Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/4/326130313a3666303a666666653a3a2f34382d3438203d3e203336333531.roa
File:                     326130313a3666303a666666653a3a2f34382d3438203d3e203336333531.roa (raw, json)
Hash identifier:          tNvQTEenjKwXVMnSkWZpO6TP2fLvMe7APxtufU5NLLY=
Subject key identifier:   97:78:2C:4C:23:60:FC:39:78:C7:4D:6D:B9:41:CA:F0:82:FE:20:0D
Certificate issuer:       /CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
Certificate serial:       664E29B4082C94B552DC95C6A3F81E60D0D88FEC
Authority key identifier: A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/4/326130313a3666303a666666653a3a2f34382d3438203d3e203336333531.roa
Signing time:             Sat 22 Oct 2022 04:34:21 +0000
ROA not before:           Sat 22 Oct 2022 04:29:21 +0000
ROA not after:            Sat 21 Oct 2023 04:34:21 +0000
asID:                     36351
IP address blocks:        2a01:6f0:fffe::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:4e:29:b4:08:2c:94:b5:52:dc:95:c6:a3:f8:1e:60:d0:d8:8f:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b65d4709f6cfd999a287789392baa6d3a5dcea
        Validity
            Not Before: Oct 22 04:29:21 2022 GMT
            Not After : Oct 21 04:34:21 2023 GMT
        Subject: CN=97782C4C2360FC3978C74D6DB941CAF082FE200D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e4:c0:cc:e2:f4:44:54:41:33:ba:80:e1:07:
                    26:a1:c6:72:c6:d3:f2:ab:af:0b:6d:5f:54:ee:ae:
                    ea:a0:c3:31:f3:b7:66:96:a6:5c:da:91:67:06:d6:
                    4c:f7:86:a1:3a:1f:5f:b5:2e:05:02:8c:42:65:ec:
                    ae:bf:92:77:cb:8b:70:8a:f0:f1:02:24:f5:d7:fe:
                    ab:b5:62:fb:2a:01:b9:c1:9c:d3:0d:55:f2:73:94:
                    60:0c:8f:96:77:75:f2:25:9b:85:6b:ce:b6:e1:02:
                    7c:63:c3:8a:cb:e8:65:a5:d0:65:e9:9b:2b:54:bf:
                    39:fe:41:f7:aa:ef:86:b3:6e:4a:58:f8:b5:f1:e3:
                    b1:f4:12:02:9e:dd:3b:18:f5:de:be:c0:24:6c:74:
                    43:c4:43:33:60:d6:54:6f:ff:dc:de:b3:ce:08:fb:
                    1d:be:a3:58:43:2d:97:86:26:c7:e3:40:42:20:35:
                    8e:97:fc:0a:3f:d1:26:18:39:e5:10:12:bf:52:70:
                    d6:c1:56:d1:06:a8:9a:d0:55:52:df:b0:66:01:0c:
                    81:59:5d:97:8d:c9:e9:bf:c6:29:fb:cc:5b:ee:02:
                    31:f1:82:21:12:3b:16:cb:4b:80:a5:e1:21:9d:13:
                    50:6a:64:6b:b5:fe:be:da:90:42:30:ed:99:e9:2b:
                    bd:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:78:2C:4C:23:60:FC:39:78:C7:4D:6D:B9:41:CA:F0:82:FE:20:0D
            X509v3 Authority Key Identifier:
                keyid:A6:B6:5D:47:09:F6:CF:D9:99:A2:87:78:93:92:BA:A6:D3:A5:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/A6B65D4709F6CFD999A287789392BAA6D3A5DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prZdRwn2z9mZood4k5K6ptOl3Oo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/4/326130313a3666303a666666653a3a2f34382d3438203d3e203336333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:6f0:fffe::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:74:6c:53:dd:21:cd:50:e6:43:73:b0:24:c0:f0:e4:a7:42:
         b6:07:1f:02:bf:b2:9f:65:a9:43:94:c6:9a:99:9f:a6:74:e2:
         40:43:8e:83:72:e8:d4:f0:72:41:3c:7b:b6:d6:fc:bb:0e:0b:
         7e:19:ec:0f:b7:9a:20:55:d6:4a:f9:2a:44:fc:86:18:64:9b:
         cf:04:01:ef:b0:2a:12:a5:fc:20:c0:0b:bf:8c:a7:06:0c:ad:
         89:38:13:be:16:d1:e8:e3:09:76:9c:f6:3d:15:d9:c6:e5:a4:
         dc:a2:28:7c:19:c4:8b:48:fa:24:d6:c0:ea:de:fd:1d:bb:ca:
         c2:3c:6a:71:16:7d:53:c1:4f:e3:0e:d8:ef:0a:f5:3e:c4:9a:
         3d:e4:23:05:08:4f:6c:4d:84:f2:d9:29:d6:c7:f9:ea:7c:98:
         bd:1e:65:98:d8:31:e8:74:94:49:b7:ae:e1:26:13:5f:2c:e3:
         46:ff:58:69:10:5e:1b:dc:68:53:2d:cb:71:01:01:bd:6d:b9:
         64:dc:fe:79:a5:d6:df:fa:59:09:fd:0e:be:9c:bf:23:ac:64:
         cd:17:ce:81:6f:cc:14:ec:36:64:a1:2a:a6:b0:1e:56:ff:a9:
         05:98:dd:e3:af:4e:55:f4:d4:3a:e5:47:4d:1b:c7:8f:b0:35:
         6d:10:b8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----