Route Origin Authorization

$ rpki-client -vvf nostromo.heficed.net/repo/1123852/0/3139332e32392e3137372e302f32342d3234203d3e20323039353236.roa
File:                     3139332e32392e3137372e302f32342d3234203d3e20323039353236.roa (raw, json)
Hash identifier:          dziJ7In/FvHxIwM+qcK0S+VSytftsT9xusMHoBjqQ9w=
Subject key identifier:   68:08:20:05:A6:8A:BF:34:AB:C8:D3:7A:A4:AD:B5:2A:81:36:42:89
Certificate issuer:       /CN=d5aec3ea5f91c20b6ceb3ce70da8cb8a8a5b30b0
Certificate serial:       160AB4304521BDA5213F3B06C71AF8C1BE41D4D6
Authority key identifier: D5:AE:C3:EA:5F:91:C2:0B:6C:EB:3C:E7:0D:A8:CB:8A:8A:5B:30:B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1a7D6l-Rwgts6zznDajLiopbMLA.cer
Subject info access:      rsync://nostromo.heficed.net/repo/1123852/0/3139332e32392e3137372e302f32342d3234203d3e20323039353236.roa
Signing time:             Tue 25 May 2021 08:00:01 +0000
ROA not before:           Tue 25 May 2021 07:55:01 +0000
ROA not after:            Wed 25 May 2022 08:00:01 +0000
asID:                     209526
IP address blocks:        193.29.177.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:0a:b4:30:45:21:bd:a5:21:3f:3b:06:c7:1a:f8:c1:be:41:d4:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5aec3ea5f91c20b6ceb3ce70da8cb8a8a5b30b0
        Validity
            Not Before: May 25 07:55:01 2021 GMT
            Not After : May 25 08:00:01 2022 GMT
        Subject: CN=3082010A0282010100B98D20CBA1AFCEAD13D04B4252B971370C22164AB1D93AD29AFEA315DC665680064E7D3677A356DB364E8E8FF6605E9A6459BF0CB88B03B2E03B36FCDA72A0DFE016FE53DD84C297560CF94C049FF913DB560E1783747EB2BDBAF188A5A124970EC338D54B8C4A8A8CA16D232420368F35FDBDF0FC6EE114B1BD079A3F4B98D9CE347E707E044E0FCA61CC27C08F2BA1B6163A6BDEF70DC939710BF6225A4F09FC847C3685BC4B25597CD4143D14F44B68A899D139363F72F6AE7A3EE83B1B256C92EF5DCE86BD6A183DE5725B600CE5D50A5BC0C6D0F5CD0A567386FDDFE70A2EB3298EA64CD5683E547690B0C857226D71774EF5FBB98361962ABE274CE92F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8d:20:cb:a1:af:ce:ad:13:d0:4b:42:52:b9:
                    71:37:0c:22:16:4a:b1:d9:3a:d2:9a:fe:a3:15:dc:
                    66:56:80:06:4e:7d:36:77:a3:56:db:36:4e:8e:8f:
                    f6:60:5e:9a:64:59:bf:0c:b8:8b:03:b2:e0:3b:36:
                    fc:da:72:a0:df:e0:16:fe:53:dd:84:c2:97:56:0c:
                    f9:4c:04:9f:f9:13:db:56:0e:17:83:74:7e:b2:bd:
