Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/108/39312e3232392e3234352e302f32342d3332203d3e203531313637.roa
File:                     39312e3232392e3234352e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          sbQ15F8u3d3qgPfKC0YbV8ssyEY7c66HD596gqIDFhs=
Subject key identifier:   64:0E:BB:F0:20:1D:68:97:9B:D5:3A:E0:10:56:66:71:0A:69:2D:22
Certificate issuer:       /CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
Certificate serial:       6D120BB1086D1202575DBF1D740D5AD5351392AF
Authority key identifier: 79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/108/39312e3232392e3234352e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:39 +0000
ROA not before:           Sat 22 Oct 2022 04:28:39 +0000
ROA not after:            Sat 21 Oct 2023 04:33:39 +0000
asID:                     51167
IP address blocks:        91.229.245.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:12:0b:b1:08:6d:12:02:57:5d:bf:1d:74:0d:5a:d5:35:13:92:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
        Validity
            Not Before: Oct 22 04:28:39 2022 GMT
            Not After : Oct 21 04:33:39 2023 GMT
        Subject: CN=640EBBF0201D68979BD53AE0105666710A692D22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c4:22:29:e6:37:43:ec:af:82:c9:23:df:c4:
                    0c:8c:2e:13:21:d7:60:cc:87:dc:d0:74:bb:da:67:
                    cf:84:9c:06:78:51:6d:50:ac:a8:f8:bd:be:2c:d8:
                    68:7f:ea:13:d3:7b:05:52:fc:a4:a0:6c:4f:1f:79:
                    38:56:28:f3:b0:f7:1d:c2:5f:1b:e6:3a:e1:01:c4:
                    06:2e:cb:9b:89:25:48:ba:c9:9c:dc:b9:09:08:87:
                    d7:e8:55:22:f5:ec:ee:27:c1:52:44:02:20:f8:d1:
                    ce:7f:5b:68:16:2a:f4:39:5d:ff:7a:ec:e8:24:75:
                    d5:63:75:bb:ff:eb:18:2d:c8:ed:21:79:49:9b:5b:
                    9f:0a:f8:16:8f:9a:8c:2b:a8:68:d3:4c:48:4b:f7:
                    64:df:b0:08:57:46:89:a1:24:03:1a:6c:d4:61:3c:
                    5d:e4:7c:cc:b0:2f:91:24:13:6a:23:3d:e9:af:bc:
                    ef:ae:d8:90:2b:b2:b6:3d:92:f0:b6:d3:78:79:30:
                    52:ae:1d:33:ab:91:82:62:24:18:07:10:29:9f:d4:
                    71:32:87:ca:43:61:36:25:0e:6b:d8:32:42:de:01:
                    16:d3:b0:5d:6c:fd:d6:2c:5b:04:95:00:7a:ba:61:
                    8e:85:b0:cf:a2:8a:c4:0e:5a:5d:71:e7:10:f8:7e:
                    89:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:0E:BB:F0:20:1D:68:97:9B:D5:3A:E0:10:56:66:71:0A:69:2D:22
            X509v3 Authority Key Identifier:
                keyid:79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/79131A4E3CC0851C2ED1363D6982E7436D3DF9F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/39312e3232392e3234352e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.229.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:e6:21:45:51:66:ad:d2:0a:0f:71:d5:28:e1:93:d8:91:98:
         9f:dc:7e:13:7c:cf:b7:6f:e9:34:da:ae:67:80:99:fa:e3:1b:
         e4:de:d2:1d:49:b1:45:91:cf:71:35:3a:9e:df:27:21:d1:34:
         35:90:a2:a0:f8:bc:7f:c2:98:b9:e5:96:fd:53:25:b8:bb:bb:
         6a:fc:f6:68:d8:1d:c4:5c:8a:22:c8:04:0e:07:e1:ef:73:4b:
         ce:01:a6:b6:e2:a5:af:c6:00:d9:76:6e:ca:2a:db:3a:76:83:
         ee:e3:8f:34:c8:bf:e2:23:bb:56:c7:72:2b:3b:ba:71:ee:da:
         ef:5a:e6:83:ab:4a:f6:87:3a:63:7e:48:d3:42:cf:5b:23:91:
         a2:d3:f4:1f:c3:14:e0:a7:e5:71:77:db:4e:3a:79:81:c1:0c:
         58:16:df:cc:19:60:ef:64:b1:05:df:29:71:d9:0d:db:97:9a:
         7d:ef:3b:88:fe:7f:cb:dd:6c:a6:54:90:c3:8b:af:1c:ac:5c:
         d4:5b:f0:45:a3:74:b1:cf:a9:57:52:90:0b:36:d0:dc:1e:80:
         89:ee:79:e0:0b:97:f5:0b:14:7a:5d:ed:f4:a5:93:fb:4d:30:
         2c:2d:ec:c9:b2:6e:fe:3e:a7:e4:4c:3f:62:f3:cc:98:b5:67:
         e4:38:f7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----