Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/177/3138352e3136392e3235322e302f32342d3332203d3e203531313637.roa
File:                     3138352e3136392e3235322e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          Fu3OBcdnkz76SAMKydJX7kGkEB5UtxFLrE5nBhxwrSg=
Subject key identifier:   6B:C0:2D:BE:C1:25:E1:76:52:62:4F:6C:D3:D9:5C:16:63:44:A4:AE
Certificate issuer:       /CN=2085ccded28a68d872cbf19754311e6f616649b1
Certificate serial:       5C73961AB3B08AAE0889CFAB2A1FDECFD415ACAE
Authority key identifier: 20:85:CC:DE:D2:8A:68:D8:72:CB:F1:97:54:31:1E:6F:61:66:49:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IIXM3tKKaNhyy_GXVDEeb2FmSbE.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/177/3138352e3136392e3235322e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:51 +0000
ROA not before:           Sat 22 Oct 2022 04:28:51 +0000
ROA not after:            Sat 21 Oct 2023 04:33:51 +0000
asID:                     51167
IP address blocks:        185.169.252.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:73:96:1a:b3:b0:8a:ae:08:89:cf:ab:2a:1f:de:cf:d4:15:ac:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2085ccded28a68d872cbf19754311e6f616649b1
        Validity
            Not Before: Oct 22 04:28:51 2022 GMT
            Not After : Oct 21 04:33:51 2023 GMT
        Subject: CN=6BC02DBEC125E17652624F6CD3D95C166344A4AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ea:58:d5:1e:ef:2b:97:e3:64:ee:63:c7:0a:
                    68:af:ee:b0:af:b6:f1:f2:bc:0a:3b:87:1e:8d:9c:
                    3b:5f:85:e5:3b:00:fc:01:9e:9a:a7:99:36:f9:e3:
                    e6:13:31:b9:95:98:cd:cc:f3:e2:6f:ec:94:36:bc:
                    fa:24:f0:6c:5f:d3:d2:77:e2:1c:07:ce:3f:b2:11:
                    a2:cb:26:94:b4:01:61:ff:98:28:62:16:21:f1:17:
                    6e:11:75:bc:6e:87:f5:73:73:5b:c7:3a:2a:f2:db:
                    75:4f:63:4a:8f:4f:14:24:3b:31:49:7a:7b:aa:ca:
                    37:e1:08:57:f7:46:72:eb:5a:b0:21:ec:ac:28:3d:
                    23:fb:16:8b:7f:ff:23:0a:a8:ea:73:34:8a:1f:f7:
                    f7:cc:fe:fc:f1:94:5b:d3:77:7e:01:f7:01:da:96:
                    3c:cc:15:2e:5a:1f:80:1e:56:6a:0a:03:f4:dd:b6:
                    2b:cd:8d:09:07:2b:01:f0:68:e4:bf:4c:b2:28:4e:
                    b3:d2:4f:49:50:54:62:12:06:3e:93:18:51:e4:fa:
                    d1:a6:fa:92:11:6f:64:cc:d3:51:61:ff:e3:34:22:
                    2c:77:e4:f9:6d:e3:c1:28:32:07:f2:a8:2b:d2:78:
                    22:f5:8b:51:ae:71:cb:47:d2:75:e5:7d:6f:4d:f0:
                    ac:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C0:2D:BE:C1:25:E1:76:52:62:4F:6C:D3:D9:5C:16:63:44:A4:AE
            X509v3 Authority Key Identifier:
                keyid:20:85:CC:DE:D2:8A:68:D8:72:CB:F1:97:54:31:1E:6F:61:66:49:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/177/2085CCDED28A68D872CBF19754311E6F616649B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIXM3tKKaNhyy_GXVDEeb2FmSbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/177/3138352e3136392e3235322e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.169.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:10:cb:52:8a:31:53:af:0d:85:25:69:72:dd:a8:4d:06:8c:
         b1:63:69:6d:ab:dd:e5:44:7f:a1:74:df:54:6d:12:50:2c:13:
         7c:11:94:c4:3f:1a:70:da:5e:27:40:95:c1:16:38:bd:9a:dc:
         33:a5:aa:15:fa:b3:22:b3:cf:99:0c:52:55:49:df:ae:e1:5f:
         4d:ae:a1:72:70:ec:37:db:38:bb:7f:28:6d:45:0d:89:4f:e7:
         5a:c6:33:55:03:8c:dd:30:5d:ea:39:ed:2a:e1:53:67:f6:94:
         2e:f6:3c:31:d7:86:b5:ef:b7:e9:68:f5:3f:a4:a3:25:16:11:
         ad:d3:b4:de:c5:4c:c9:c4:90:4f:48:4d:a0:a5:05:80:2c:9f:
         13:3f:1b:cf:fa:82:f6:f2:34:95:d6:a8:a5:1c:7f:e6:84:ea:
         8d:30:0e:ee:85:c3:6a:e8:1c:35:51:0e:5c:5d:0b:ec:70:6c:
         b1:d3:77:a7:34:71:b8:ac:a6:2d:a3:5d:18:d7:18:25:17:cd:
         33:d9:69:89:34:23:57:9e:e1:88:ce:fc:c4:7b:fa:da:c3:a9:
         73:b2:a2:ec:44:cf:77:b4:12:d7:bd:66:6d:75:dd:28:28:75:
         94:e3:11:de:fb:fb:d9:f2:8e:f0:d1:1d:7c:2f:55:fe:25:71:
         ae:66:d7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----