                    ba:f1:88:a5:a1:24:97:0e:c3:38:d5:4b:8c:4a:8a:
                    8c:a1:6d:23:24:20:36:8f:35:fd:bd:f0:fc:6e:e1:
                    14:b1:bd:07:9a:3f:4b:98:d9:ce:34:7e:70:7e:04:
                    4e:0f:ca:61:cc:27:c0:8f:2b:a1:b6:16:3a:6b:de:
                    f7:0d:c9:39:71:0b:f6:22:5a:4f:09:fc:84:7c:36:
                    85:bc:4b:25:59:7c:d4:14:3d:14:f4:4b:68:a8:99:
                    d1:39:36:3f:72:f6:ae:7a:3e:e8:3b:1b:25:6c:92:
                    ef:5d:ce:86:bd:6a:18:3d:e5:72:5b:60:0c:e5:d5:
                    0a:5b:c0:c6:d0:f5:cd:0a:56:73:86:fd:df:e7:0a:
                    2e:b3:29:8e:a6:4c:d5:68:3e:54:76:90:b0:c8:57:
                    22:6d:71:77:4e:f5:fb:b9:83:61:96:2a:be:27:4c:
                    e9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:08:20:05:A6:8A:BF:34:AB:C8:D3:7A:A4:AD:B5:2A:81:36:42:89
            X509v3 Authority Key Identifier:
                keyid:D5:AE:C3:EA:5F:91:C2:0B:6C:EB:3C:E7:0D:A8:CB:8A:8A:5B:30:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://nostromo.heficed.net/repo/1123852/0/D5AEC3EA5F91C20B6CEB3CE70DA8CB8A8A5B30B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a7D6l-Rwgts6zznDajLiopbMLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://nostromo.heficed.net/repo/1123852/0/3139332e32392e3137372e302f32342d3234203d3e20323039353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.29.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:24:b9:05:68:a1:5b:d4:a9:f6:9b:2c:8d:42:53:de:27:e4:
         4c:8b:2f:1c:58:d6:3d:bc:84:15:97:26:5d:29:65:4d:50:84:
         b7:a2:b5:0d:a0:15:ac:96:58:98:a5:80:dc:66:82:3a:7f:e7:
         70:9c:ed:04:df:98:cd:52:fc:6c:e6:6e:ce:86:cc:47:80:f9:
         9a:0f:96:e2:e6:5b:a1:3f:88:06:05:ba:8d:0b:3f:35:07:ce:
         80:c2:c4:eb:65:00:46:ef:11:f6:46:d6:38:59:b7:78:b5:19:
         fe:a1:36:7b:2b:95:39:0a:75:2d:ff:cd:20:d7:68:08:27:6b:
         50:9c:0e:c4:71:c4:69:a0:c4:e6:99:a6:91:26:1b:3d:d7:48:
         f8:d9:e6:6c:e9:41:d0:6c:a3:68:b2:b6:34:d8:4d:f7:40:bb:
         25:a9:6f:d7:24:61:b2:9f:99:63:19:00:b6:e3:07:e9:41:61:
         86:0c:27:31:43:c0:69:57:78:00:a5:78:8a:45:03:ec:f2:5b:
         72:b0:12:c0:8c:57:36:d3:db:1f:34:e3:aa:d7:12:7b:b7:15:
         e4:e1:4f:21:c6:87:80:70:18:1c:ec:99:09:67:3d:f5:15:05:
         40:d4:85:aa:74:f2:1f:67:4a:cf:d1:40:0a:f2:ec:1b:91:13:
         eb:aa:1f:7e
