Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230392e3232332e302f32342d3234203d3e203538323132.roa
File:                     3138352e3230392e3232332e302f32342d3234203d3e203538323132.roa (raw, json)
Hash identifier:          6F9Os7AcWBy45OrOUXNAVV0zln8xvje5ud5wuSVwJHQ=
Subject key identifier:   C6:09:8C:35:33:80:FC:08:7C:52:18:A7:38:21:0C:C9:E6:E8:54:70
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       5601755C9EC071C776A1EB53C57BE27B39D4DF66
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230392e3232332e302f32342d3234203d3e203538323132.roa
Signing time:             Sat 15 May 2021 09:35:44 +0000
ROA not before:           Sat 15 May 2021 09:30:44 +0000
ROA not after:            Sat 14 May 2022 09:35:44 +0000
asID:                     58212
IP address blocks:        185.209.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:01:75:5c:9e:c0:71:c7:76:a1:eb:53:c5:7b:e2:7b:39:d4:df:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: May 15 09:30:44 2021 GMT
            Not After : May 14 09:35:44 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f5:f4:01:5e:25:7f:4e:d4:59:32:1a:54:57:
                    9d:88:0e:f9:5f:a7:8f:be:b2:fd:45:b3:0c:6a:a7:
                    c9:ef:24:b1:0a:53:12:19:2c:f2:a1:cf:39:6a:05:
                    db:12:a8:05:cc:c6:5c:13:cf:f5:f4:95:f2:5c:74:
                    08:51:82:08:74:78:da:83:1d:5f:32:f1:e3:58:ea:
                    f5:67:e0:59:ae:9d:6e:88:48:bc:50:70:7f:1d:e2:
                    63:c2:fe:89:ad:47:62:0f:79:c7:50:ef:25:7a:a3:
                    a7:bf:57:82:a5:74:50:28:73:cb:2a:a9:d2:42:22:
                    26:cb:45:7b:e1:2f:fa:19:45:e3:a0:44:1d:a9:b5:
                    0c:51:7c:2b:d6:d8:75:72:7d:39:72:c5:fa:80:75:
                    7b:8a:25:2d:b5:e5:12:15:3a:1b:29:63:43:17:11:
                    a1:ad:d6:52:50:d8:1f:ee:49:5f:ce:b4:e8:9c:17:
                    09:27:fa:e9:88:3a:87:24:39:46:9c:26:f7:9b:cf:
                    b1:05:a7:1f:cb:14:17:66:b2:52:8a:40:32:b6:e7:
                    2d:c8:80:fa:3e:a1:42:66:dd:29:27:7a:c5:de:c4:
                    b6:5f:8b:1c:a6:f8:b4:c1:89:43:22:81:f6:33:68:
                    d5:64:1d:4d:e6:44:84:ac:95:9c:0a:98:a7:6d:81:
                    80:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:09:8C:35:33:80:FC:08:7C:52:18:A7:38:21:0C:C9:E6:E8:54:70
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3230392e3232332e302f32342d3234203d3e203538323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.209.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:47:15:97:85:89:6e:e6:ad:53:90:27:80:70:fc:16:8a:e8:
         08:ed:cb:55:dd:de:bf:a7:ba:45:52:5d:23:64:0d:17:a4:99:
         24:f7:5a:db:a8:91:40:70:07:bf:dc:c8:43:82:ac:ef:49:9d:
         cc:74:f0:51:79:86:07:1c:22:b9:37:e7:1c:e0:87:30:f7:bd:
         8e:39:5b:5f:6b:22:96:9a:a0:de:9a:87:3e:b6:f2:65:0f:1f:
         40:e0:1a:86:d0:2a:a3:fb:da:a7:c2:cc:fe:85:a5:7c:e8:c1:
         77:e9:67:f4:03:8b:15:43:e4:39:5f:bd:0d:e7:e6:b3:fd:5a:
         33:e3:b2:d7:b2:71:00:7f:fe:04:bc:4b:70:90:e9:a7:f2:2d:
         70:90:b4:50:b8:31:d7:55:68:01:99:47:fa:3e:f3:eb:3c:fd:
         a8:fa:48:66:21:61:12:88:ca:88:95:9d:57:89:4f:ef:c1:0b:
         57:71:83:72:27:27:68:ef:16:35:17:9b:b0:ed:20:07:a8:5c:
         41:00:50:10:e1:3a:80:e1:bd:a4:83:56:c1:d9:fd:f0:3e:ed:
         a6:49:67:d3:4d:bf:22:76:56:cb:ae:b8:79:ef:d0:26:41:77:
         fa:5f:cf:ea:86:fc:e0:a9:05:a8:69:7b:74:09:18:87:f2:9a:
         cd:15:12:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----