Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232322e3234302e302f32342d3234203d3e20323035383134.roa
File:                     3138352e3232322e3234302e302f32342d3234203d3e20323035383134.roa (raw, json)
Hash identifier:          BdRONgiDDy+oxOjOFBk6qddrJYiNvgRoyKfPAWqmreI=
Subject key identifier:   6F:32:86:AB:EF:32:50:61:08:2A:5C:D7:65:F3:2D:D0:A7:8B:EB:AB
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       67AEB24117C6EF4FB301DE9E938212444612AB56
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232322e3234302e302f32342d3234203d3e20323035383134.roa
Signing time:             Fri 29 Oct 2021 16:00:02 +0000
ROA not before:           Fri 29 Oct 2021 15:55:02 +0000
ROA not after:            Fri 28 Oct 2022 16:00:02 +0000
asID:                     205814
IP address blocks:        185.222.240.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ae:b2:41:17:c6:ef:4f:b3:01:de:9e:93:82:12:44:46:12:ab:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 29 15:55:02 2021 GMT
            Not After : Oct 28 16:00:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:20:8c:4c:1a:8a:b9:a6:58:b8:7f:b9:d4:81:
                    34:d0:52:2c:e7:6b:24:8b:27:85:e4:21:73:83:33:
                    aa:81:dc:a6:93:18:c5:44:13:b6:d1:30:bd:91:e7:
                    d0:96:46:a5:3d:d9:78:44:90:36:c0:78:78:f8:55:
                    06:13:8c:53:d6:11:cc:fb:97:47:5e:af:0c:7e:bd:
                    e2:3b:7b:02:6e:f3:b9:74:be:1e:0b:2c:41:e6:63:
                    d3:09:fb:aa:c4:df:bc:f6:ff:e8:d4:bf:f2:55:7e:
                    03:b6:05:d2:1b:22:7f:12:0e:73:96:e1:f4:7b:69:
                    e6:03:fc:d5:ab:5d:15:ab:c7:a8:19:6a:71:89:96:
                    a0:91:c7:d6:83:e6:5a:3b:60:58:ab:97:c6:d3:56:
                    58:3d:d8:72:6c:26:bd:d3:d0:ad:13:c2:e2:64:63:
                    d5:63:fc:88:29:a6:0e:65:67:e6:ea:d7:0a:fd:d4:
                    54:9e:0b:48:f2:45:ce:bb:bc:de:71:ef:c9:6c:51:
                    6a:df:bb:c7:c2:c2:fe:39:0d:f7:58:a3:ab:e7:b4:
                    e9:8f:9e:c6:12:a1:b2:eb:61:b7:00:51:2e:ae:83:
                    93:25:1b:8f:6b:e3:d7:85:4f:70:0c:4f:10:e8:5f:
                    b0:08:1b:00:13:c0:e0:98:0a:5f:d4:19:01:cb:bb:
                    c8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:32:86:AB:EF:32:50:61:08:2A:5C:D7:65:F3:2D:D0:A7:8B:EB:AB
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232322e3234302e302f32342d3234203d3e20323035383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.222.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:44:fb:64:50:5c:d0:96:5e:8e:e2:ee:e3:f4:53:ca:5f:f1:
         37:0e:e7:91:61:af:8c:67:b2:67:2d:37:29:c7:58:c6:c1:cc:
         1a:c7:35:91:4d:24:3c:bc:e5:7f:96:2e:fe:e3:d7:0a:06:a0:
         26:bd:45:29:1f:4d:c7:79:ea:aa:24:9d:c8:86:5e:71:1f:fd:
         30:86:55:89:e9:e5:19:50:d5:97:64:64:07:4b:15:db:37:06:
         2d:98:9b:d2:b6:ea:a5:6c:35:9d:56:5b:c2:95:fa:dc:e3:fb:
         2e:27:45:88:22:3e:52:11:8f:4b:7c:15:2e:1a:e8:a9:e6:56:
         3e:13:97:49:7f:9d:0e:6f:8a:65:14:73:0e:ba:8c:75:16:27:
         6d:0f:06:aa:ad:4c:e3:9b:de:29:47:c0:09:41:26:fe:8f:bc:
         be:0b:ef:9a:85:e9:85:ee:c5:a9:ad:0b:27:32:60:ab:5c:5e:
         01:bc:33:87:0a:f8:10:bf:5b:5a:aa:f6:d3:22:4c:50:1e:d2:
         61:28:53:60:56:da:22:fd:90:14:e9:18:a0:1a:33:8a:45:5a:
         d7:a5:fe:fc:d3:db:2f:c3:ad:a4:10:24:cf:80:db:61:12:6f:
         a4:3a:47:1b:b2:4f:4a:be:f3:2b:f6:b8:0f:d3:96:63:37:6d:
         64:9f:8a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----