-----BEGIN CERTIFICATE-----
MIIG2TCCBcGgAwIBAgIUFgq0MEUhvaUhPzsGxxr4wb5B1NYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDVhZWMzZWE1ZjkxYzIwYjZjZWIzY2U3MGRhOGNiOGE4
YTViMzBiMDAeFw0yMTA1MjUwNzU1MDFaFw0yMjA1MjUwODAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjk4RDIwQ0JBMUFGQ0VBRDEz
RDA0QjQyNTJCOTcxMzcwQzIyMTY0QUIxRDkzQUQyOUFGRUEzMTVEQzY2NTY4MDA2
NEU3RDM2NzdBMzU2REIzNjRFOEU4RkY2NjA1RTlBNjQ1OUJGMENCODhCMDNCMkUw
M0IzNkZDREE3MkEwREZFMDE2RkU1M0REODRDMjk3NTYwQ0Y5NEMwNDlGRjkxM0RC
NTYwRTE3ODM3NDdFQjJCREJBRjE4OEE1QTEyNDk3MEVDMzM4RDU0QjhDNEE4QThD
QTE2RDIzMjQyMDM2OEYzNUZEQkRGMEZDNkVFMTE0QjFCRDA3OUEzRjRCOThEOUNF
MzQ3RTcwN0UwNDRFMEZDQTYxQ0MyN0MwOEYyQkExQjYxNjNBNkJERUY3MERDOTM5
NzEwQkY2MjI1QTRGMDlGQzg0N0MzNjg1QkM0QjI1NTk3Q0Q0MTQzRDE0RjQ0QjY4
QTg5OUQxMzkzNjNGNzJGNkFFN0EzRUU4M0IxQjI1NkM5MkVGNURDRTg2QkQ2QTE4
M0RFNTcyNUI2MDBDRTVENTBBNUJDMEM2RDBGNUNEMEE1NjczODZGRERGRTcwQTJF
QjMyOThFQTY0Q0Q1NjgzRTU0NzY5MEIwQzg1NzIyNkQ3MTc3NEVGNUZCQjk4MzYx
OTYyQUJFMjc0Q0U5MkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuY0gy6Gvzq0T0EtCUrlxNwwiFkqx2TrSmv6jFdxmVoAGTn02d6NW
2zZOjo/2YF6aZFm/DLiLA7LgOzb82nKg3+AW/lPdhMKXVgz5TASf+RPbVg4Xg3R+
sr268YiloSSXDsM41UuMSoqMoW0jJCA2jzX9vfD8buEUsb0Hmj9LmNnONH5wfgRO
D8phzCfAjyuhthY6a973Dck5cQv2IlpPCfyEfDaFvEslWXzUFD0U9EtoqJnROTY/
cvauej7oOxslbJLvXc6GvWoYPeVyW2AM5dUKW8DG0PXNClZzhv3f5wousymOpkzV
aD5UdpCwyFcibXF3TvX7uYNhliq+J0zpLwIDAQABo4IB5zCCAeMwHQYDVR0OBBYE
FGgIIAWmir80q8jTeqSttSqBNkKJMB8GA1UdIwQYMBaAFNWuw+pfkcILbOs85w2o
y4qKWzCwMA4GA1UdDwEB/wQEAwIHgDBpBgNVHR8EYjBgMF6gXKBahlhyc3luYzov
L25vc3Ryb21vLmhlZmljZWQubmV0L3JlcG8vMTEyMzg1Mi8wL0Q1QUVDM0VBNUY5
MUMyMEI2Q0VCM0NFNzBEQThDQjhBOEE1QjMwQjAuY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8xYTdENmwtUndndHM2enpuRGFqTGlvcGJNTEEuY2VyMIGEBggrBgEF
BQcBCwR4MHYwdAYIKwYBBQUHMAuGaHJzeW5jOi8vbm9zdHJvbW8uaGVmaWNlZC5u
ZXQvcmVwby8xMTIzODUyLzAvMzEzOTMzMmUzMjM5MmUzMTM3MzcyZTMwMmYzMjM0
MmQzMjM0MjAzZDNlMjAzMjMwMzkzNTMyMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBHbEwDQYJKoZI
hvcNAQELBQADggEBAE8kuQVooVvUqfabLI1CU94n5EyLLxxY1j28hBWXJl0pZU1Q
hLeitQ2gFayWWJilgNxmgjp/53Cc7QTfmM1S/Gzmbs6GzEeA+ZoPluLmW6E/iAYF
uo0LPzUHzoDCxOtlAEbvEfZG1jhZt3i1Gf6hNnsrlTkKdS3/zSDXaAgna1CcDsRx
xGmgxOaZppEmGz3XSPjZ5mzpQdBso2iytjTYTfdAuyWpb9ckYbKfmWMZALbjB+lB
YYYMJzFDwGlXeACleIpFA+zyW3KwEsCMVzbT2x8046rXEnu3FeThTyHGh4BwGBzs
mQlnPfUVBUDUhap08h9nSs/RQAry7BuRE+uqH34=
-----END CERTIFICATE-----