Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/2/3134392e36322e33362e302f32322d3232203d3e203432333636.roa
File:                     3134392e36322e33362e302f32322d3232203d3e203432333636.roa (raw, json)
Hash identifier:          T3H8Xv+QDlXF+WQCKi/634xW4x/oNMRsDVOX0JvCfbo=
Subject key identifier:   D6:82:BA:9D:70:D4:5B:02:05:38:B0:E5:43:5B:E2:9B:AF:10:0B:01
Certificate issuer:       /CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
Certificate serial:       5B65B2E165EB55DD79B761F4BE5C8099F0DEA4D0
Authority key identifier: 07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/2/3134392e36322e33362e302f32322d3232203d3e203432333636.roa
Signing time:             Mon 21 Dec 2020 10:26:40 +0000
ROA not before:           Mon 21 Dec 2020 10:21:40 +0000
ROA not after:            Mon 20 Dec 2021 10:26:40 +0000
asID:                     42366
IP address blocks:        149.62.36.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:65:b2:e1:65:eb:55:dd:79:b7:61:f4:be:5c:80:99:f0:de:a4:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a8af2b5fe831ff589eb38ae3c025ce871f23e7
        Validity
            Not Before: Dec 21 10:21:40 2020 GMT
            Not After : Dec 20 10:26:40 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:23:64:b2:5a:32:92:cf:87:98:d5:58:0d:81:
                    b4:4a:07:15:38:dd:dc:1e:ae:9a:59:3b:85:c7:42:
                    14:c1:56:7a:13:88:18:4d:ed:f1:a3:d9:09:74:c5:
                    e0:21:92:d1:bb:86:73:3d:ce:b9:25:6d:e1:cf:d0:
                    13:76:9b:2a:e1:00:47:b2:69:6a:eb:58:35:fb:28:
                    e2:f1:8c:d8:2b:fe:1e:ad:63:a8:01:51:f6:98:8e:
                    c1:4f:e3:c0:be:9a:e8:81:21:d9:2c:e0:f9:a9:af:
                    ff:43:59:58:14:bd:53:3f:ff:ff:75:38:56:fd:58:
                    e8:65:a8:ff:bf:f5:85:ae:63:2d:15:1b:d6:c6:df:
                    15:ad:0b:30:71:33:0c:85:50:c0:6f:87:6e:2c:2b:
                    17:7f:cb:8f:be:35:f2:e7:b8:ca:21:87:28:b6:bf:
                    01:81:b3:87:ba:76:85:9b:98:1b:27:81:ad:4c:5c:
                    be:c8:9c:df:0f:0b:15:52:82:00:47:d1:16:d4:a4:
                    a9:71:d7:c0:bb:87:77:01:5a:0e:ba:77:ac:f9:04:
                    4c:61:41:42:59:fb:9b:e7:88:88:8d:27:2d:fc:ea:
                    a4:a9:36:f4:87:57:74:13:b3:25:89:0e:43:58:06:
                    83:21:55:c7:55:64:b2:c6:36:5d:c4:6c:6e:f2:ef:
                    6a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:82:BA:9D:70:D4:5B:02:05:38:B0:E5:43:5B:E2:9B:AF:10:0B:01
            X509v3 Authority Key Identifier:
                keyid:07:A8:AF:2B:5F:E8:31:FF:58:9E:B3:8A:E3:C0:25:CE:87:1F:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/07A8AF2B5FE831FF589EB38AE3C025CE871F23E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6ivK1_oMf9YnrOK48AlzocfI-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/2/3134392e36322e33362e302f32322d3232203d3e203432333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.62.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:72:31:32:27:77:5a:ad:17:f0:bf:11:f4:d4:4a:4e:2d:b8:
         ca:42:41:e6:c7:a1:f3:c9:2a:1a:f6:d7:81:ba:91:93:15:2e:
         f2:b7:b3:34:17:b8:7f:1b:86:85:94:db:8f:ca:d7:d1:ab:f6:
         fe:28:44:d3:51:65:1b:07:81:79:df:4b:e9:0a:ae:38:6e:56:
         7b:c4:29:95:7c:ae:a4:0a:a8:03:2c:4d:d4:f3:1b:a5:d9:5b:
         65:53:ca:41:85:e1:c4:37:f3:be:41:de:a0:60:68:fd:9b:1a:
         6a:18:60:b9:31:66:89:a6:bc:ef:9d:53:65:53:65:cb:25:83:
         f4:60:71:3e:c2:3e:23:41:01:69:9b:34:2a:47:bf:30:b8:ff:
         af:e5:8a:63:6a:b8:2d:16:25:29:0b:8f:69:e1:db:e1:8e:64:
         57:74:f2:24:42:e3:6b:38:a5:2c:66:9d:78:be:34:dd:69:13:
         42:4e:ab:c1:26:fc:0d:47:ba:b2:f0:bf:f8:6e:0f:33:91:b5:
         e4:bc:0f:f6:fe:06:75:03:48:77:e7:37:12:38:97:02:01:e7:
         8d:7b:2f:1e:8c:87:16:fd:0b:2f:db:cf:d2:e2:8f:27:28:96:
         a1:72:fe:df:c0:aa:98:85:55:20:36:70:4b:6a:e9:f7:35:8d:
         81:0d:41:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----