Route Origin Authorization

$ rpki-client -vvf nostromo.heficed.net/repo/1123852/0/3139332e32392e3137372e302f32342d3234203d3e203631333137.roa
File:                     3139332e32392e3137372e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          kfkoDWMYcdH6JZY6CtImTq5HfWRsjrPnY0p3l6R5vjo=
Subject key identifier:   FC:18:7C:76:51:67:A6:9D:04:38:82:71:76:4F:31:65:A8:ED:57:F2
Certificate issuer:       /CN=d5aec3ea5f91c20b6ceb3ce70da8cb8a8a5b30b0
Certificate serial:       609F6A3C1D077493558D3F7BEF835E2AE7AB6BD4
Authority key identifier: D5:AE:C3:EA:5F:91:C2:0B:6C:EB:3C:E7:0D:A8:CB:8A:8A:5B:30:B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1a7D6l-Rwgts6zznDajLiopbMLA.cer
Subject info access:      rsync://nostromo.heficed.net/repo/1123852/0/3139332e32392e3137372e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 25 May 2021 08:00:02 +0000
ROA not before:           Tue 25 May 2021 07:55:02 +0000
ROA not after:            Wed 25 May 2022 08:00:02 +0000
asID:                     61317
IP address blocks:        193.29.177.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:9f:6a:3c:1d:07:74:93:55:8d:3f:7b:ef:83:5e:2a:e7:ab:6b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5aec3ea5f91c20b6ceb3ce70da8cb8a8a5b30b0
        Validity
            Not Before: May 25 07:55:02 2021 GMT
            Not After : May 25 08:00:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:45:2f:5d:11:03:5b:30:0c:09:1d:f0:01:ea:
                    50:0d:63:00:b6:14:31:cd:f1:8a:6d:cb:ff:b8:79:
                    50:05:2c:06:a8:a3:fa:be:54:5f:a7:ae:80:ba:c2:
                    78:7b:9d:4c:15:4f:88:ca:e0:52:d3:72:a0:c1:80:
                    3e:f2:fd:b8:b0:00:92:15:de:85:b2:c1:26:70:96:
                    78:16:3a:d8:91:a3:90:44:ba:a6:f3:56:1c:9b:0f:
                    f3:88:63:c2:a8:80:dc:17:07:c1:d8:54:be:bb:a4:
                    1d:b3:65:01:5d:d6:25:51:9c:32:2a:d7:67:39:bb:
                    e9:3c:03:88:a1:c2:65:c4:40:09:ad:d8:4a:4a:24:
                    34:db:68:43:e8:97:95:16:1a:ee:62:5c:3c:90:db:
                    a0:b4:2c:73:db:5f:02:99:d3:64:a3:b9:6e:5f:ef:
                    9a:2b:b5:0e:95:8b:d6:5e:7c:47:05:2f:2b:29:a9:
                    be:ba:7d:c9:3b:23:8a:67:13:50:02:9c:bc:f1:46:
                    84:59:06:09:9f:28:0a:a8:05:14:f1:01:c6:46:39:
                    75:cc:83:97:a1:ea:89:b2:ad:5f:6e:d5:7c:73:5d:
                    ca:b5:0f:6a:bb:0e:58:44:10:51:1a:ea:e8:29:e1:
                    6b:11:f1:24:d0:e6:d4:96:4f:e6:4d:4f:58:b5:b0:
                    76:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:18:7C:76:51:67:A6:9D:04:38:82:71:76:4F:31:65:A8:ED:57:F2
            X509v3 Authority Key Identifier:
                keyid:D5:AE:C3:EA:5F:91:C2:0B:6C:EB:3C:E7:0D:A8:CB:8A:8A:5B:30:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://nostromo.heficed.net/repo/1123852/0/D5AEC3EA5F91C20B6CEB3CE70DA8CB8A8A5B30B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a7D6l-Rwgts6zznDajLiopbMLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://nostromo.heficed.net/repo/1123852/0/3139332e32392e3137372e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.29.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:7c:07:9c:72:ed:20:ad:cd:05:d2:e2:ae:60:00:da:3d:50:
         82:24:a6:a2:a3:44:fa:74:99:b5:be:ca:45:25:d2:4a:a5:ff:
         39:45:3d:dd:e9:87:0e:b7:51:bc:c8:29:7f:c3:35:1d:af:75:
         4d:ed:20:86:ea:07:d6:d6:17:06:ea:89:87:18:9b:e3:58:37:
         e5:14:dc:57:7c:12:85:95:09:f7:a5:d4:4d:f8:79:38:1a:9b:
         0e:2c:07:72:ee:e8:6d:b7:1c:51:b5:92:53:4e:0e:ee:ca:4d:
         e8:6f:a3:31:80:97:f7:8a:a1:c4:1a:dd:a0:e3:2e:b3:ff:87:
         fb:ba:eb:54:4d:2a:38:57:94:cf:cc:99:1d:fa:00:fb:f2:c9:
         56:40:ec:c6:22:64:24:49:87:43:e4:b6:40:2c:91:aa:00:e7:
         df:4b:c3:05:ab:d6:59:cf:ab:ba:c4:3b:cb:0e:4f:75:7e:c9:
         8b:69:d3:11:8d:32:d1:42:de:4d:e9:0e:d0:69:e3:19:a6:eb:
         bb:9c:db:73:58:2c:4a:db:65:da:c4:55:92:17:ee:3d:27:5a:
         b5:6c:ea:30:a6:97:e9:51:7f:30:f6:d1:aa:57:4f:f8:d1:ed:
         ef:40:08:b8:8e:b8:30:4a:12:2e:a4:d9:54:6c:eb:35:6a:b7:
         ee:80:ac:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org