Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/36322e3134362e3233322e302f32312d3332203d3e203531313637.roa
File:                     36322e3134362e3233322e302f32312d3332203d3e203531313637.roa (raw, json)
Hash identifier:          FNwj+snEgwM6FRdSrwTMCcbC2Otcu6HS/OUOIJQVgs4=
Subject key identifier:   C3:7D:9B:5E:8E:0F:87:D5:10:56:F7:10:41:A6:8D:39:35:F1:9B:27
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       2F2C8BC8EAC43C77DF5167D3A9666FB77BB3C428
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/36322e3134362e3233322e302f32312d3332203d3e203531313637.roa
Signing time:             Fri 17 Mar 2023 21:23:33 +0000
ROA not before:           Fri 17 Mar 2023 21:18:33 +0000
ROA not after:            Fri 15 Mar 2024 21:23:33 +0000
asID:                     51167
IP address blocks:        62.146.232.0/21 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:2c:8b:c8:ea:c4:3c:77:df:51:67:d3:a9:66:6f:b7:7b:b3:c4:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Mar 17 21:18:33 2023 GMT
            Not After : Mar 15 21:23:33 2024 GMT
        Subject: CN=C37D9B5E8E0F87D51056F71041A68D3935F19B27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:13:f6:d0:f5:a8:12:ca:d6:e8:33:23:9f:ff:
                    b0:de:60:3c:cb:41:48:3c:54:a8:bc:ff:f4:1b:8a:
                    84:e6:b8:3c:8a:73:4a:20:05:08:4a:b4:19:61:f4:
                    3a:72:de:7f:b1:73:e9:a0:9b:b5:f6:9a:6c:4d:aa:
                    14:af:36:50:c9:81:26:01:8d:a5:de:d4:3c:b0:cb:
                    3a:c0:e1:d1:74:cd:a9:28:42:ca:4d:bc:ad:75:72:
                    ca:e8:00:e0:aa:15:eb:a4:75:ba:af:ac:06:e7:35:
                    83:cc:f0:87:75:a1:1c:7d:a8:ff:ba:79:d7:24:2a:
                    78:cb:af:ad:3b:b3:a5:4e:b5:09:e8:61:0c:76:67:
                    d0:a4:81:28:fa:fd:4f:12:f1:70:b2:80:cf:6b:85:
                    27:27:4a:90:64:d8:a8:d7:8d:53:0e:a9:f4:d0:1f:
                    17:f3:5f:57:bb:42:d3:34:78:58:f0:ec:40:63:14:
                    de:7f:12:b1:fe:78:0a:0a:ef:2c:b1:70:3e:5c:eb:
                    df:d9:61:a2:2d:9f:fc:e6:ef:41:f0:cb:36:78:43:
                    4a:b1:92:94:3a:0c:49:5b:57:b7:1b:44:9f:57:4a:
                    27:8e:2c:51:d9:83:bf:e5:6f:89:de:fe:e9:35:24:
                    23:ed:be:9f:7e:63:db:e0:51:78:e9:4b:0f:b7:a4:
                    c2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7D:9B:5E:8E:0F:87:D5:10:56:F7:10:41:A6:8D:39:35:F1:9B:27
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/36322e3134362e3233322e302f32312d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.146.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         16:5e:3e:32:68:30:c7:b1:2a:58:99:b9:1d:ae:b5:16:6f:d8:
