Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232322e3234302e302f32342d3234203d3e20333939373436.roa
File:                     3138352e3232322e3234302e302f32342d3234203d3e20333939373436.roa (raw, json)
Hash identifier:          jXas8T+GdoZeiqqyaZriPgTO7ox9dMUzCdOnH0UvXZ0=
Subject key identifier:   27:57:5D:DD:97:71:73:9B:C2:8D:CF:BC:50:59:6D:13:1F:10:EF:B7
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       6B771A7F5C77FDD6E0D95EBA0E6314236124FF7D
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232322e3234302e302f32342d3234203d3e20333939373436.roa
Signing time:             Wed 20 Oct 2021 11:42:30 +0000
ROA not before:           Wed 20 Oct 2021 11:37:30 +0000
ROA not after:            Wed 19 Oct 2022 11:42:30 +0000
asID:                     399746
IP address blocks:        185.222.240.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:77:1a:7f:5c:77:fd:d6:e0:d9:5e:ba:0e:63:14:23:61:24:ff:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 20 11:37:30 2021 GMT
            Not After : Oct 19 11:42:30 2022 GMT
        Subject: CN=3082010A0282010100D46306F0EA2986F8215EF2EB9E83D183022DD4983951C61B2AD69A6745435211C03F7AB6FCF3C3059D93F33FAD0F9C4F791A192B702ED7C9E298960ACDC56F043687E295F142FDC2E3C021E0DAF0E821306A5443A77DF9399C5329829EF31386853D50452BFA56CE971CDED4B03263E3F5D36ECE1166CB6C8E9186AEE024F6D7D9E9BA10B61B8A9DBCC033C4D0D15AC9739B8C46818B41742818464E82383C68F54EC99BF6371A89476C14883AEB43782F1C8CF59AB1D93D5B72D91C329BBA760A9EDD3C35635DB6E8D423E5A5FD02DF6F077C2179F88B0C9F040E0A96B989367F439C79562BA2D339E421D1BF129718F1DBDFF103283FF03C4C5601277DC4C50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:63:06:f0:ea:29:86:f8:21:5e:f2:eb:9e:83:
                    d1:83:02:2d:d4:98:39:51:c6:1b:2a:d6:9a:67:45:
                    43:52:11:c0:3f:7a:b6:fc:f3:c3:05:9d:93:f3:3f:
                    ad:0f:9c:4f:79:1a:19:2b:70:2e:d7:c9:e2:98:96:
                    0a:cd:c5:6f:04:36:87:e2:95:f1:42:fd:c2:e3:c0:
                    21:e0:da:f0:e8:21:30:6a:54:43:a7:7d:f9:39:9c:
                    53:29:82:9e:f3:13:86:85:3d:50:45:2b:fa:56:ce:
                    97:1c:de:d4:b0:32:63:e3:f5:d3:6e:ce:11:66:cb:
                    6c:8e:91:86:ae:e0:24:f6:d7:d9:e9:ba:10:b6:1b:
                    8a:9d:bc:c0:33:c4:d0:d1:5a:c9:73:9b:8c:46:81:
                    8b:41:74:28:18:46:4e:82:38:3c:68:f5:4e:c9:9b:
                    f6:37:1a:89:47:6c:14:88:3a:eb:43:78:2f:1c:8c:
                    f5:9a:b1:d9:3d:5b:72:d9:1c:32:9b:ba:76:0a:9e:
                    dd:3c:35:63:5d:b6:e8:d4:23:e5:a5:fd:02:df:6f:
                    07:7c:21:79:f8:8b:0c:9f:04:0e:0a:96:b9:89:36:
                    7f:43:9c:79:56:2b:a2:d3:39:e4:21:d1:bf:12:97:
                    18:f1:db:df:f1:03:28:3f:f0:3c:4c:56:01:27:7d:
                    c4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:57:5D:DD:97:71:73:9B:C2:8D:CF:BC:50:59:6D:13:1F:10:EF:B7
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232322e3234302e302f32342d3234203d3e20333939373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.222.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:33:cf:aa:1b:3c:aa:07:b5:8c:38:e9:30:6a:8d:e5:3d:94:
         86:c1:c2:a3:1a:c5:1c:7d:43:24:2d:ee:a7:76:ba:52:29:69:
         f7:a6:d1:dd:b6:48:3d:5a:0f:3e:b3:c9:be:4e:53:11:ba:82:
         01:0d:2a:34:77:cd:b5:7b:1f:67:b7:c9:5b:82:e4:18:2f:11:
         69:5d:a8:65:50:1e:1e:9a:d8:13:3d:ba:a0:e0:b0:48:6b:ee:
         4a:09:db:83:65:8b:16:fc:c2:2f:d3:d4:cb:6e:b5:e3:9b:43:
         b3:69:ed:9c:92:e5:b8:59:b1:af:20:81:eb:8e:b9:55:ed:2c:
         95:a7:ee:c5:eb:76:68:21:e0:fc:14:d3:71:f6:ba:7c:66:c3:
         18:e8:c4:e3:24:87:36:7b:50:1f:66:9f:10:6e:e3:4f:0b:da:
         e1:c0:4e:7f:63:d8:b2:0e:f7:d1:7f:80:04:62:09:55:c4:98:
         f3:c3:47:38:28:ad:bc:34:09:a8:36:6d:c9:b7:5c:68:b1:a2:
         6a:d9:8c:49:6d:c4:0d:2f:84:81:b1:32:8e:76:c4:ef:49:2c:
         05:a0:94:25:d9:0e:dd:cd:92:0c:1d:70:3a:8d:b1:97:ec:41:
         b8:b9:2b:0a:94:8c:a6:53:c0:7f:f5:05:3f:25:a0:5b:cc:3c:
         df:32:0c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----