Route Origin Authorization

$ rpki-client -vvf nostromo.heficed.net/repo/1123852/0/3139332e32392e3138392e302f32342d3234203d3e203333363936.roa
File:                     3139332e32392e3138392e302f32342d3234203d3e203333363936.roa (raw, json)
Hash identifier:          EgxQkxpZPPRO4eXTi4JwSXl0C5YGUlVwMbeRyVzel7E=
Subject key identifier:   48:F8:92:DD:5F:32:4E:E1:5E:D9:F2:49:11:87:33:A6:69:FC:95:BB
Certificate issuer:       /CN=d5aec3ea5f91c20b6ceb3ce70da8cb8a8a5b30b0
Certificate serial:       7FEA5D09AA1880F8DCFC3EC16C565EFDB40ECAA6
Authority key identifier: D5:AE:C3:EA:5F:91:C2:0B:6C:EB:3C:E7:0D:A8:CB:8A:8A:5B:30:B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1a7D6l-Rwgts6zznDajLiopbMLA.cer
Subject info access:      rsync://nostromo.heficed.net/repo/1123852/0/3139332e32392e3138392e302f32342d3234203d3e203333363936.roa
Signing time:             Sat 27 Mar 2021 15:24:48 +0000
ROA not before:           Sat 27 Mar 2021 15:19:48 +0000
ROA not after:            Sun 27 Mar 2022 15:24:48 +0000
asID:                     33696
IP address blocks:        193.29.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ea:5d:09:aa:18:80:f8:dc:fc:3e:c1:6c:56:5e:fd:b4:0e:ca:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5aec3ea5f91c20b6ceb3ce70da8cb8a8a5b30b0
        Validity
            Not Before: Mar 27 15:19:48 2021 GMT
            Not After : Mar 27 15:24:48 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:96:c4:d9:86:eb:01:f1:30:37:5b:b2:8c:95:
                    ce:5c:41:11:b7:c5:f9:01:0e:c5:40:ce:a2:4c:43:
                    9b:5d:e3:d2:52:5e:26:9a:a0:3a:59:67:0d:1b:51:
                    df:92:f5:f7:d3:12:01:46:d2:0a:04:3a:46:c0:e7:
                    84:06:91:89:5b:66:11:8c:08:b6:12:b3:da:9a:1b:
                    27:42:26:b6:f6:df:dc:56:32:8f:f3:cb:83:e6:33:
                    a9:1c:be:65:fc:67:ad:e8:c3:26:91:3d:fe:8c:e0:
                    b4:fe:4e:f6:24:b8:e2:99:9f:d3:62:74:dc:60:c3:
                    37:6d:ee:c5:f8:7e:38:19:42:66:6c:fe:ad:84:4a:
                    70:d3:25:68:d1:0f:b1:21:75:71:05:95:f0:7b:4e:
                    ae:35:88:40:d5:cf:00:c2:7f:96:f5:2a:cc:17:db:
                    10:de:59:fe:be:17:48:8f:71:fb:64:c1:84:2a:ac:
                    8e:f8:f9:29:b7:66:0d:63:e2:4a:21:5b:bc:84:3f:
                    86:df:b8:bd:d1:26:33:fa:2c:52:22:64:d8:ba:69:
                    35:bd:94:de:c7:0c:cf:74:3e:61:ab:b5:1c:18:16:
                    ae:de:e2:aa:56:ac:ec:85:d7:d9:cc:b0:4b:e5:e2:
                    15:3b:61:35:0e:a2:6d:fe:42:69:d5:21:e3:81:11:
                    9b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F8:92:DD:5F:32:4E:E1:5E:D9:F2:49:11:87:33:A6:69:FC:95:BB
            X509v3 Authority Key Identifier:
                keyid:D5:AE:C3:EA:5F:91:C2:0B:6C:EB:3C:E7:0D:A8:CB:8A:8A:5B:30:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://nostromo.heficed.net/repo/1123852/0/D5AEC3EA5F91C20B6CEB3CE70DA8CB8A8A5B30B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a7D6l-Rwgts6zznDajLiopbMLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://nostromo.heficed.net/repo/1123852/0/3139332e32392e3138392e302f32342d3234203d3e203333363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.29.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:6d:4c:1c:d1:d5:88:9c:d6:78:7e:80:ab:be:b0:8e:51:1e:
         fd:bf:08:9c:b8:e5:8f:58:b5:2e:34:0e:dc:3b:25:c5:ea:f3:
         40:d0:9e:34:3f:9a:ac:6f:40:d6:69:4c:1d:d6:1d:44:c4:37:
         58:e8:31:1d:c3:a4:e3:34:29:64:2f:ae:cc:f7:50:bc:b2:08:
         ce:3a:7b:5d:8f:ab:63:1b:05:be:f3:83:9a:b8:82:78:69:d1:
         3f:69:fb:00:98:a3:d2:74:b6:5a:0f:cf:69:d2:35:cc:36:dd:
         10:3c:cb:d5:81:e8:ec:0f:fe:72:06:2e:ba:5b:f2:8a:03:f0:
         16:e0:7b:78:56:ff:9a:00:aa:65:4d:49:1f:32:2c:a2:46:0c:
         3a:95:45:c1:97:00:c8:bd:69:f2:20:4c:6e:2b:33:27:d4:48:
         42:0c:21:d7:c9:17:78:15:1d:6f:a5:84:96:a1:db:59:86:c9:
         e9:bf:d0:29:74:e3:66:98:3a:03:ff:d1:c1:a4:c1:74:8c:43:
         95:91:21:25:06:59:1f:bc:4e:be:65:b3:c7:8b:aa:fe:2c:67:
         97:3c:b9:79:52:9b:3a:6f:56:da:1c:b9:0c:dc:50:5f:9d:77:
         63:45:52:20:2c:b0:48:9a:9a:2a:2e:b2:ba:13:b4:29:9a:88:
         5e:f9:69:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----