Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/36322e3134362e3233322e302f32312d3332203d3e20313431393935.roa
File:                     36322e3134362e3233322e302f32312d3332203d3e20313431393935.roa (raw, json)
Hash identifier:          SnPje5fcPvb9ptH4MKHL3092V4WY3wKbBSlk1f1xlBk=
Subject key identifier:   58:C7:98:41:39:E0:9C:1A:66:71:7D:2B:71:8C:EB:A2:C0:5C:F3:0D
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       7CEF809730617A1F3A743C969073C9BD3BDD5A3B
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/36322e3134362e3233322e302f32312d3332203d3e20313431393935.roa
Signing time:             Thu 16 Mar 2023 21:41:21 +0000
ROA not before:           Thu 16 Mar 2023 21:36:21 +0000
ROA not after:            Thu 14 Mar 2024 21:41:21 +0000
asID:                     141995
IP address blocks:        62.146.232.0/21 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ef:80:97:30:61:7a:1f:3a:74:3c:96:90:73:c9:bd:3b:dd:5a:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Mar 16 21:36:21 2023 GMT
            Not After : Mar 14 21:41:21 2024 GMT
        Subject: CN=58C7984139E09C1A66717D2B718CEBA2C05CF30D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:21:91:9a:27:bc:63:00:f7:97:d8:56:ac:ae:
                    38:6a:07:7b:54:38:3d:4b:1e:6c:e1:08:aa:b2:a7:
                    d2:a6:b8:10:cf:fc:03:a6:f1:94:14:88:35:90:bb:
                    6a:59:55:a3:31:87:21:e6:80:77:35:fa:0a:6a:45:
                    c7:36:f5:1e:96:cc:d1:0c:be:eb:79:e6:4d:99:27:
                    35:3f:57:3d:4a:bc:b7:40:2e:2b:75:98:86:88:15:
                    b3:8a:bc:fe:eb:56:17:33:63:de:ae:11:a1:56:a0:
                    e5:fa:5f:ed:7c:fc:14:20:6e:58:6b:d1:e1:b3:69:
                    32:fc:39:de:46:4a:26:ce:a6:b5:6d:c5:43:38:96:
                    4b:52:e3:eb:4a:a5:c0:9c:34:ae:c3:c9:b8:04:a8:
                    4e:ad:bc:43:4a:9f:5d:e1:8b:c4:54:91:09:a7:24:
                    f6:60:1c:a8:36:bf:d6:df:98:a1:0c:e9:ea:06:64:
                    0a:06:3a:d2:09:15:c7:4d:2b:23:dd:3c:bc:67:59:
                    c4:7b:c3:77:1a:a1:f3:be:4a:e2:26:29:41:9c:af:
                    93:97:67:4c:f9:a4:20:13:54:66:12:7d:1c:29:a3:
                    fb:eb:ec:0c:c1:7a:ed:5c:2c:81:a1:bc:39:e2:bb:
                    91:de:a1:37:0c:04:59:bd:04:a4:8b:cd:73:16:84:
                    87:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C7:98:41:39:E0:9C:1A:66:71:7D:2B:71:8C:EB:A2:C0:5C:F3:0D
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/36322e3134362e3233322e302f32312d3332203d3e20313431393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.146.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c7:37:53:2f:b4:f6:c2:ab:fa:ef:ab:9f:0f:fa:b8:00:9a:3a:
         f8:e5:52:c7:6d:c7:75:f7:73:26:ac:b1:82:49:4a:7b:53:97:
         7c:81:44:70:eb:27:4a:6d:8d:00:df:34:b3:00:10:b8:7f:07:
         74:e9:4e:26:ce:ba:b6:10:89:e1:0a:ba:bd:f6:b7:b7:13:e1:
         d2:f3:de:c4:95:af:7e:71:b4:e6:a0:57:48:80:15:6e:bf:9a:
         c5:3b:fc:28:26:fa:c2:d5:39:e8:b4:b1:37:08:bd:b3:54:2f:
         14:5e:86:9e:63:ad:55:a7:d9:89:86:0a:9b:97:83:77:74:b5:
         35:90:59:16:6f:8f:b8:68:15:9b:f9:f4:3a:b2:2a:fc:49:ed:
         ed:ae:e4:e3:a4:98:86:6f:e7:b3:f1:8c:7f:7f:5c:f4:92:bb:
         a5:34:13:d1:8b:70:40:07:fd:1b:b1:89:ac:64:a8:2f:cb:55:
         dd:e3:78:0a:b1:f6:c1:05:1c:b4:45:90:82:db:ee:28:69:71:
         4d:57:fc:e5:31:50:ff:26:ff:96:9e:49:33:1b:cb:07:b2:9e:
         7f:0a:14:b6:4e:19:eb:c7:0e:bc:cb:25:ed:6a:26:69:0f:db:
         6c:05:53:b2:dd:7c:83:18:d0:af:4f:88:6c:be:fa:ba:5b:4d:
         5e:86:2a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----