Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/326130313a3666303a666666663a3a2f34382d3438203d3e203633343733.roa
File:                     326130313a3666303a666666663a3a2f34382d3438203d3e203633343733.roa (raw, json)
Hash identifier:          2C8mhWpe+tFP3GrvGCYPoB/HwJDXoY9G0sBonpjpNyc=
Subject key identifier:   78:96:9B:62:B5:D8:85:F7:73:8A:13:50:46:EE:1D:AD:03:47:83:C2
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       311A4252E69670594DD51840A61BD3779F65C73A
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/326130313a3666303a666666663a3a2f34382d3438203d3e203633343733.roa
Signing time:             Sat 22 Oct 2022 04:34:25 +0000
ROA not before:           Sat 22 Oct 2022 04:29:25 +0000
ROA not after:            Sat 21 Oct 2023 04:34:25 +0000
asID:                     63473
IP address blocks:        2a01:6f0:ffff::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:1a:42:52:e6:96:70:59:4d:d5:18:40:a6:1b:d3:77:9f:65:c7:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:25 2022 GMT
            Not After : Oct 21 04:34:25 2023 GMT
        Subject: CN=78969B62B5D885F7738A135046EE1DAD034783C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:73:b4:6a:34:2e:77:08:a8:1a:de:19:65:bb:
                    33:00:4f:0a:41:11:50:0a:44:da:4f:8e:bd:82:b0:
                    b4:ee:67:b0:6b:f5:d1:1f:34:9a:10:8c:38:27:68:
                    6c:62:ab:6d:29:23:f5:08:bd:20:38:c0:6f:46:19:
                    64:36:2a:4b:38:51:e4:64:7f:fb:e3:64:af:eb:5a:
                    4a:13:30:a9:52:d3:94:2e:05:db:d5:91:38:b0:7d:
                    86:c1:71:f7:45:ce:48:8a:a5:4c:69:a8:fa:48:d3:
                    28:36:24:28:45:85:21:7f:b9:0c:82:1a:9a:93:6a:
                    63:2d:b1:db:d7:08:6c:fe:1e:33:c8:7d:fc:10:fb:
                    d0:25:be:88:c9:0c:e0:23:bc:82:3f:eb:3f:9d:b0:
                    e7:13:fd:e9:49:7f:ae:42:d2:91:81:10:a5:b3:c4:
                    6f:af:25:ff:e1:a1:7f:82:d3:cc:01:f7:71:93:b8:
                    93:a2:f0:d6:d5:4e:59:06:79:aa:92:17:e3:97:88:
                    cb:c5:44:39:81:27:8a:fd:cc:ae:34:33:56:53:67:
                    b4:58:ec:a0:51:f9:07:03:28:b3:5e:26:fd:dc:c8:
                    a1:98:89:50:e7:01:c5:69:30:70:dd:d9:9b:70:be:
                    7e:50:c4:ce:1c:9c:ff:66:3d:5d:4f:65:69:d2:d1:
                    41:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:96:9B:62:B5:D8:85:F7:73:8A:13:50:46:EE:1D:AD:03:47:83:C2
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/326130313a3666303a666666663a3a2f34382d3438203d3e203633343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:6f0:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:61:9e:32:45:aa:64:b8:d9:73:3f:32:4f:e8:98:7a:23:a9:
         6d:23:90:ff:60:96:52:2b:72:76:35:18:c0:40:e9:10:15:35:
         0c:f3:9f:7c:cd:e6:2f:cf:11:16:78:ab:3a:a5:fa:51:62:cc:
         f8:ea:80:26:63:01:e2:a5:e1:4e:e2:62:b5:23:04:55:18:e6:
         58:a5:25:f2:35:85:f5:a6:cc:39:7a:a4:8d:10:3e:28:05:1a:
         a9:b7:1d:e3:c6:04:e4:b0:a0:d0:e3:41:d3:35:6f:fa:a2:d1:
         7a:eb:f1:19:a6:26:78:d9:bc:77:f7:86:0d:d8:dd:39:9b:57:
         c4:7e:c5:47:b3:bf:ff:fa:9b:cd:55:0b:db:06:1c:c8:cf:21:
         a5:cd:42:0f:0f:a2:ed:7d:b3:1a:c6:c5:3e:60:d6:25:4a:de:
         a8:87:5a:f9:12:14:ad:cc:84:39:e8:fb:96:e6:a4:5c:02:30:
         b8:c1:d4:79:46:a6:1b:38:fa:2c:02:7f:29:86:ad:f7:26:8e:
         47:bd:cb:59:1a:8f:4a:be:e0:3f:78:0f:f9:39:01:ab:3f:5a:
         13:2b:dd:f4:c6:d9:f9:25:2c:0f:91:42:e3:73:51:55:f6:7f:
         3a:a8:45:78:34:d5:e8:91:ab:3f:ec:85:7b:63:84:3f:1e:84:
         02:8e:cb:a6
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIUMRpCUuaWcFlN1RhAphvTd59lxzowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMjEwMjIwNDI5MjVaFw0yMzEwMjEwNDM0MjVaMDMxMTAvBgNV
BAMTKDc4OTY5QjYyQjVEODg1Rjc3MzhBMTM1MDQ2RUUxREFEMDM0NzgzQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkc7RqNC53CKga3hlluzMATwpB
EVAKRNpPjr2CsLTuZ7Br9dEfNJoQjDgnaGxiq20pI/UIvSA4wG9GGWQ2Kks4UeRk
f/vjZK/rWkoTMKlS05QuBdvVkTiwfYbBcfdFzkiKpUxpqPpI0yg2JChFhSF/uQyC
GpqTamMtsdvXCGz+HjPIffwQ+9AlvojJDOAjvII/6z+dsOcT/elJf65C0pGBEKWz
xG+vJf/hoX+C08wB93GTuJOi8NbVTlkGeaqSF+OXiMvFRDmBJ4r9zK40M1ZTZ7RY
7KBR+QcDKLNeJv3cyKGYiVDnAcVpMHDd2Ztwvn5QxM4cnP9mPV1PZWnS0UGzAgMB
AAGjggH8MIIB+DAdBgNVHQ4EFgQUeJabYrXYhfdzihNQRu4drQNHg8IwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kxLnRlcnJhdHJhbnNpdC5kZS9yZXBvL1RlcnJhVHJhbnNp
dC80LzMyNjEzMDMxM2EzNjY2MzAzYTY2NjY2NjY2M2EzYTJmMzQzODJkMzQzODIw
M2QzZTIwMzYzMzM0MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoBBvD//zANBgkqhkiG9w0BAQsF
AAOCAQEAVmGeMkWqZLjZcz8yT+iYeiOpbSOQ/2CWUitydjUYwEDpEBU1DPOffM3m
L88RFnirOqX6UWLM+OqAJmMB4qXhTuJitSMEVRjmWKUl8jWF9abMOXqkjRA+KAUa
qbcd48YE5LCg0ONB0zVv+qLReuvxGaYmeNm8d/eGDdjdOZtXxH7FR7O///qbzVUL
2wYcyM8hpc1CDw+i7X2zGsbFPmDWJUreqIda+RIUrcyEOej7luakXAIwuMHUeUam
Gzj6LAJ/KYat9yaOR73LWRqPSr7gP3gP+TkBqz9aEyvd9MbZ+SUsD5FC43NRVfZ/
OqhFeDTV6JGrP+yFe2OEPx6EAo7Lpg==
-----END CERTIFICATE-----