         b0:b8:19:99:fe:af:61:e0:21:ac:4b:56:e8:7a:1a:0f:da:e7:
         93:fc:7c:01:b7:11:d7:5a:e6:f9:1f:f2:18:9a:be:24:a1:59:
         55:d9:ae:4d:ee:3e:53:b9:d6:04:39:61:1b:ec:33:f5:df:99:
         de:28:a0:1d:bc:88:fd:9c:22:77:13:17:58:66:b6:0a:dc:c5:
         9a:dc:a2:9f:a1:c6:fb:c6:87:4c:1d:73:0b:60:95:c4:78:3d:
         49:78:c5:4b:5f:99:f5:81:c4:d0:87:ef:96:fd:30:3b:1d:a7:
         3e:48:aa:9f:a6:26:c0:1e:57:19:9f:c7:94:90:69:2c:07:63:
         a4:c3:ad:2f:dc:75:56:6d:4e:ef:80:67:25:4d:3a:b6:89:b7:
         0d:1a:7f:80:41:12:ce:24:08:77:27:e0:78:64:57:4b:e9:45:
         29:5f:dd:6e:d9:f0:98:60:ef:cf:5f:70:c8:63:54:f6:af:6c:
         80:e1:ba:22:d8:d6:a6:77:a9:5e:d1:aa:02:63:82:da:9f:83:
         f0:f2:1a:98:b2:a9:17:c2:0b:23:71:13:82:cb:fd:b7:62:6a:
         e3:d7:a8:f2:6b:3e:31:4f:40:bb:85:8d:14:a4:c7:fe:5f:50:
         a6:86:e4:03
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIULyyLyOrEPHffUWfTqWZvt3uzxCgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZiNjVkNDcwOWY2Y2ZkOTk5YTI4Nzc4OTM5MmJhYTZk
M2E1ZGNlYTAeFw0yMzAzMTcyMTE4MzNaFw0yNDAzMTUyMTIzMzNaMDMxMTAvBgNV
BAMTKEMzN0Q5QjVFOEUwRjg3RDUxMDU2RjcxMDQxQTY4RDM5MzVGMTlCMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9E/bQ9agSytboMyOf/7DeYDzL
QUg8VKi8//QbioTmuDyKc0ogBQhKtBlh9Dpy3n+xc+mgm7X2mmxNqhSvNlDJgSYB
jaXe1DywyzrA4dF0zakoQspNvK11csroAOCqFeukdbqvrAbnNYPM8Id1oRx9qP+6
edckKnjLr607s6VOtQnoYQx2Z9CkgSj6/U8S8XCygM9rhScnSpBk2KjXjVMOqfTQ
HxfzX1e7QtM0eFjw7EBjFN5/ErH+eAoK7yyxcD5c69/ZYaItn/zm70HwyzZ4Q0qx
kpQ6DElbV7cbRJ9XSieOLFHZg7/lb4ne/uk1JCPtvp9+Y9vgUXjpSw+3pMK3AgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUw32bXo4Ph9UQVvcQQaaNOTXxmycwHwYDVR0j
BBgwFoAUprZdRwn2z9mZood4k5K6ptOl3OowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzQvQTZCNjVENDcwOUY2Q0ZEOTk5QTI4Nzc4OTM5MkJBQTZE
M0E1RENFQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ByWmRSd24yejltWm9v
ZDRrNUs2cHRPbDNPby5jZXIwgYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4Zs
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
NC8zNjMyMmUzMTM0MzYyZTMyMzMzMjJlMzAyZjMyMzEyZDMzMzIyMDNkM2UyMDM1
MzEzMTM2Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAM+kugwDQYJKoZIhvcNAQELBQADggEBABZePjJo
MMexKliZuR2utRZv2LC4GZn+r2HgIaxLVuh6Gg/a55P8fAG3Edda5vkf8hiaviSh
WVXZrk3uPlO51gQ5YRvsM/Xfmd4ooB28iP2cIncTF1hmtgrcxZrcop+hxvvGh0wd
cwtglcR4PUl4xUtfmfWBxNCH75b9MDsdpz5Iqp+mJsAeVxmfx5SQaSwHY6TDrS/c
dVZtTu+AZyVNOraJtw0af4BBEs4kCHcn4HhkV0vpRSlf3W7Z8Jhg789fcMhjVPav
bIDhuiLY1qZ3qV7RqgJjgtqfg/DyGpiyqRfCCyNxE4LL/bdiauPXqPJrPjFPQLuF
jRSkx/5fUKaG5AM=
-----END CERTIFICATE-----