Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/108/34352e38352e3234392e302f32342d3332203d3e203531313637.roa
File:                     34352e38352e3234392e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          ixmFM8u/yU6eDnyn8vS1eTKj1gcW7stycDibQ0nXJqk=
Subject key identifier:   C0:7E:9A:28:D3:F7:50:97:2A:48:16:A2:BF:8F:42:F7:1B:6A:12:83
Certificate issuer:       /CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
Certificate serial:       0C539933FA6542F0C8593E984D31319FC6EA746F
Authority key identifier: 79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/108/34352e38352e3234392e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:39 +0000
ROA not before:           Sat 22 Oct 2022 04:28:39 +0000
ROA not after:            Sat 21 Oct 2023 04:33:39 +0000
asID:                     51167
IP address blocks:        45.85.249.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:53:99:33:fa:65:42:f0:c8:59:3e:98:4d:31:31:9f:c6:ea:74:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
        Validity
            Not Before: Oct 22 04:28:39 2022 GMT
            Not After : Oct 21 04:33:39 2023 GMT
        Subject: CN=C07E9A28D3F750972A4816A2BF8F42F71B6A1283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e4:37:7c:dd:48:0a:7f:af:f9:ba:3d:90:72:
                    4e:ac:3f:15:50:47:33:63:de:7c:6e:33:6b:c7:35:
                    34:a2:9f:88:6d:18:bb:9a:70:6e:37:ee:97:04:04:
                    e2:50:e1:58:8b:30:4e:33:1e:bd:e2:05:a4:35:ae:
                    d1:10:f3:f0:62:be:37:52:12:e3:f1:74:34:b5:1a:
                    34:ae:7c:6e:3c:6a:45:a3:34:5c:e4:aa:e0:e0:18:
                    c0:83:04:68:ec:df:b4:a8:04:0b:b6:b4:26:a4:a4:
                    2d:99:cb:01:fd:21:73:4d:d1:0a:d8:bb:b0:f5:b3:
                    42:a9:70:6d:09:9f:92:3e:cb:e3:23:52:8f:2a:03:
                    f8:b5:be:ca:78:da:22:a1:c6:6d:65:08:0f:88:bf:
                    7a:f2:4c:c1:e7:9c:d1:14:3d:e9:b7:83:ba:42:68:
                    32:18:a6:78:fd:5c:25:43:7a:60:07:de:d2:89:a6:
                    86:6d:f2:8b:e0:42:98:56:a5:9d:01:21:b8:ca:41:
                    a2:3f:5c:e7:27:7c:c8:1f:c9:e9:34:34:5e:a4:4c:
                    f5:b6:3b:1b:1b:28:8f:6e:59:3d:8c:90:f8:30:b0:
                    7b:b4:59:cd:ce:2f:21:27:38:50:14:33:bb:52:96:
                    58:36:5f:f2:88:2a:d4:2c:5b:97:74:1d:1f:5d:65:
                    9d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:7E:9A:28:D3:F7:50:97:2A:48:16:A2:BF:8F:42:F7:1B:6A:12:83
            X509v3 Authority Key Identifier:
                keyid:79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/79131A4E3CC0851C2ED1363D6982E7436D3DF9F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/34352e38352e3234392e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.85.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:11:42:90:f6:d6:92:1c:19:02:ca:89:e9:ce:4b:ed:af:81:
         6d:25:e6:aa:6f:29:dc:c7:d2:a7:2f:bb:9b:9b:9a:ab:20:7e:
         ed:ff:00:79:59:75:d6:ff:9a:ac:15:f7:9e:6a:95:ef:e6:89:
         d7:85:d4:76:86:16:33:21:8f:94:21:37:31:3f:20:10:3b:0b:
         9c:2f:f0:6f:12:da:c6:06:ce:fe:81:0d:8d:81:13:bb:e5:d6:
         55:01:21:cf:1c:59:0f:52:42:bc:d6:95:00:05:5d:93:78:c4:
         5f:59:34:42:26:c6:de:d7:94:2e:4f:2a:9a:c9:bc:16:e7:e5:
         74:4d:8d:32:0d:76:c7:74:8d:d7:92:50:ef:69:bf:ec:14:eb:
         c0:4f:b4:79:dd:e8:ed:5a:5f:1e:fd:26:b8:e4:68:05:04:32:
         2d:91:71:72:20:b2:11:4b:ac:7d:ca:6f:10:b2:98:1e:c9:c8:
         0f:63:48:53:41:18:ce:b4:e6:93:f8:8b:e7:70:13:6a:a1:94:
         9c:bc:80:f5:02:ae:b5:e3:a6:97:2c:a7:69:1b:6c:7d:49:69:
         9c:ad:1e:1f:a1:09:e4:c1:55:cc:61:bb:5e:7a:54:54:0d:13:
         dc:f8:e9:20:2d:23:7d:35:e0:61:ad:03:e8:f6:b8:23:05:59:
         8a:43:ac:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----