Route Origin Authorization

$ rpki-client -vvf nostromo.heficed.net/repo/1123811/0/39312e3233332e3139382e302f32342d3234203d3e203435343734.roa
File:                     39312e3233332e3139382e302f32342d3234203d3e203435343734.roa (raw, json)
Hash identifier:          3WFI3Wq1LMjdkbq6r0lA++sLma6DIayTmEtir+BXs+g=
Subject key identifier:   BF:F7:6E:55:51:FB:A2:F7:16:A1:84:8C:0C:35:39:FD:94:55:F2:AD
Certificate issuer:       /CN=4b151ed770262b02592c17950451fcb75ff28048
Certificate serial:       27BE675B1ECDBC31955AD94D8DA43B4DB76E4B22
Authority key identifier: 4B:15:1E:D7:70:26:2B:02:59:2C:17:95:04:51:FC:B7:5F:F2:80:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SxUe13AmKwJZLBeVBFH8t1_ygEg.cer
Subject info access:      rsync://nostromo.heficed.net/repo/1123811/0/39312e3233332e3139382e302f32342d3234203d3e203435343734.roa
Signing time:             Thu 10 Mar 2022 05:00:00 +0000
ROA not before:           Thu 10 Mar 2022 04:55:00 +0000
ROA not after:            Fri 10 Mar 2023 05:00:00 +0000
asID:                     45474
IP address blocks:        91.233.198.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:be:67:5b:1e:cd:bc:31:95:5a:d9:4d:8d:a4:3b:4d:b7:6e:4b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b151ed770262b02592c17950451fcb75ff28048
        Validity
            Not Before: Mar 10 04:55:00 2022 GMT
            Not After : Mar 10 05:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:13:ac:6a:b5:73:d8:b3:21:2f:4d:d7:f6:d9:
                    fe:7e:d7:5e:af:a6:64:c1:3a:60:b4:9f:28:f0:f8:
                    1e:fc:ce:03:2b:99:8c:4b:e5:5d:0e:ec:14:f4:0d:
                    22:9b:c3:99:c8:a3:27:b4:da:79:00:5f:ec:4e:af:
                    82:95:2b:c1:5d:1a:69:7d:0c:39:43:8d:0b:a3:f9:
                    9f:46:c8:26:ae:80:43:2a:05:a2:1d:5a:8a:82:46:
                    58:69:80:18:e4:f9:56:95:fe:ad:d6:d2:d3:4c:6a:
                    5c:2f:6e:64:49:f9:75:a1:d8:d2:82:dd:b1:3d:9f:
                    28:82:37:7b:3a:36:fd:58:a8:49:8e:b3:6d:96:81:
                    0f:e3:07:30:a7:33:01:4f:f1:b7:f8:2e:ab:ea:05:
                    e0:02:be:9d:6f:53:3c:18:27:28:ba:2f:f6:62:6f:
                    97:c1:4b:a7:5d:08:03:8a:3f:f2:0d:25:b5:11:46:
                    7d:e8:87:0b:16:eb:40:87:44:cc:fc:b1:e8:61:ba:
                    b2:88:a2:28:13:1f:1c:60:8b:ce:de:75:b6:9b:51:
                    7c:22:3c:2f:20:41:37:4d:9b:95:73:37:8c:59:08:
                    45:d0:0a:d9:d6:2c:09:d8:f6:92:0b:49:01:39:3e:
                    df:8d:f9:4d:d3:db:64:c0:f2:78:de:41:20:55:66:
                    bf:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F7:6E:55:51:FB:A2:F7:16:A1:84:8C:0C:35:39:FD:94:55:F2:AD
            X509v3 Authority Key Identifier:
                keyid:4B:15:1E:D7:70:26:2B:02:59:2C:17:95:04:51:FC:B7:5F:F2:80:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://nostromo.heficed.net/repo/1123811/0/4B151ED770262B02592C17950451FCB75FF28048.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxUe13AmKwJZLBeVBFH8t1_ygEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://nostromo.heficed.net/repo/1123811/0/39312e3233332e3139382e302f32342d3234203d3e203435343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.233.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:a6:95:dc:6c:30:10:72:47:8e:79:94:b6:54:9b:05:30:97:
