Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/108/39312e3233302e3131302e302f32342d3332203d3e203531313637.roa
File:                     39312e3233302e3131302e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          dM2wGEc6ec4VVAT33p7pH5JNnTIa/LMKvU7W6zUeIK0=
Subject key identifier:   26:7B:E5:1A:60:A6:E3:23:5A:FB:8B:BB:C2:D7:A8:81:30:07:07:30
Certificate issuer:       /CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
Certificate serial:       6DBCED7614838B209D65DA8347E48CC6B9B7223E
Authority key identifier: 79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/108/39312e3233302e3131302e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:39 +0000
ROA not before:           Sat 22 Oct 2022 04:28:39 +0000
ROA not after:            Sat 21 Oct 2023 04:33:39 +0000
asID:                     51167
IP address blocks:        91.230.110.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:bc:ed:76:14:83:8b:20:9d:65:da:83:47:e4:8c:c6:b9:b7:22:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
        Validity
            Not Before: Oct 22 04:28:39 2022 GMT
            Not After : Oct 21 04:33:39 2023 GMT
        Subject: CN=267BE51A60A6E3235AFB8BBBC2D7A88130070730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b7:4e:0e:7d:ef:3f:e9:fc:d4:18:87:33:09:
                    3a:e2:7d:07:8d:90:60:60:b6:9b:55:0d:7b:78:a9:
                    b9:6a:96:ea:34:b7:a5:ad:a4:49:8e:2e:8c:e0:10:
                    f2:77:93:20:e2:da:55:2f:18:62:c9:e4:d5:7a:96:
                    2c:16:14:e4:d0:28:0c:84:5e:01:8d:1d:6d:a8:ee:
                    45:e3:fe:43:ee:0a:2a:03:a2:73:49:64:01:0d:5c:
                    08:93:f5:d0:cb:41:cc:e2:2f:e1:fa:3c:e1:fe:cf:
                    d0:8c:bb:6f:da:ef:cc:5b:d3:54:0e:48:fa:c0:66:
                    32:ee:7f:24:09:35:3c:2a:a1:08:b0:26:fb:22:f8:
                    44:77:66:2b:99:fe:59:8f:68:b2:fe:11:00:e2:4e:
                    e0:6a:04:65:d8:28:de:ec:07:96:84:d9:a5:fe:c9:
                    7a:18:5f:c0:59:84:f3:5c:6c:e3:ba:74:4a:5e:b8:
                    69:8b:13:9c:99:60:a0:47:60:94:ff:89:14:25:eb:
                    8b:e2:21:4a:33:d5:58:be:8b:bb:8b:08:92:cb:db:
                    00:62:02:a4:e5:e2:8b:fd:4f:78:e7:17:16:a1:5f:
                    b7:22:96:a8:c2:ce:14:9b:c3:a1:2b:20:6a:df:4b:
                    a6:d4:ca:aa:63:0d:59:1b:71:0f:ba:48:a4:3a:65:
                    1c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7B:E5:1A:60:A6:E3:23:5A:FB:8B:BB:C2:D7:A8:81:30:07:07:30
            X509v3 Authority Key Identifier:
                keyid:79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/79131A4E3CC0851C2ED1363D6982E7436D3DF9F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/39312e3233302e3131302e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.230.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:39:c1:82:43:ee:7c:3a:5a:92:e3:84:77:40:87:b5:b4:58:
         17:2a:80:e3:1b:d2:09:42:5e:91:c9:6a:b3:1f:a7:cc:0a:8d:
         41:59:66:53:89:a8:8f:18:68:05:ef:6f:24:06:c4:42:40:1a:
         d6:2a:9f:0e:70:63:59:e2:35:0d:8a:99:ba:ef:bd:5d:ce:3a:
         8c:8a:07:c4:e0:18:64:10:8d:27:ae:20:57:07:c1:20:a1:3b:
         a7:a3:a4:e6:71:b9:6d:ce:85:5a:eb:7e:b7:a0:a6:76:69:0c:
         f1:58:09:b4:45:e0:ed:06:b5:70:14:9b:e2:07:54:4c:d7:20:
         f0:1e:ea:55:c7:5b:ed:83:38:80:dc:63:86:d9:c0:74:8c:0f:
         4d:65:c4:da:a4:cb:8d:fd:fe:06:7f:92:5e:88:81:47:e2:82:
         8f:5d:0e:d5:63:8e:27:28:bb:7c:0c:f1:aa:55:e3:01:4f:ca:
         57:77:0c:93:13:00:0b:c8:da:24:f1:d1:3a:73:c6:0d:09:62:
         ca:9e:eb:76:87:be:6a:77:b6:c7:ab:62:8b:15:a3:74:a6:8a:
         d1:95:1a:96:25:76:ca:fa:97:35:c8:15:89:cf:c3:00:ca:7d:
         d0:3c:c8:8a:12:8d:9a:5f:8e:74:1e:1e:e5:df:5a:e9:94:a0:
         ce:ee:bc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----