Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/36322e3134362e3232342e302f32312d3332203d3e203430303231.roa
File:                     36322e3134362e3232342e302f32312d3332203d3e203430303231.roa (raw, json)
Hash identifier:          D1MgkB+3J+r7DuARESCJBTsUqIR/nX2G25he6UkOzNM=
Subject key identifier:   03:14:AB:8D:F4:BD:1C:A8:B8:79:4F:CB:01:D3:E9:6B:04:1E:73:6D
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       61E39E7E1415CCB221C46C70505B44250D9F4A99
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/36322e3134362e3232342e302f32312d3332203d3e203430303231.roa
Signing time:             Thu 23 Feb 2023 17:15:39 +0000
ROA not before:           Thu 23 Feb 2023 17:10:39 +0000
ROA not after:            Thu 22 Feb 2024 17:15:39 +0000
asID:                     40021
IP address blocks:        62.146.224.0/21 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:e3:9e:7e:14:15:cc:b2:21:c4:6c:70:50:5b:44:25:0d:9f:4a:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Feb 23 17:10:39 2023 GMT
            Not After : Feb 22 17:15:39 2024 GMT
        Subject: CN=0314AB8DF4BD1CA8B8794FCB01D3E96B041E736D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:32:53:3f:20:56:85:fd:6b:09:1d:a1:03:ed:
                    b3:55:aa:1f:42:54:fb:1e:5a:8b:2f:a9:95:65:db:
                    27:a3:d0:04:5a:46:87:0a:1a:76:89:2d:09:56:ca:
                    02:ed:d3:62:d0:e4:2e:11:29:86:bc:e9:73:42:23:
                    ca:4c:e4:9d:3f:5a:41:f3:6f:3e:02:a8:35:29:07:
                    e7:10:c5:7d:16:5a:7c:8b:5a:1c:4b:94:7c:51:42:
                    d0:26:fe:10:fc:e5:a2:93:86:86:7a:3b:8e:96:9d:
                    67:b5:44:31:62:93:f8:3a:16:75:41:4d:52:96:76:
                    1e:6a:b4:68:44:17:b7:1c:9f:af:41:55:28:66:78:
                    97:5c:ba:fb:c6:4c:5a:17:e2:97:c7:a9:11:25:3b:
                    73:76:1d:86:10:03:7d:fb:5c:2a:b8:4b:1a:e8:73:
                    dc:db:42:ad:f1:70:d9:b6:65:a7:22:3d:6a:4a:f8:
                    ce:4f:04:51:a6:80:32:b1:96:76:90:36:c5:1f:46:
                    f0:67:01:1f:82:d0:d8:72:14:1b:40:e3:69:ac:c3:
                    e9:83:52:40:de:7d:3d:8b:91:79:59:dc:dc:3f:2c:
                    c3:60:d1:00:b3:60:e1:7e:a0:5d:83:df:74:18:c5:
                    01:27:57:86:24:27:8e:42:91:ac:65:02:65:24:e5:
                    5f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:14:AB:8D:F4:BD:1C:A8:B8:79:4F:CB:01:D3:E9:6B:04:1E:73:6D
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/36322e3134362e3232342e302f32312d3332203d3e203430303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.146.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         88:25:0c:c0:95:29:86:e7:92:0b:9a:50:ce:3b:85:56:43:2a:
         46:98:54:09:d0:1a:04:85:85:8a:94:59:d3:1e:22:af:c6:5b:
         eb:d3:fa:03:23:e8:5b:e5:78:ed:ed:16:1b:16:46:14:b6:55:
         8c:41:a2:d5:09:4e:21:87:d2:a4:cd:4c:67:f3:67:6e:5a:ef:
         ad:a8:99:11:e9:cc:fc:0f:fb:05:52:7f:53:7e:ac:bf:09:86:
         59:f8:ca:e0:d1:df:57:45:40:2a:95:f4:97:86:c1:cc:74:99:
         11:74:6b:83:5c:a2:65:6f:c5:78:99:4f:28:3a:59:7d:89:ed:
         b6:d5:6e:63:64:3c:0a:f8:2a:9f:27:cc:d5:2c:e5:18:f0:a3:
         7f:eb:6c:1a:3f:1a:35:98:22:29:4d:37:97:cc:68:32:b2:7b:
         20:9e:dc:6b:30:a2:c1:5f:81:20:64:02:5f:e7:90:db:9f:a2:
         2f:44:7d:91:c5:d7:c2:f2:dd:7c:86:3f:64:de:4e:d2:7b:59:
         ab:4a:3b:3f:64:7a:dd:3e:14:39:90:6e:1f:98:b1:8e:a6:2b:
         18:b2:f5:0e:cf:37:c4:c6:ce:22:44:5a:8e:12:94:63:10:79:
         c8:a0:b5:dd:00:04:58:24:4b:ec:56:6d:32:11:20:a8:bb:36:
         d3:df:24:e0
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUYeOefhQVzLIhxGxwUFtEJQ2fSpkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMzAyMjMxNzEwMzlaFw0yNDAyMjIxNzE1MzlaMDMxMTAvBgNV
BAMTKDAzMTRBQjhERjRCRDFDQThCODc5NEZDQjAxRDNFOTZCMDQxRTczNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPMlM/IFaF/WsJHaED7bNVqh9C
VPseWosvqZVl2yej0ARaRocKGnaJLQlWygLt02LQ5C4RKYa86XNCI8pM5J0/WkHz
bz4CqDUpB+cQxX0WWnyLWhxLlHxRQtAm/hD85aKThoZ6O46WnWe1RDFik/g6FnVB
TVKWdh5qtGhEF7ccn69BVShmeJdcuvvGTFoX4pfHqRElO3N2HYYQA337XCq4Sxro
c9zbQq3xcNm2ZaciPWpK+M5PBFGmgDKxlnaQNsUfRvBnAR+C0NhyFBtA42msw+mD
UkDefT2LkXlZ3Nw/LMNg0QCzYOF+oF2D33QYxQEnV4YkJ45CkaxlAmUk5V8rAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUAxSrjfS9HKi4eU/LAdPpawQec20wHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zNjMyMmUzMTM0MzYyZTMyMzIzNDJlMzAyZjMyMzEyZDMzMzIyMDNkM2UyMDM0
MzAzMDMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAM+kuAwDQYJKoZIhvcNAQELBQADggEBAIglDMCV
KYbnkguaUM47hVZDKkaYVAnQGgSFhYqUWdMeIq/GW+vT+gMj6FvleO3tFhsWRhS2
VYxBotUJTiGH0qTNTGfzZ25a762omRHpzPwP+wVSf1N+rL8Jhln4yuDR31dFQCqV
9JeGwcx0mRF0a4NcomVvxXiZTyg6WX2J7bbVbmNkPAr4Kp8nzNUs5Rjwo3/rbBo/
GjWYIilNN5fMaDKyeyCe3GswosFfgSBkAl/nkNufoi9EfZHF18Ly3XyGP2TeTtJ7
WatKOz9ket0+FDmQbh+YsY6mKxiy9Q7PN8TGziJEWo4SlGMQecigtd0ABFgkS+xW
bTIRIKi7NtPfJOA=
-----END CERTIFICATE-----