Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/326130313a3666303a3a2f34302d3430203d3e203432333636.roa
File:                     326130313a3666303a3a2f34302d3430203d3e203432333636.roa (raw, json)
Hash identifier:          m8kvGu2AnjriE9hv1S5TdPQz2/prQY55L1n5PVFijpg=
Subject key identifier:   6E:DC:AF:6B:A1:80:1B:67:86:75:E3:B9:27:5E:9F:3E:42:FB:5E:91
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       3996D30F1AA457C7BC1569F7542BC9A18378D094
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/326130313a3666303a3a2f34302d3430203d3e203432333636.roa
Signing time:             Sat 04 Feb 2023 07:01:40 +0000
ROA not before:           Sat 04 Feb 2023 06:56:40 +0000
ROA not after:            Sat 03 Feb 2024 07:01:40 +0000
asID:                     42366
IP address blocks:        2a01:6f0::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:96:d3:0f:1a:a4:57:c7:bc:15:69:f7:54:2b:c9:a1:83:78:d0:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Feb  4 06:56:40 2023 GMT
            Not After : Feb  3 07:01:40 2024 GMT
        Subject: CN=6EDCAF6BA1801B678675E3B9275E9F3E42FB5E91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9a:61:97:f8:e2:60:77:33:f6:e0:44:75:b4:
                    18:f8:1a:20:34:9e:2c:a7:ef:5e:ba:b8:84:d2:5d:
                    f3:57:d8:bf:d4:1c:e2:9a:33:13:be:a1:12:9e:ce:
                    88:d3:3a:5c:31:5f:dd:75:01:17:93:79:bd:89:93:
                    51:98:1e:5c:34:b7:a3:9b:97:10:eb:a0:6c:60:c1:
                    86:0f:8a:32:55:5e:38:b7:4e:39:63:e8:55:38:32:
                    a0:bb:7d:0e:da:08:cf:b4:cc:46:26:fe:70:f8:94:
                    71:36:ea:c2:89:f7:67:26:5f:4d:b9:77:3c:ba:bb:
                    43:a7:0f:a9:94:ac:24:cf:4c:55:85:5c:05:2e:3c:
                    7f:60:64:02:c5:c1:c2:d7:df:f9:e6:d1:f3:96:86:
                    3a:e5:1e:29:fb:6a:1a:b3:82:29:1e:0b:ac:18:07:
                    94:8c:59:5c:a3:08:b9:23:a5:89:0d:ec:11:cf:94:
                    54:6a:e4:45:3c:c5:cb:f7:71:f0:8a:28:43:8c:69:
                    a2:0e:c8:9a:a3:2e:de:5e:d7:2d:14:c2:b1:63:c6:
                    7c:66:f0:83:7a:77:48:53:68:48:77:e3:37:8f:00:
                    c4:52:64:0a:08:ca:67:b0:16:b0:f8:f6:b3:e5:dd:
                    b8:8c:0f:9e:66:64:5b:6c:f2:fe:19:a8:c6:57:99:
                    e6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DC:AF:6B:A1:80:1B:67:86:75:E3:B9:27:5E:9F:3E:42:FB:5E:91
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/326130313a3666303a3a2f34302d3430203d3e203432333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:6f0::/40

    Signature Algorithm: sha256WithRSAEncryption
         6e:f9:fb:db:b1:f5:58:32:9a:1c:42:7e:5d:04:27:98:a6:7b:
         2f:93:f6:42:e6:df:9a:15:65:a1:ae:f6:06:70:07:95:bb:10:
         aa:62:15:98:3e:96:ee:bd:70:5d:0f:92:fb:d0:02:7f:7c:ec:
         c7:1f:74:f3:e4:d6:f8:02:c1:14:e7:ae:af:7a:91:ac:28:5c:
         fe:b6:f5:35:07:49:ec:41:51:b5:04:44:bc:d3:67:29:51:9b:
         30:2d:df:f8:b1:3b:0b:5c:fc:41:54:68:62:03:ea:ff:4e:91:
         da:fa:55:ae:0f:1d:41:fa:5c:17:46:09:bc:0b:18:49:0b:bb:
         1e:0e:64:5e:91:0b:5c:b8:ec:e2:64:64:c0:ae:42:6b:95:eb:
         ba:ca:f0:8d:61:ee:a6:7b:a7:69:c5:78:75:58:86:5e:58:41:
         6e:88:21:5b:ec:d3:d1:b0:dc:31:71:fd:9d:15:1b:26:f9:ac:
         69:68:0e:bc:ed:68:83:2e:f6:ec:f9:eb:99:77:bc:15:7c:0d:
         f3:84:41:40:99:76:ef:f9:72:43:28:6e:52:97:48:cd:13:ae:
         1e:d0:1d:5a:a9:31:f6:96:22:92:eb:66:e1:b8:80:73:90:75:
         b3:94:f3:bf:65:13:89:c8:87:e0:b3:60:b4:fa:00:b9:d5:a6:
         00:05:d7:f4
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUOZbTDxqkV8e8FWn3VCvJoYN40JQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMzAyMDQwNjU2NDBaFw0yNDAyMDMwNzAxNDBaMDMxMTAvBgNV
BAMTKDZFRENBRjZCQTE4MDFCNjc4Njc1RTNCOTI3NUU5RjNFNDJGQjVFOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7mmGX+OJgdzP24ER1tBj4GiA0
niyn7166uITSXfNX2L/UHOKaMxO+oRKezojTOlwxX911AReTeb2Jk1GYHlw0t6Ob
lxDroGxgwYYPijJVXji3Tjlj6FU4MqC7fQ7aCM+0zEYm/nD4lHE26sKJ92cmX025
dzy6u0OnD6mUrCTPTFWFXAUuPH9gZALFwcLX3/nm0fOWhjrlHin7ahqzgikeC6wY
B5SMWVyjCLkjpYkN7BHPlFRq5EU8xcv3cfCKKEOMaaIOyJqjLt5e1y0UwrFjxnxm
8IN6d0hTaEh34zePAMRSZAoIymewFrD49rPl3biMD55mZFts8v4ZqMZXmebTAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUbtyva6GAG2eGdeO5J16fPkL7XpEwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4Zo
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zMjYxMzAzMTNhMzY2NjMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzQzMjMz
MzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGACoBBvAAMA0GCSqGSIb3DQEBCwUAA4IBAQBu+fvbsfVY
MpocQn5dBCeYpnsvk/ZC5t+aFWWhrvYGcAeVuxCqYhWYPpbuvXBdD5L70AJ/fOzH
H3Tz5Nb4AsEU566vepGsKFz+tvU1B0nsQVG1BES802cpUZswLd/4sTsLXPxBVGhi
A+r/TpHa+lWuDx1B+lwXRgm8CxhJC7seDmRekQtcuOziZGTArkJrleu6yvCNYe6m
e6dpxXh1WIZeWEFuiCFb7NPRsNwxcf2dFRsm+axpaA687WiDLvbs+euZd7wVfA3z
hEFAmXbv+XJDKG5Sl0jNE64e0B1aqTH2liKS62bhuIBzkHWzlPO/ZROJyIfgs2C0
+gC51aYABdf0
-----END CERTIFICATE-----