Route Origin Authorization

$ rpki-client -vvf nostromo.heficed.net/repo/1123852/0/3139332e32392e3138392e302f32342d3234203d3e203631333137.roa
File:                     3139332e32392e3138392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          684h+rAxrV5H/0VcR1/U23OKQ2J5jH1fNw4Z4IQM16E=
Subject key identifier:   6C:F2:91:F0:68:AF:DF:48:F7:CE:86:0D:BE:E1:CE:8B:D9:AB:A0:9F
Certificate issuer:       /CN=d5aec3ea5f91c20b6ceb3ce70da8cb8a8a5b30b0
Certificate serial:       425043EFCD4612BC335D9BE407CB0F60A537572C
Authority key identifier: D5:AE:C3:EA:5F:91:C2:0B:6C:EB:3C:E7:0D:A8:CB:8A:8A:5B:30:B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1a7D6l-Rwgts6zznDajLiopbMLA.cer
Subject info access:      rsync://nostromo.heficed.net/repo/1123852/0/3139332e32392e3138392e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 25 May 2021 08:00:02 +0000
ROA not before:           Tue 25 May 2021 07:55:02 +0000
ROA not after:            Wed 25 May 2022 08:00:02 +0000
asID:                     61317
IP address blocks:        193.29.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:50:43:ef:cd:46:12:bc:33:5d:9b:e4:07:cb:0f:60:a5:37:57:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5aec3ea5f91c20b6ceb3ce70da8cb8a8a5b30b0
        Validity
            Not Before: May 25 07:55:02 2021 GMT
            Not After : May 25 08:00:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8c:f8:3d:51:4b:7a:21:e6:d6:91:2e:28:35:
                    81:06:c5:4f:a3:ba:7e:0e:ba:83:de:28:fd:fa:5a:
                    26:f3:84:c2:90:e9:3e:f6:3b:24:dc:98:d6:7e:bc:
                    eb:32:db:7c:43:4b:a5:fe:7c:1c:b3:b3:87:cf:5b:
                    57:af:11:3e:ac:bd:09:10:28:c8:6e:5b:86:71:c2:
                    23:0e:ee:1c:54:f9:9b:65:e1:24:a1:e4:bc:59:76:
                    8d:1c:37:c5:a6:6c:e1:45:ad:08:81:11:37:4b:3e:
                    2b:9a:65:26:32:81:38:23:f2:bd:1e:bc:45:54:ca:
                    3d:4c:88:1c:e0:c0:80:e8:e5:66:73:2c:af:90:54:
                    d9:27:d6:23:c7:48:8c:75:77:55:78:f9:0c:09:c8:
                    36:dd:31:26:41:3e:c6:34:b0:fe:31:a4:b8:7d:3a:
                    ed:d1:1d:f3:0c:60:8b:66:57:db:0e:10:85:8a:cf:
                    7a:e9:7a:ba:2c:d0:4b:52:f1:aa:dc:27:90:61:18:
                    94:11:c8:6f:ee:bb:a3:43:42:e9:28:9c:ed:b9:3c:
                    91:5f:7d:cf:1f:79:ae:1e:6a:51:08:be:76:22:f5:
                    5a:2a:19:0e:22:40:fa:3e:8f:90:ac:18:ad:a6:cf:
                    5a:67:aa:54:f6:60:bf:27:62:5c:70:60:7a:17:00:
                    bd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F2:91:F0:68:AF:DF:48:F7:CE:86:0D:BE:E1:CE:8B:D9:AB:A0:9F
            X509v3 Authority Key Identifier:
                keyid:D5:AE:C3:EA:5F:91:C2:0B:6C:EB:3C:E7:0D:A8:CB:8A:8A:5B:30:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://nostromo.heficed.net/repo/1123852/0/D5AEC3EA5F91C20B6CEB3CE70DA8CB8A8A5B30B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a7D6l-Rwgts6zznDajLiopbMLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://nostromo.heficed.net/repo/1123852/0/3139332e32392e3138392e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.29.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:5a:dc:5d:ed:93:3c:07:41:e6:e4:ee:3c:4a:de:e9:16:5b:
         0b:a9:7d:43:c2:39:9d:37:3c:a0:e0:47:23:17:9a:3f:02:04:
         df:57:d0:a1:be:3c:bf:12:03:8e:dc:82:27:a6:bb:86:35:3e:
         84:db:fa:0e:22:18:0a:d9:c0:68:41:bf:40:e8:cc:2d:7c:cc:
         83:9a:6d:97:41:6d:09:51:35:0c:fd:ff:ef:e3:7f:3a:39:96:
         d3:9e:4b:83:ba:e3:f8:1d:78:9d:54:e7:76:ad:83:a3:18:76:
         23:df:c8:3c:72:24:de:d8:78:2d:19:8a:1f:42:89:9e:ef:5e:
         97:29:40:b7:ff:85:a5:a8:ee:f1:5b:11:3a:82:3f:8b:f1:58:
         8f:72:8c:7e:a1:bb:e9:15:f3:54:89:b3:b8:16:93:3a:52:56:
         de:fb:67:7e:e6:0e:82:e8:ff:c9:b6:fe:c4:1c:ac:e8:91:05:
         a0:c5:22:22:97:bc:68:29:fc:30:97:1c:37:d3:70:87:f6:65:
         b9:cb:f0:8e:e1:5d:9d:c1:6f:94:2a:62:f8:d7:22:89:8e:22:
         01:b6:88:5f:2a:89:47:59:75:9c:a1:e8:bf:2d:05:f1:e2:5e:
         de:c9:6a:49:5b:1c:7a:3b:a1:46:4a:60:f2:91:0a:0f:3a:09:
         d0:fb:00:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----