Route Origin Authorization

$ rpki-client -vvf nostromo.heficed.net/repo/1123811/0/39312e3233332e3139382e302f32342d3234203d3e203631333137.roa
File:                     39312e3233332e3139382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          pVHcW+MdY3Nt/9r0Q/veT4YwfeckLBVTLMTofmHQKY8=
Subject key identifier:   2D:B9:1D:94:12:7A:86:F7:6F:7E:0A:85:1A:19:59:71:A5:FA:6D:F1
Certificate issuer:       /CN=4b151ed770262b02592c17950451fcb75ff28048
Certificate serial:       7A02CC9420368EBEA75F7B21BBF42AE2EB4A69C5
Authority key identifier: 4B:15:1E:D7:70:26:2B:02:59:2C:17:95:04:51:FC:B7:5F:F2:80:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SxUe13AmKwJZLBeVBFH8t1_ygEg.cer
Subject info access:      rsync://nostromo.heficed.net/repo/1123811/0/39312e3233332e3139382e302f32342d3234203d3e203631333137.roa
Signing time:             Wed 25 May 2022 09:00:00 +0000
ROA not before:           Wed 25 May 2022 08:55:00 +0000
ROA not after:            Thu 25 May 2023 09:00:00 +0000
asID:                     61317
IP address blocks:        91.233.198.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:02:cc:94:20:36:8e:be:a7:5f:7b:21:bb:f4:2a:e2:eb:4a:69:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b151ed770262b02592c17950451fcb75ff28048
        Validity
            Not Before: May 25 08:55:00 2022 GMT
            Not After : May 25 09:00:00 2023 GMT
        Subject: CN=3082010A0282010100BFB01D1733A8CD8AAD0CA20D65742DAED79B1DED0CE5B1CA8BAD832B531C13956BB11FC44A1D09C20F19760C4EB8DD4064815EEED9B47E100FA535CF86CC88D2C8345A4E5E77BD1ABC2A0E7A8AE296D68E145C8E48953ED74AC2FB705A570A308BF21089ECF7D5B3DB6E0D05FF3EAE8ABB0B6B38F26E65BC02ABE24E9AF63DE551A611AD9FB4E477FF6CA4C0DF5C72F564C5916408B939986EE2AE2E397977C3ECDEF3CEBF89BB0EDF2AFE4EB1EB0803C5BEB59E46E518E1366DB13C12C6A4229D8EDAE4B148AC8DFD93BD688BBDF8DFD457DF3F78A0667BB1E3CB0C2B94C280D40DCD348A2B2688EBFA702AFE4BC1B45DCBC07385B9DC2170968EFC1EC1B1970203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b0:1d:17:33:a8:cd:8a:ad:0c:a2:0d:65:74:
                    2d:ae:d7:9b:1d:ed:0c:e5:b1:ca:8b:ad:83:2b:53:
                    1c:13:95:6b:b1:1f:c4:4a:1d:09:c2:0f:19:76:0c:
                    4e:b8:dd:40:64:81:5e:ee:d9:b4:7e:10:0f:a5:35:
                    cf:86:cc:88:d2:c8:34:5a:4e:5e:77:bd:1a:bc:2a:
                    0e:7a:8a:e2:96:d6:8e:14:5c:8e:48:95:3e:d7:4a:
                    c2:fb:70:5a:57:0a:30:8b:f2:10:89:ec:f7:d5:b3:
                    db:6e:0d:05:ff:3e:ae:8a:bb:0b:6b:38:f2:6e:65:
                    bc:02:ab:e2:4e:9a:f6:3d:e5:51:a6:11:ad:9f:b4:
                    e4:77:ff:6c:a4:c0:df:5c:72:f5:64:c5:91:64:08:
                    b9:39:98:6e:e2:ae:2e:39:79:77:c3:ec:de:f3:ce:
                    bf:89:bb:0e:df:2a:fe:4e:b1:eb:08:03:c5:be:b5:
                    9e:46:e5:18:e1:36:6d:b1:3c:12:c6:a4:22:9d:8e:
                    da:e4:b1:48:ac:8d:fd:93:bd:68:8b:bd:f8:df:d4:
                    57:df:3f:78:a0:66:7b:b1:e3:cb:0c:2b:94:c2:80:
                    d4:0d:cd:34:8a:2b:26:88:eb:fa:70:2a:fe:4b:c1:
                    b4:5d:cb:c0:73:85:b9:dc:21:70:96:8e:fc:1e:c1:
                    b1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B9:1D:94:12:7A:86:F7:6F:7E:0A:85:1A:19:59:71:A5:FA:6D:F1
            X509v3 Authority Key Identifier:
                keyid:4B:15:1E:D7:70:26:2B:02:59:2C:17:95:04:51:FC:B7:5F:F2:80:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://nostromo.heficed.net/repo/1123811/0/4B151ED770262B02592C17950451FCB75FF28048.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxUe13AmKwJZLBeVBFH8t1_ygEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://nostromo.heficed.net/repo/1123811/0/39312e3233332e3139382e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.233.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:d8:7c:42:5a:ba:95:90:3d:10:90:23:fa:32:7e:f5:e0:9a:
         1c:ec:72:49:5f:d0:ca:05:c2:00:32:91:21:ad:0d:40:a8:b6:
         17:0a:77:43:8d:e9:b0:d9:29:41:5c:27:11:9b:d0:c7:1e:d1:
         38:e6:9a:8e:d6:20:f0:37:28:22:66:03:02:78:6c:1e:52:3c:
         aa:28:d0:16:f5:5a:f1:ce:74:6b:65:ff:51:9a:c4:a0:5f:47:
         01:33:21:a9:83:27:b5:89:f6:fc:98:28:59:99:6f:11:38:d6:
         ba:ea:22:1b:28:7d:27:91:5b:42:cb:71:4a:af:ca:d8:40:e9:
         df:c5:37:aa:21:04:21:76:25:1e:de:7c:fb:ba:b5:ce:d1:ea:
         21:2b:d7:ed:5b:30:0c:bb:9b:60:d7:9f:2b:01:4d:2b:12:f8:
         2f:43:69:60:a5:f7:29:96:1d:df:0e:89:67:4f:fa:be:87:13:
         ca:24:76:78:a9:93:20:79:cf:af:53:77:67:37:b9:b7:0f:6c:
         52:65:08:96:89:3d:dc:f5:96:28:0d:c8:fe:d8:01:a5:d9:3a:
         a3:23:58:7c:23:3a:2d:de:84:4c:80:56:c6:d4:a1:d1:be:0a:
         dd:a3:15:82:95:99:a9:5e:ff:86:07:91:62:26:bd:25:14:99:
         32:f0:8f:b0
-----BEGIN CERTIFICATE-----
