Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/36322e3134362e3137362e302f32312d3332203d3e203430303231.roa
File:                     36322e3134362e3137362e302f32312d3332203d3e203430303231.roa (raw, json)
Hash identifier:          hgyN6mCD2id29u8K78LjuBIv6B0iVR8xYbhKQIbUWbA=
Subject key identifier:   38:46:CE:DB:7D:8A:85:24:11:1A:F9:A2:17:D8:F5:FE:10:1F:79:B2
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       6527E5AC141E978EAC8040BAB5AF914918E2DF3B
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/36322e3134362e3137362e302f32312d3332203d3e203430303231.roa
Signing time:             Thu 16 Mar 2023 21:43:26 +0000
ROA not before:           Thu 16 Mar 2023 21:38:26 +0000
ROA not after:            Thu 14 Mar 2024 21:43:26 +0000
asID:                     40021
IP address blocks:        62.146.176.0/21 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:27:e5:ac:14:1e:97:8e:ac:80:40:ba:b5:af:91:49:18:e2:df:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Mar 16 21:38:26 2023 GMT
            Not After : Mar 14 21:43:26 2024 GMT
        Subject: CN=3846CEDB7D8A8524111AF9A217D8F5FE101F79B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b4:65:0b:44:8b:99:bb:02:e2:50:56:68:bb:
                    be:12:d8:3d:42:74:93:db:20:26:e9:32:00:65:db:
                    d6:b7:72:4b:5d:aa:aa:24:37:78:de:c4:35:d9:e6:
                    04:d3:ee:14:da:bc:03:44:ef:3f:01:bf:76:f2:6c:
                    10:61:61:d8:96:25:40:91:48:ed:82:74:7e:cf:e3:
                    5a:d6:b0:83:a9:bd:f7:fc:eb:fb:0c:22:56:07:1e:
                    13:e3:db:60:97:a3:6d:6e:42:50:7b:8d:c0:02:c9:
                    ff:9c:e1:c8:de:c8:1f:0c:d0:35:22:4c:90:14:17:
                    e7:c6:e2:d2:63:a8:04:f7:dd:34:f0:61:0f:b4:5f:
                    03:2a:d5:bc:9a:04:ba:cb:9c:c6:7a:e6:5d:e6:5b:
                    ae:0d:06:6c:d6:a7:ca:ba:1c:27:8d:6a:88:58:fe:
                    19:3b:33:54:5f:b5:c5:26:6b:30:c1:e3:22:52:39:
                    07:fe:ac:cf:39:dd:ce:93:92:0d:a1:c8:e9:93:84:
                    7a:c3:d1:b2:35:22:e0:ab:fb:4e:a7:ac:df:f1:5b:
                    ee:d5:c7:ef:4d:67:47:67:56:f3:6a:81:20:5d:4a:
                    9d:3c:18:3f:ad:c1:07:a1:4c:af:25:af:80:67:8f:
                    83:00:10:03:c0:30:68:fd:a7:8d:1d:27:56:0f:fa:
                    cc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:46:CE:DB:7D:8A:85:24:11:1A:F9:A2:17:D8:F5:FE:10:1F:79:B2
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/36322e3134362e3137362e302f32312d3332203d3e203430303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.146.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bb:0c:c2:10:61:f8:cf:8f:19:95:ed:91:24:d2:d9:df:46:3e:
         b0:38:39:3a:b8:12:57:8f:4c:0e:18:ad:25:cd:70:ef:95:7a:
         46:66:aa:c0:4b:9d:b8:26:b5:2e:1e:15:ad:08:8e:b4:fa:34:
         07:ce:f4:b9:f0:23:08:03:df:10:8b:b1:23:3d:52:ec:83:68:
         94:2b:c8:6e:3a:5d:74:54:62:62:a7:de:5b:ed:ec:4d:ee:f6:
         27:d1:f3:33:2a:65:f2:01:6c:27:1f:ec:b9:66:33:5d:68:53:
         3d:93:d7:86:b8:57:ff:39:05:92:15:21:ad:2f:42:a9:d9:58:
         5c:08:c2:58:62:fd:3a:56:bf:87:27:d4:51:c4:81:d8:40:16:
         6c:85:e6:5d:14:45:22:77:26:8a:5b:a7:af:e6:22:a9:e1:ec:
         91:54:b3:fd:d2:1a:9c:2f:89:c6:6e:63:9f:73:6c:71:bb:6c:
         6a:ce:b9:0e:7e:79:82:09:a0:33:7e:30:88:3a:59:90:8b:34:
         ce:46:ff:4a:af:23:0c:b4:80:ff:eb:e6:6e:ba:d1:75:d3:61:
         6a:44:45:cb:84:30:f9:69:9f:5c:19:59:d8:30:68:7b:c6:d2:
         bf:d0:96:b1:12:af:aa:5b:d9:ed:d4:9b:39:0c:3f:e0:b0:32:
         11:2f:82:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----