Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/36322e3134362e3136382e302f32312d3332203d3e203430303231.roa
File:                     36322e3134362e3136382e302f32312d3332203d3e203430303231.roa (raw, json)
Hash identifier:          oX19Dv0F+V9DqY4qRaUNcq0iYBCUlzQsxHoGndXK9L4=
Subject key identifier:   E4:0D:A4:85:20:6C:8F:1E:5D:31:49:8B:9D:45:30:DC:56:EE:6C:FD
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       68A53F93E7189AF236C8754FB13A296AE79884D6
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/36322e3134362e3136382e302f32312d3332203d3e203430303231.roa
Signing time:             Thu 16 Mar 2023 21:42:43 +0000
ROA not before:           Thu 16 Mar 2023 21:37:43 +0000
ROA not after:            Thu 14 Mar 2024 21:42:43 +0000
asID:                     40021
IP address blocks:        62.146.168.0/21 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:a5:3f:93:e7:18:9a:f2:36:c8:75:4f:b1:3a:29:6a:e7:98:84:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Mar 16 21:37:43 2023 GMT
            Not After : Mar 14 21:42:43 2024 GMT
        Subject: CN=E40DA485206C8F1E5D31498B9D4530DC56EE6CFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1b:f2:b0:28:fd:e3:29:f1:94:2d:fe:da:5f:
                    28:ad:ef:ad:5d:6f:69:28:63:98:93:d3:7e:20:0c:
                    9d:94:0b:1d:be:10:12:0a:8c:d5:e8:ad:5e:20:2a:
                    04:35:22:59:e0:2f:d2:39:85:90:76:fb:0b:3b:43:
                    84:f7:b8:0e:32:a9:71:ad:c3:4b:55:34:32:a3:d2:
                    18:a2:ef:b7:89:9e:52:35:84:83:aa:47:20:c9:3c:
                    b3:a7:5c:34:17:18:22:e2:74:3f:aa:25:03:72:d3:
                    98:0d:dd:8c:aa:ab:e3:96:cd:5e:fc:39:01:ad:40:
                    74:30:d8:45:1a:7d:f6:77:e5:c3:db:ea:7f:49:13:
                    fb:98:7e:1d:de:d4:f4:be:24:08:aa:ac:09:a8:d7:
                    c5:7c:39:ee:87:24:96:ca:85:f2:25:b5:b8:ef:df:
                    d9:70:aa:c8:f2:08:85:01:df:22:e1:c1:04:cf:b5:
                    37:65:ee:8d:d0:f1:4a:ad:47:b7:ad:b7:15:77:2d:
                    1d:4b:50:21:06:25:a8:0f:70:c4:24:c7:de:94:33:
                    94:02:44:58:b9:55:a1:6f:7b:6f:fe:62:66:ff:3e:
                    48:90:dd:09:45:06:ea:96:51:d5:82:96:80:ef:3b:
                    a9:ba:5b:93:8a:cd:66:e0:77:7b:80:93:37:83:6c:
                    9f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0D:A4:85:20:6C:8F:1E:5D:31:49:8B:9D:45:30:DC:56:EE:6C:FD
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/36322e3134362e3136382e302f32312d3332203d3e203430303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.146.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         89:c0:71:bd:f4:ab:bd:fd:bc:8b:66:d9:09:24:77:db:2f:09:
         04:06:38:53:d2:31:a5:b6:70:b1:d1:93:a2:1c:77:6a:57:35:
         e5:3a:5d:09:9d:d5:5b:fe:36:b9:7a:de:4c:46:e4:7d:69:2f:
         86:a9:32:fd:88:5e:c3:eb:07:c3:48:a5:d2:9d:ef:c1:9d:87:
         05:4e:fb:e2:96:86:02:45:dd:58:46:9a:79:15:e2:60:a3:2f:
         84:cc:d9:31:7f:86:db:70:58:79:a3:8f:b8:49:30:60:c0:36:
         98:7c:54:1c:09:26:33:91:00:e7:44:6c:cf:91:49:80:e7:74:
         43:e1:0c:6c:7c:a9:a9:24:10:ee:39:48:f2:67:47:77:f9:53:
         1a:3a:4a:ea:32:64:55:04:99:cb:64:ca:7a:09:69:01:49:69:
         2e:23:3f:bf:4d:ea:e5:fe:8f:9d:8e:00:c7:20:23:24:41:34:
         ae:9e:8d:f2:f4:81:13:bc:71:aa:30:72:f2:2b:1c:83:8d:fa:
         56:4c:e8:c8:15:74:ec:d8:8a:db:7b:b4:11:a9:38:1d:9d:52:
         35:92:54:a8:1b:6b:9b:25:e9:04:04:28:e6:dd:4e:a9:a2:00:
         0e:b7:33:ee:40:16:1a:d4:aa:e3:ed:5c:a4:11:2b:57:c4:fd:
         13:df:7f:f2
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUaKU/k+cYmvI2yHVPsTopaueYhNYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMzAzMTYyMTM3NDNaFw0yNDAzMTQyMTQyNDNaMDMxMTAvBgNV
BAMTKEU0MERBNDg1MjA2QzhGMUU1RDMxNDk4QjlENDUzMERDNTZFRTZDRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHG/KwKP3jKfGULf7aXyit761d
b2koY5iT034gDJ2UCx2+EBIKjNXorV4gKgQ1IlngL9I5hZB2+ws7Q4T3uA4yqXGt
w0tVNDKj0hii77eJnlI1hIOqRyDJPLOnXDQXGCLidD+qJQNy05gN3Yyqq+OWzV78
OQGtQHQw2EUaffZ35cPb6n9JE/uYfh3e1PS+JAiqrAmo18V8Oe6HJJbKhfIltbjv
39lwqsjyCIUB3yLhwQTPtTdl7o3Q8UqtR7ettxV3LR1LUCEGJagPcMQkx96UM5QC
RFi5VaFve2/+Ymb/PkiQ3QlFBuqWUdWCloDvO6m6W5OKzWbgd3uAkzeDbJ8ZAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQU5A2khSBsjx5dMUmLnUUw3FbubP0wHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zNjMyMmUzMTM0MzYyZTMxMzYzODJlMzAyZjMyMzEyZDMzMzIyMDNkM2UyMDM0
MzAzMDMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAM+kqgwDQYJKoZIhvcNAQELBQADggEBAInAcb30
q739vItm2Qkkd9svCQQGOFPSMaW2cLHRk6Icd2pXNeU6XQmd1Vv+Nrl63kxG5H1p
L4apMv2IXsPrB8NIpdKd78GdhwVO++KWhgJF3VhGmnkV4mCjL4TM2TF/httwWHmj
j7hJMGDANph8VBwJJjORAOdEbM+RSYDndEPhDGx8qakkEO45SPJnR3f5Uxo6Suoy
ZFUEmctkynoJaQFJaS4jP79N6uX+j52OAMcgIyRBNK6ejfL0gRO8caowcvIrHION
+lZM6MgVdOzYitt7tBGpOB2dUjWSVKgba5sl6QQEKObdTqmiAA63M+5AFhrUquPt
XKQRK1fE/RPff/I=
-----END CERTIFICATE-----