:24:30:70:8d:7a:
         11:4d:b6:c9:28:3e:e9:78:f5:f8:62:9f:f3:5d:3c:96:0a:57:
         e7:d0:8a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----