Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230392e3232332e302f32342d3234203d3e20323033333830.roa
File:                     3138352e3230392e3232332e302f32342d3234203d3e20323033333830.roa (raw, json)
Hash identifier:          5jQMsT2fGl8XT4FZzKPdZl0H2XqcVfCs7Y+tXcjA38c=
Subject key identifier:   C1:FA:5B:7C:27:AF:4C:29:C5:F4:6F:F0:E4:0D:E4:62:DE:A2:27:2A
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       4C5B331358ECF9697760FD2E740C2DAB4153E2D7
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230392e3232332e302f32342d3234203d3e20323033333830.roa
Signing time:             Wed 29 Dec 2021 10:04:08 +0000
ROA not before:           Wed 29 Dec 2021 09:59:08 +0000
ROA not after:            Wed 28 Dec 2022 10:04:08 +0000
asID:                     203380
IP address blocks:        185.209.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:5b:33:13:58:ec:f9:69:77:60:fd:2e:74:0c:2d:ab:41:53:e2:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Dec 29 09:59:08 2021 GMT
            Not After : Dec 28 10:04:08 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9e:f4:11:a7:11:1b:cf:71:b1:c6:f7:54:90:
                    6d:56:1b:9a:6a:4b:8d:8f:66:2a:fb:02:ff:e7:21:
                    ae:62:1d:c0:f0:27:dd:08:d8:e1:f8:bf:86:9a:06:
                    42:a5:bd:59:1f:de:c6:aa:a3:ba:0d:f8:58:9b:43:
                    96:57:b5:54:a5:54:74:9f:12:e8:b6:e6:ba:5c:47:
                    74:65:e5:1d:e6:0b:9d:52:c5:b9:4b:31:17:d0:5a:
                    da:51:4b:13:8a:c1:bc:53:4b:fe:1c:b3:d8:c1:cf:
                    16:99:f9:a5:56:b7:d3:83:08:c8:90:cb:af:99:0f:
                    4d:b2:6f:de:22:f2:be:c8:ec:4c:04:f5:00:55:8b:
                    00:2b:ee:73:94:88:28:b2:bf:ce:45:ba:42:e1:8d:
                    a0:b2:1e:b9:37:df:de:d8:59:ed:dc:43:87:75:8f:
                    9f:c0:5b:62:60:ad:39:06:52:17:d2:38:bd:3b:ec:
                    e5:ec:03:c1:db:c9:52:e8:69:34:5d:23:4f:7e:66:
                    03:01:aa:7b:4a:54:71:1a:dd:f5:be:09:85:c0:5f:
                    cc:bc:5f:35:dd:86:77:17:9e:c1:c7:20:6b:31:ad:
                    c2:07:11:d7:9c:b9:97:db:f5:49:d5:45:fd:4e:9b:
                    50:76:47:50:42:8c:58:71:ff:56:d5:9a:cc:dd:39:
                    4d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FA:5B:7C:27:AF:4C:29:C5:F4:6F:F0:E4:0D:E4:62:DE:A2:27:2A
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230392e3232332e302f32342d3234203d3e20323033333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.209.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         f0:d1:ed:54:74:ed:65:1e:41:01:32:ae:81:04:65:bf:dd:94:
         21:b9:b5:d7:2d:2b:32:17:a9:ce:99:0e:b1:67:75:e3:5f:12:
         34:17:b7:e7:fa:1b:42:e1:08:4c:13:ca:69:aa:9f:b5:16:f4:
         ba:af:58:b5:4b:22:17:bc:87:81:95:89:80:77:04:0c:c7:4d:
         c2:d2:49:47:36:18:31:44:35:43:99:61:38:a1:1a:a5:a7:10:
         85:3b:fe:7c:de:ef:b6:72:66:f1:77:fc:2c:45:0f:03:55:eb:
         94:1b:49:2c:2a:19:8b:4b:26:ed:cf:b6:b5:f0:17:13:e5:1e:
         c8:57:93:47:ec:4e:f1:4e:35:b5:71:d3:7b:85:87:ff:02:a1:
         49:46:67:f1:c6:95:f2:79:58:73:1f:d6:14:f5:bd:69:8e:29:
         94:ea:a9:12:ef:f1:fd:16:b8:9e:6f:20:8e:fd:bc:9e:4f:91:
         97:8c:0d:76:16:cf:56:32:70:ed:0d:75:47:93:54:5e:ca:72:
         8e:fa:03:4a:95:a2:df:3a:15:27:eb:ac:61:d3:ed:71:ed:71:
         bb:75:86:1f:b0:25:52:7c:ea:c4:cd:fb:d2:68:f9:a0:e6:95:
         3f:a3:7f:7b:29:29:88:66:1e:0d:1e:a7:e1:2f:44:b2:5b:cc:
         82:94:2b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----