Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/108/39312e3232392e3234342e302f32342d3234203d3e2031323339.roa
File:                     39312e3232392e3234342e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier:          Gg4q6Uue3ydgj5nQbonnNubyhqiHqnXEa13uXGloa0g=
Subject key identifier:   91:89:46:C5:B9:12:50:80:D1:51:63:BE:87:97:34:B9:09:A0:6F:E1
Certificate issuer:       /CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
Certificate serial:       526B369794D0318D2403C81B002C2E03D66666DC
Authority key identifier: 79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/108/39312e3232392e3234342e302f32342d3234203d3e2031323339.roa
Signing time:             Sat 22 Oct 2022 04:33:39 +0000
ROA not before:           Sat 22 Oct 2022 04:28:39 +0000
ROA not after:            Sat 21 Oct 2023 04:33:39 +0000
asID:                     1239
IP address blocks:        91.229.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:6b:36:97:94:d0:31:8d:24:03:c8:1b:00:2c:2e:03:d6:66:66:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
        Validity
            Not Before: Oct 22 04:28:39 2022 GMT
            Not After : Oct 21 04:33:39 2023 GMT
        Subject: CN=918946C5B9125080D15163BE879734B909A06FE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e2:b6:db:da:78:67:41:3e:75:b8:c6:ba:07:
                    76:a1:86:a4:94:a5:8d:e9:8f:bb:3d:3f:c0:fd:d8:
                    df:21:7b:a1:3a:5a:a5:8e:e0:b4:1e:fa:59:38:40:
                    53:14:2f:ae:84:20:f1:a5:36:67:e5:4d:d9:80:35:
                    64:d2:a2:fc:4f:13:b2:e3:0b:96:18:42:f6:4e:81:
                    68:97:02:e6:5e:dd:69:d0:2d:e7:36:b1:51:8c:70:
                    34:81:dd:08:05:7e:54:1a:e9:a8:be:24:a2:65:23:
                    f0:f1:e6:e5:90:9f:72:93:b1:c0:29:26:f8:68:4a:
                    9c:7c:d0:5d:8c:13:5c:fb:36:37:4f:d2:93:9f:91:
                    21:7a:12:13:d3:d1:48:73:29:60:8f:b5:bb:33:f4:
                    16:22:e3:28:8c:0e:f8:e2:a0:c2:50:49:1a:82:7e:
                    79:41:50:7a:0e:1d:58:83:d5:15:3e:34:6c:50:19:
                    92:16:3a:91:57:46:9b:8a:0e:b7:0d:a0:e4:82:d1:
                    c2:3a:ac:84:bd:8d:00:72:ea:39:50:cc:b4:ff:a4:
                    7a:a9:c2:b4:a9:53:a0:99:8e:b4:2f:2a:42:a7:24:
                    72:86:cc:ce:a9:48:8c:cf:29:46:d4:bf:bc:33:22:
                    0e:5f:0d:95:f3:8e:0c:2d:09:28:b7:df:d6:4e:4e:
                    2f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:89:46:C5:B9:12:50:80:D1:51:63:BE:87:97:34:B9:09:A0:6F:E1
            X509v3 Authority Key Identifier:
                keyid:79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/79131A4E3CC0851C2ED1363D6982E7436D3DF9F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/39312e3232392e3234342e302f32342d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.229.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:e7:7f:69:db:f2:ff:2a:8a:07:f3:cb:38:90:1f:76:3f:cf:
         67:cc:c0:76:e3:d1:b6:76:86:62:13:a1:83:30:f3:cf:ae:c6:
         66:28:7c:ce:66:87:14:a0:d2:03:d3:14:18:de:27:11:3f:8f:
         d0:b8:f8:ee:eb:37:ae:06:ff:82:72:45:9f:71:9a:29:84:81:
         2f:b7:ff:38:00:63:55:b9:3a:57:b8:88:40:72:2d:54:c6:aa:
         55:a9:40:d2:ec:80:02:f3:af:58:49:46:d0:dd:f9:7e:f0:b1:
         f1:f8:05:c6:64:fa:e9:bb:93:07:62:86:c6:ed:0d:2b:e7:a8:
         a7:94:d1:52:64:1b:68:09:95:28:b2:10:c8:bc:55:87:80:ab:
         35:60:d5:7f:9e:8e:96:4e:3f:c4:b8:43:8f:5e:19:12:6e:f5:
         9b:5a:e3:11:53:35:4e:f3:ff:3b:af:1a:14:12:f4:b0:bd:d7:
         d4:25:e1:e3:e5:e6:c5:b1:9b:98:33:ea:d4:bf:88:cd:a8:ba:
         f2:c5:71:37:ed:10:2f:0e:d0:da:c7:cf:eb:c5:45:ac:b3:11:
         8f:fc:e0:94:13:cd:57:c1:22:ec:bd:6e:51:e9:79:c9:ad:c2:
         5d:e2:08:b5:9f:f6:2d:28:04:e4:8c:7a:7f:99:c1:9c:b4:08:
         20:f5:fb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----