Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/108/34352e38352e3235302e302f32342d3332203d3e203531313637.roa
File:                     34352e38352e3235302e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          kbSnxV01kEpe+XMbK3LW3PI/vcsKINmKnbXkVJ/wfD8=
Subject key identifier:   88:B6:8F:D5:EE:F9:8A:CD:91:85:CB:8C:7F:E5:68:A8:74:7C:1D:71
Certificate issuer:       /CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
Certificate serial:       631C32DA1D12619930485F18DACB0F5C6BF0C17E
Authority key identifier: 79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/108/34352e38352e3235302e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:39 +0000
ROA not before:           Sat 22 Oct 2022 04:28:39 +0000
ROA not after:            Sat 21 Oct 2023 04:33:39 +0000
asID:                     51167
IP address blocks:        45.85.250.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:1c:32:da:1d:12:61:99:30:48:5f:18:da:cb:0f:5c:6b:f0:c1:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
        Validity
            Not Before: Oct 22 04:28:39 2022 GMT
            Not After : Oct 21 04:33:39 2023 GMT
        Subject: CN=88B68FD5EEF98ACD9185CB8C7FE568A8747C1D71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:50:c4:d4:bc:57:d8:4b:50:d1:5f:91:2c:ca:
                    24:4f:15:77:7f:32:38:b8:31:54:e9:6a:0e:0e:dd:
                    4c:48:14:4d:3e:2d:15:05:83:a4:2a:ed:04:17:ca:
                    2f:ea:b7:af:e9:8d:e7:f5:71:19:9e:b2:47:f7:bc:
                    e8:f3:3b:7f:de:3e:07:fc:c9:23:55:77:8d:12:4a:
                    0e:1e:cb:97:0d:7d:56:c4:2c:30:fc:7f:73:76:7b:
                    ef:68:7b:f1:3d:60:d6:19:82:be:4d:32:1d:ef:46:
                    fc:c4:1d:31:47:b8:39:ea:1a:b3:57:1b:ba:12:bb:
                    c4:03:3a:f3:44:96:93:0f:27:e4:ea:10:7f:25:24:
                    66:ca:3b:3d:55:c7:44:f8:cc:c9:1f:20:12:04:9c:
                    c7:8e:63:b0:eb:b5:42:8c:d4:cb:37:96:05:72:64:
                    cc:cc:58:d1:d0:09:3f:06:70:ea:44:95:5c:ed:c9:
                    df:b1:16:c8:e6:e6:41:0d:de:66:3b:07:e3:c1:0c:
                    db:50:e8:6c:50:98:50:fd:aa:23:91:0a:06:49:fe:
                    0e:bf:8d:d2:1c:89:31:b0:68:a6:c9:16:a6:22:49:
                    c9:42:61:16:f5:e7:07:bb:f7:ce:77:5e:dc:11:0d:
                    aa:e6:d2:4c:b0:08:d0:e0:5b:72:eb:c2:2a:25:a2:
                    db:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B6:8F:D5:EE:F9:8A:CD:91:85:CB:8C:7F:E5:68:A8:74:7C:1D:71
            X509v3 Authority Key Identifier:
                keyid:79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/79131A4E3CC0851C2ED1363D6982E7436D3DF9F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/34352e38352e3235302e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.85.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:2b:92:eb:b7:a9:8a:54:b9:4b:cb:a5:79:d3:4e:90:6f:41:
         3c:a0:36:0f:2c:48:94:8e:18:1e:5b:55:80:0b:ba:6f:34:fc:
         b3:26:37:57:60:46:2e:2f:4c:66:4d:49:aa:0c:f3:a8:6a:6b:
         a2:f6:d8:f9:0b:22:b2:7d:f7:cf:67:f7:1c:1a:a0:54:fd:ec:
         d2:b5:8a:8f:f8:ac:43:8c:3c:25:51:e1:a9:f7:95:04:1c:f4:
         5a:c4:bb:1d:60:7a:03:c3:4a:39:32:f2:6f:37:6f:d4:07:6d:
         1e:4d:22:57:18:df:59:29:01:2c:68:5f:82:12:16:16:71:eb:
         12:aa:8c:3f:a2:34:e3:9e:84:db:4a:86:e8:d0:ed:bc:f7:d6:
         fb:82:5e:3b:8a:e7:da:4d:ff:5f:87:3c:84:57:03:40:82:c4:
         9e:f7:70:79:b7:da:77:f4:8f:78:3b:1d:86:3e:a0:57:68:19:
         e2:3d:43:99:a5:e3:e4:34:2b:4e:c8:f0:29:f9:fa:a7:48:ef:
         36:26:a7:48:fc:ac:4f:bf:6e:fc:91:fb:e6:e0:65:dc:f9:0b:
         60:ad:ee:05:b6:04:59:1e:19:3b:25:f5:9a:5f:7f:ee:ba:5c:
         70:6e:b9:ee:c9:4f:2a:05:ed:3e:8c:2d:29:e9:fa:16:8d:5b:
         ec:ec:b1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----