Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/188/36322e332e392e302f32342d3234203d3e20323031333431.roa
File:                     36322e332e392e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier:          SPJHdTZOiT/R7oqXghKB3m6dTvVjw1S6ut3yEpcGqpU=
Subject key identifier:   F5:9B:D8:1B:BF:00:61:75:D1:12:53:BD:DA:22:A2:82:EB:97:48:C1
Certificate issuer:       /CN=8bc6f5105c9a657b0cc2f36ec883871e844a026f
Certificate serial:       3CAF3EEA09955DB64D9F619BA401328CA2621FD3
Authority key identifier: 8B:C6:F5:10:5C:9A:65:7B:0C:C2:F3:6E:C8:83:87:1E:84:4A:02:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i8b1EFyaZXsMwvNuyIOHHoRKAm8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/188/36322e332e392e302f32342d3234203d3e20323031333431.roa
Signing time:             Sat 22 Oct 2022 04:33:50 +0000
ROA not before:           Sat 22 Oct 2022 04:28:50 +0000
ROA not after:            Sat 21 Oct 2023 04:33:50 +0000
asID:                     201341
IP address blocks:        62.3.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:af:3e:ea:09:95:5d:b6:4d:9f:61:9b:a4:01:32:8c:a2:62:1f:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bc6f5105c9a657b0cc2f36ec883871e844a026f
        Validity
            Not Before: Oct 22 04:28:50 2022 GMT
            Not After : Oct 21 04:33:50 2023 GMT
        Subject: CN=F59BD81BBF006175D11253BDDA22A282EB9748C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:31:b3:fa:fe:12:1d:3d:3d:d9:60:40:71:83:
                    6e:9b:ad:43:35:f6:9e:36:5e:46:e8:96:b1:a1:27:
                    34:1c:98:95:b0:b7:29:ad:fa:de:09:0d:a0:5d:c0:
                    e7:82:5f:b0:06:6c:6f:dc:ba:54:9d:0d:f8:82:01:
                    bf:9d:87:aa:ee:ee:3e:6e:2a:ed:55:00:c5:c4:3e:
                    97:80:60:8e:41:4f:d0:84:36:b1:65:7a:2e:bd:df:
                    b7:4e:c6:0c:5a:7b:dd:3f:8d:24:1b:88:c6:00:03:
                    a8:87:3d:65:13:a8:21:1d:94:6f:28:cd:37:6d:e0:
                    9f:cf:97:0b:ce:98:ff:7c:f2:c9:b1:58:07:41:eb:
                    36:9c:52:b1:e1:d1:1c:60:9b:da:1b:36:9c:6d:cc:
                    12:d1:5d:5f:8e:67:fc:3f:22:1a:ed:9b:37:6b:7e:
                    a1:92:1d:c6:9d:8d:db:b1:d8:88:8f:01:a0:66:27:
                    f1:af:fd:27:4f:d4:fc:9a:55:57:c8:c9:e8:72:56:
                    0f:72:9d:d1:22:44:32:da:ed:78:50:41:0a:a2:18:
                    fe:8f:08:67:13:02:eb:a5:92:82:6f:99:7a:e2:b5:
                    32:f0:00:e8:4c:2d:e9:07:79:92:ab:f9:41:22:fa:
                    4a:b1:24:e5:d9:43:a0:3d:7d:54:26:2f:92:0e:0e:
                    50:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:9B:D8:1B:BF:00:61:75:D1:12:53:BD:DA:22:A2:82:EB:97:48:C1
            X509v3 Authority Key Identifier:
                keyid:8B:C6:F5:10:5C:9A:65:7B:0C:C2:F3:6E:C8:83:87:1E:84:4A:02:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/188/8BC6F5105C9A657B0CC2F36EC883871E844A026F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8b1EFyaZXsMwvNuyIOHHoRKAm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/188/36322e332e392e302f32342d3234203d3e20323031333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:19:bb:55:ad:fd:34:c3:a3:8f:f1:33:f0:2b:e6:31:26:83:
         31:85:96:7b:00:84:81:49:c9:d2:cc:3c:1e:63:60:b1:46:0f:
         d4:4b:26:e3:1d:5f:e0:0b:99:67:a7:56:2c:5c:ab:b0:28:0f:
         16:c2:29:66:eb:14:b1:1f:a2:4f:d9:c1:c2:71:9f:cf:60:94:
         40:32:b2:87:f6:6a:ab:13:1f:10:38:cd:8c:48:bf:41:1f:27:
         58:0b:d1:af:5c:7b:94:92:3b:87:31:d3:1a:c1:ae:e4:12:a5:
         1f:a2:76:5d:56:bf:80:0f:18:12:fa:64:df:68:ce:a7:e5:26:
         91:77:db:42:9d:43:ed:2a:3b:d7:96:8d:09:c9:0a:6b:ed:9a:
         1c:b9:1c:7c:ca:73:75:b2:77:63:12:a8:68:4d:d9:a0:ef:7e:
         e2:9f:5f:09:79:52:9f:d8:27:c7:3a:94:bf:17:c7:ee:8f:ff:
         da:93:e4:a5:f4:b4:9f:f2:60:19:41:a5:80:b5:29:01:61:98:
         12:fc:45:a1:59:c2:90:f0:59:5e:43:2d:27:5e:b6:78:74:1e:
         a4:9c:e7:6f:c5:b4:09:a6:09:ce:60:96:d4:ba:33:db:ee:6c:
         0d:da:17:a4:40:8b:8e:34:fe:48:a4:53:bf:e0:4a:da:b8:c3:
         94:de:b9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----