         e8:82:f8:5d:97:cc:c6:f0:70:83:67:95:74:bb:49:76:64:33:
         46:cc:64:02:02:83:00:fe:a2:e3:00:30:42:71:5b:ef:a3:8f:
         e8:e2:96:4f:bb:c5:1c:11:17:83:80:fa:4c:24:b1:9a:d2:5c:
         a0:85:ae:96:aa:d7:46:a8:c3:9e:f8:e7:86:6c:04:bb:83:a5:
         df:ed:0c:b6:3b:19:39:1a:6a:40:86:a3:60:29:e4:8c:55:09:
         58:60:7b:00:ce:2a:5b:4c:fe:f5:e5:3a:00:8e:fe:5c:9b:12:
         cf:4c:a1:ec:74:33:b1:79:43:13:29:1e:90:b9:f6:5c:b8:c0:
         15:bd:86:5d:e3:12:de:bb:62:be:4a:66:9a:99:14:8f:a8:b3:
         89:98:eb:bd:e3:72:64:86:27:94:85:94:01:05:8c:de:d5:30:
         60:db:7f:a1:f6:9c:4f:c9:82:0e:fb:de:fb:76:d1:72:75:e8:
         e3:5a:4e:9f:7c:34:ee:b0:dc:f4:3d:02:27:7f:53:2f:75:d9:
         2b:a4:8b:1a:8b:99:b5:4f:86:f6:c7:1a:d5:f4:ef:d5:f6:d8:
         65:f7:db:64:20:57:1f:f7:c4:4d:6b:c8:e5:13:21:be:02:df:
         17:55:3f:89
-----BEGIN CERTIFICATE-----
MIIG1zCCBb+gAwIBAgIUJ75nWx7NvDGVWtlNjaQ7TbduSyIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGIxNTFlZDc3MDI2MmIwMjU5MmMxNzk1MDQ1MWZjYjc1
ZmYyODA0ODAeFw0yMjAzMTAwNDU1MDBaFw0yMzAzMTAwNTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzExM0FDNkFCNTczRDhCMzIx
MkY0REQ3RjZEOUZFN0VENzVFQUZBNjY0QzEzQTYwQjQ5RjI4RjBGODFFRkNDRTAz
MkI5OThDNEJFNTVEMEVFQzE0RjQwRDIyOUJDMzk5QzhBMzI3QjREQTc5MDA1RkVD
NEVBRjgyOTUyQkMxNUQxQTY5N0QwQzM5NDM4RDBCQTNGOTlGNDZDODI2QUU4MDQz
MkEwNUEyMUQ1QThBODI0NjU4Njk4MDE4RTRGOTU2OTVGRUFERDZEMkQzNEM2QTVD
MkY2RTY0NDlGOTc1QTFEOEQyODJEREIxM0Q5RjI4ODIzNzdCM0EzNkZENThBODQ5
OEVCMzZEOTY4MTBGRTMwNzMwQTczMzAxNEZGMUI3RjgyRUFCRUEwNUUwMDJCRTlE
NkY1MzNDMTgyNzI4QkEyRkY2NjI2Rjk3QzE0QkE3NUQwODAzOEEzRkYyMEQyNUI1
MTE0NjdERTg4NzBCMTZFQjQwODc0NENDRkNCMUU4NjFCQUIyODhBMjI4MTMxRjFD
NjA4QkNFREU3NUI2OUI1MTdDMjIzQzJGMjA0MTM3NEQ5Qjk1NzMzNzhDNTkwODQ1
RDAwQUQ5RDYyQzA5RDhGNjkyMEI0OTAxMzkzRURGOERGOTRERDNEQjY0QzBGMjc4
REU0MTIwNTU2NkJGMjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwROsarVz2LMhL03X9tn+ftder6ZkwTpgtJ8o8Pge/M4DK5mMS+Vd
DuwU9A0im8OZyKMntNp5AF/sTq+ClSvBXRppfQw5Q40Lo/mfRsgmroBDKgWiHVqK
gkZYaYAY5PlWlf6t1tLTTGpcL25kSfl1odjSgt2xPZ8ogjd7Ojb9WKhJjrNtloEP
4wcwpzMBT/G3+C6r6gXgAr6db1M8GCcoui/2Ym+XwUunXQgDij/yDSW1EUZ96IcL
FutAh0TM/LHoYbqyiKIoEx8cYIvO3nW2m1F8IjwvIEE3TZuVczeMWQhF0ArZ1iwJ
2PaSC0kBOT7fjflN09tkwPJ43kEgVWa/KQIDAQABo4IB5TCCAeEwHQYDVR0OBBYE
FL/3blVR+6L3FqGEjAw1Of2UVfKtMB8GA1UdIwQYMBaAFEsVHtdwJisCWSwXlQRR
/Ldf8oBIMA4GA1UdDwEB/wQEAwIHgDBpBgNVHR8EYjBgMF6gXKBahlhyc3luYzov
L25vc3Ryb21vLmhlZmljZWQubmV0L3JlcG8vMTEyMzgxMS8wLzRCMTUxRUQ3NzAy
NjJCMDI1OTJDMTc5NTA0NTFGQ0I3NUZGMjgwNDguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9TeFVlMTNBbUt3SlpMQmVWQkZIOHQxX3lnRWcuY2VyMIGCBggrBgEF
BQcBCwR2MHQwcgYIKwYBBQUHMAuGZnJzeW5jOi8vbm9zdHJvbW8uaGVmaWNlZC5u
ZXQvcmVwby8xMTIzODExLzAvMzkzMTJlMzIzMzMzMmUzMTM5MzgyZTMwMmYzMjM0
MmQzMjM0MjAzZDNlMjAzNDM1MzQzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+nGMA0GCSqGSIb3
DQEBCwUAA4IBAQCxppXcbDAQckeOeZS2VJsFMJfogvhdl8zG8HCDZ5V0u0l2ZDNG
zGQCAoMA/qLjADBCcVvvo4/o4pZPu8UcEReDgPpMJLGa0lygha6WqtdGqMOe+OeG
bAS7g6Xf7Qy2Oxk5GmpAhqNgKeSMVQlYYHsAzipbTP715ToAjv5cmxLPTKHsdDOx
eUMTKR6QufZcuMAVvYZd4xLeu2K+SmaamRSPqLOJmOu943JkhieUhZQBBYze1TBg
23+h9pxPyYIO+977dtFydejjWk6ffDTusNz0PQInf1MvddkrpIsai5m1T4b2xxrV
9O/V9thl99tkIFcf98RNa8jlEyG+At8XVT+J
-----END CERTIFICATE-----