MIIG1zCCBb+gAwIBAgIUegLMlCA2jr6nX3shu/Qq4utKacUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGIxNTFlZDc3MDI2MmIwMjU5MmMxNzk1MDQ1MWZjYjc1
ZmYyODA0ODAeFw0yMjA1MjUwODU1MDBaFw0yMzA1MjUwOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkZCMDFEMTczM0E4Q0Q4QUFE
MENBMjBENjU3NDJEQUVENzlCMURFRDBDRTVCMUNBOEJBRDgzMkI1MzFDMTM5NTZC
QjExRkM0NEExRDA5QzIwRjE5NzYwQzRFQjhERDQwNjQ4MTVFRUVEOUI0N0UxMDBG
QTUzNUNGODZDQzg4RDJDODM0NUE0RTVFNzdCRDFBQkMyQTBFN0E4QUUyOTZENjhF
MTQ1QzhFNDg5NTNFRDc0QUMyRkI3MDVBNTcwQTMwOEJGMjEwODlFQ0Y3RDVCM0RC
NkUwRDA1RkYzRUFFOEFCQjBCNkIzOEYyNkU2NUJDMDJBQkUyNEU5QUY2M0RFNTUx
QTYxMUFEOUZCNEU0NzdGRjZDQTRDMERGNUM3MkY1NjRDNTkxNjQwOEI5Mzk5ODZF
RTJBRTJFMzk3OTc3QzNFQ0RFRjNDRUJGODlCQjBFREYyQUZFNEVCMUVCMDgwM0M1
QkVCNTlFNDZFNTE4RTEzNjZEQjEzQzEyQzZBNDIyOUQ4RURBRTRCMTQ4QUM4REZE
OTNCRDY4OEJCREY4REZENDU3REYzRjc4QTA2NjdCQjFFM0NCMEMyQjk0QzI4MEQ0
MERDRDM0OEEyQjI2ODhFQkZBNzAyQUZFNEJDMUI0NURDQkMwNzM4NUI5REMyMTcw
OTY4RUZDMUVDMUIxOTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAv7AdFzOozYqtDKINZXQtrtebHe0M5bHKi62DK1McE5VrsR/ESh0J
wg8ZdgxOuN1AZIFe7tm0fhAPpTXPhsyI0sg0Wk5ed70avCoOeoriltaOFFyOSJU+
10rC+3BaVwowi/IQiez31bPbbg0F/z6uirsLazjybmW8AqviTpr2PeVRphGtn7Tk
d/9spMDfXHL1ZMWRZAi5OZhu4q4uOXl3w+ze886/ibsO3yr+TrHrCAPFvrWeRuUY
4TZtsTwSxqQinY7a5LFIrI39k71oi73439RX3z94oGZ7sePLDCuUwoDUDc00iism
iOv6cCr+S8G0XcvAc4W53CFwlo78HsGxlwIDAQABo4IB5TCCAeEwHQYDVR0OBBYE
FC25HZQSeob3b34KhRoZWXGl+m3xMB8GA1UdIwQYMBaAFEsVHtdwJisCWSwXlQRR
/Ldf8oBIMA4GA1UdDwEB/wQEAwIHgDBpBgNVHR8EYjBgMF6gXKBahlhyc3luYzov
L25vc3Ryb21vLmhlZmljZWQubmV0L3JlcG8vMTEyMzgxMS8wLzRCMTUxRUQ3NzAy
NjJCMDI1OTJDMTc5NTA0NTFGQ0I3NUZGMjgwNDguY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9TeFVlMTNBbUt3SlpMQmVWQkZIOHQxX3lnRWcuY2VyMIGCBggrBgEF
BQcBCwR2MHQwcgYIKwYBBQUHMAuGZnJzeW5jOi8vbm9zdHJvbW8uaGVmaWNlZC5u
ZXQvcmVwby8xMTIzODExLzAvMzkzMTJlMzIzMzMzMmUzMTM5MzgyZTMwMmYzMjM0
MmQzMjM0MjAzZDNlMjAzNjMxMzMzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+nGMA0GCSqGSIb3
DQEBCwUAA4IBAQCr2HxCWrqVkD0QkCP6Mn714Joc7HJJX9DKBcIAMpEhrQ1AqLYX
CndDjemw2SlBXCcRm9DHHtE45pqO1iDwNygiZgMCeGweUjyqKNAW9VrxznRrZf9R
msSgX0cBMyGpgye1ifb8mChZmW8RONa66iIbKH0nkVtCy3FKr8rYQOnfxTeqIQQh
diUe3nz7urXO0eohK9ftWzAMu5tg158rAU0rEvgvQ2lgpfcplh3fDolnT/q+hxPK
JHZ4qZMgec+vU3dnN7m3D2xSZQiWiT3c9ZYoDcj+2AGl2TqjI1h8Izot3oRMgFbG
1KHRvgrdoxWClZmpXv+GB5FiJr0lFJky8I+w
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org