Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/326130313a3666303a3130303a3a2f34302d3438203d3e203432333636.roa
File:                     326130313a3666303a3130303a3a2f34302d3438203d3e203432333636.roa (raw, json)
Hash identifier:          xZAut6LfOtvUX24uhJoNYjn/p6erYlZTNNo9+lzfa7s=
Subject key identifier:   35:74:E0:80:D6:36:23:55:2F:C7:74:7F:4B:F1:57:10:AB:AF:E6:20
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       046D047E656E4732A46E662284065ABBD6C1B80B
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/326130313a3666303a3130303a3a2f34302d3438203d3e203432333636.roa
Signing time:             Sat 22 Oct 2022 04:34:23 +0000
ROA not before:           Sat 22 Oct 2022 04:29:23 +0000
ROA not after:            Sat 21 Oct 2023 04:34:23 +0000
asID:                     42366
IP address blocks:        2a01:6f0:100::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:6d:04:7e:65:6e:47:32:a4:6e:66:22:84:06:5a:bb:d6:c1:b8:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:23 2022 GMT
            Not After : Oct 21 04:34:23 2023 GMT
        Subject: CN=3574E080D63623552FC7747F4BF15710ABAFE620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a8:78:2f:d9:1b:df:7b:45:66:2b:42:a2:58:
                    44:c6:27:d0:f7:8a:30:5f:3a:e4:7d:3c:d9:ec:ea:
                    58:a0:ef:bf:0e:5b:d5:e6:53:db:b7:71:75:76:b3:
                    a4:64:37:ba:dd:d5:5b:d1:0b:99:b2:32:04:0e:8a:
                    0a:56:85:46:f6:c0:0c:1d:05:0a:ce:71:2d:a4:1a:
                    1c:33:5c:ad:03:b5:cd:e4:57:5e:df:7f:d1:d8:db:
                    db:98:30:66:51:6a:33:e2:7a:f4:59:48:83:74:7b:
                    9e:44:c4:7c:df:7c:7f:7a:77:64:6e:72:09:18:9c:
                    bd:7c:97:a3:b4:c9:43:cc:b4:70:1b:16:e5:7d:b6:
                    81:9a:3e:83:d3:3f:c2:2d:10:3e:ce:5c:c7:49:aa:
                    92:57:2e:1e:6d:a4:72:7c:c2:1a:9d:3e:fc:fe:e4:
                    4b:e5:99:08:8a:1f:d0:e2:f7:46:bc:44:07:c1:46:
                    37:05:76:35:bf:2d:47:f7:4d:a6:64:37:56:5f:0d:
                    98:ea:d4:b0:13:11:fd:e9:af:77:ec:8b:bb:b0:00:
                    f7:eb:8c:90:d3:0d:39:d8:a9:3c:a5:2b:8f:e1:3c:
                    5c:e1:bb:8f:52:25:77:cd:49:51:cc:bb:df:0c:45:
                    92:33:13:2e:18:c3:46:e0:61:f8:c8:b7:18:9b:4b:
                    01:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:74:E0:80:D6:36:23:55:2F:C7:74:7F:4B:F1:57:10:AB:AF:E6:20
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/326130313a3666303a3130303a3a2f34302d3438203d3e203432333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:6f0:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         93:bc:a9:88:f9:83:3f:55:8b:f2:75:fd:94:a2:cf:13:bc:67:
         77:23:24:d5:e0:22:b8:ff:e6:69:6a:bd:3a:c8:fb:b2:66:06:
         a9:39:ef:e9:63:79:4b:fc:8d:5b:b6:75:0b:41:2b:54:cd:fe:
         29:bc:c6:35:1f:4d:74:58:ed:3e:9f:be:c5:94:26:13:ba:2d:
         76:88:fc:2b:dd:1c:47:89:ae:dc:50:f4:9a:f1:9e:11:9b:dc:
         69:fd:5c:cd:9d:b6:44:02:be:0c:5d:41:93:18:cf:17:fc:76:
         43:e5:af:94:05:83:f3:c2:54:21:15:8c:9c:98:6b:02:99:ec:
         cd:42:79:f0:c4:87:ad:d3:05:3a:06:a0:36:81:9d:ac:81:c7:
         8c:a2:95:b2:6d:bd:3b:82:6a:67:d7:7c:a7:0f:25:5d:2a:fd:
         c7:3b:a8:bf:19:42:a5:6e:17:96:26:4f:cd:48:c7:77:4e:db:
         a1:fa:da:ee:6a:f4:6f:dd:cd:ab:1a:bb:d1:b0:4e:a0:c3:9b:
         2a:f0:96:cb:0c:44:ab:16:68:71:73:fe:25:9b:18:6c:64:a0:
         a2:7d:82:fb:33:8b:69:da:09:ad:b4:48:bb:8a:23:1f:14:fd:
         6e:9b:ed:a9:e4:65:cc:dd:9a:33:6b:7c:56:f4:f4:f1:f6:9d:
         f7:97:fd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----