Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/108/39312e3233302e3131312e302f32342d3332203d3e203531313637.roa
File:                     39312e3233302e3131312e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          hZRoSuJiavAp7WDMlRObEicAQAmkPdpnoxinMAME/G0=
Subject key identifier:   88:6E:DA:93:25:D9:4B:F7:A3:6E:51:DE:1F:5E:E8:A5:7F:F8:A9:02
Certificate issuer:       /CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
Certificate serial:       28F5D3EFDBBCE9B4B874A7F13621295EE2AE8FE2
Authority key identifier: 79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/108/39312e3233302e3131312e302f32342d3332203d3e203531313637.roa
Signing time:             Sat 22 Oct 2022 04:33:40 +0000
ROA not before:           Sat 22 Oct 2022 04:28:40 +0000
ROA not after:            Sat 21 Oct 2023 04:33:40 +0000
asID:                     51167
IP address blocks:        91.230.111.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f5:d3:ef:db:bc:e9:b4:b8:74:a7:f1:36:21:29:5e:e2:ae:8f:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79131a4e3cc0851c2ed1363d6982e7436d3df9f9
        Validity
            Not Before: Oct 22 04:28:40 2022 GMT
            Not After : Oct 21 04:33:40 2023 GMT
        Subject: CN=886EDA9325D94BF7A36E51DE1F5EE8A57FF8A902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:01:df:18:da:ea:4e:96:50:46:ff:82:f7:5a:
                    5d:48:fe:67:2e:b9:36:5f:69:a3:84:a6:c6:44:55:
                    06:0b:76:b4:ff:ac:0d:86:74:f2:0c:f7:c8:3a:5b:
                    7b:c6:b1:d0:dc:a8:ce:8e:70:e1:09:f0:78:3c:f5:
                    82:38:40:ed:b1:6b:ad:1f:22:67:a9:d0:28:44:38:
                    ba:82:83:f9:74:b5:7b:cf:2d:34:a0:d0:a3:92:a8:
                    cf:d6:96:21:2b:ba:00:dd:c1:37:41:09:64:1d:f0:
                    2e:58:ec:4c:d7:8c:47:bc:e0:e2:95:e8:95:ef:cd:
                    71:1e:27:92:58:59:8a:b8:50:c5:21:4a:f1:a6:e2:
                    05:00:9f:c0:5b:a1:ea:ce:e8:7c:b7:35:ba:3f:04:
                    fe:b2:5a:60:ba:0f:3f:7c:ba:10:e7:fb:6b:91:14:
                    5b:3f:fb:3c:54:61:a5:a0:79:9e:d2:18:5a:92:a1:
                    24:e0:b8:57:20:da:55:e4:f8:92:e2:ee:22:ef:ea:
                    60:25:27:d7:66:8e:e0:a0:ad:53:f5:3c:a9:cb:69:
                    8f:48:d5:61:c4:36:1e:e3:e5:f7:27:7f:a2:d5:90:
                    89:dd:e6:33:ce:34:85:c5:45:ed:4e:58:9e:40:87:
                    dd:9d:b1:9a:83:80:c0:27:73:f5:ac:19:87:55:c4:
                    68:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:6E:DA:93:25:D9:4B:F7:A3:6E:51:DE:1F:5E:E8:A5:7F:F8:A9:02
            X509v3 Authority Key Identifier:
                keyid:79:13:1A:4E:3C:C0:85:1C:2E:D1:36:3D:69:82:E7:43:6D:3D:F9:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/79131A4E3CC0851C2ED1363D6982E7436D3DF9F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRMaTjzAhRwu0TY9aYLnQ209-fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/108/39312e3233302e3131312e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.230.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:ad:fe:8c:ce:ef:4c:1d:9f:07:2c:b6:02:cd:66:68:e7:ef:
         af:ef:4c:65:86:4a:fc:6a:f8:2e:fd:4e:a7:62:00:fc:05:e5:
         e9:3a:37:87:63:18:3d:53:f2:cf:f0:c8:50:d5:b2:e9:df:d5:
         b8:7a:03:73:b7:4a:9c:ad:69:41:a2:75:37:aa:a1:3d:20:39:
         cd:c9:b1:2b:b8:f0:c0:be:b9:e8:e2:b0:5c:6f:c7:4f:28:3f:
         84:dd:73:f8:ae:36:f1:f6:29:7e:60:78:4c:63:42:12:f9:c2:
         39:89:7a:ea:3f:3f:d1:84:61:c4:80:6c:0a:c8:0d:fd:33:ac:
         10:66:28:0a:96:24:d5:30:d6:78:37:07:b6:56:c5:e0:35:2b:
         a0:db:e9:49:f4:1d:ba:b7:62:9e:c1:d8:ba:73:14:6c:27:03:
         78:54:78:ba:05:1b:f1:bd:5a:2d:79:f6:b8:32:af:93:b3:2f:
         5f:6e:a5:1b:9e:68:fa:e1:ee:f1:73:3e:a1:73:fc:fc:80:ee:
         bc:9a:9a:e7:d7:9c:04:aa:a5:19:b3:85:43:a0:4b:c5:cc:f0:
         94:9a:bd:37:23:ad:f2:7c:cd:a3:3c:e3:29:3d:cb:be:e1:d9:
         4d:36:99:12:21:f7:70:b6:12:64:a6:34:ea:0d:2a:17:b9:81:
         0d:64:0b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----