Route Origin Authorization

$ rpki-client -vvf nostromo.heficed.net/repo/1123852/0/3139332e32392e3235312e302f32342d3234203d3e203631333137.roa
File:                     3139332e32392e3235312e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          YzX6mxn361nL0lqL4ijLLCjBjBVmScbEczWu04eCpfE=
Subject key identifier:   FC:1C:62:A9:88:5A:C5:2F:9C:FC:CD:48:E6:FE:8D:2F:B3:A8:DF:78
Certificate issuer:       /CN=d5aec3ea5f91c20b6ceb3ce70da8cb8a8a5b30b0
Certificate serial:       79CC418393A5E95DC8D1CBB4E15351EE5B7965B9
Authority key identifier: D5:AE:C3:EA:5F:91:C2:0B:6C:EB:3C:E7:0D:A8:CB:8A:8A:5B:30:B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1a7D6l-Rwgts6zznDajLiopbMLA.cer
Subject info access:      rsync://nostromo.heficed.net/repo/1123852/0/3139332e32392e3235312e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 25 May 2021 08:00:01 +0000
ROA not before:           Tue 25 May 2021 07:55:01 +0000
ROA not after:            Wed 25 May 2022 08:00:01 +0000
asID:                     61317
IP address blocks:        193.29.251.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:cc:41:83:93:a5:e9:5d:c8:d1:cb:b4:e1:53:51:ee:5b:79:65:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5aec3ea5f91c20b6ceb3ce70da8cb8a8a5b30b0
        Validity
            Not Before: May 25 07:55:01 2021 GMT
            Not After : May 25 08:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a9:05:e5:37:70:ee:89:2b:9a:5f:6b:33:c9:
                    43:c5:9d:b0:1a:25:20:d9:ad:5e:b1:82:58:25:00:
                    63:57:97:32:4c:ec:63:d6:43:c3:f5:aa:04:22:98:
                    be:1e:35:91:8d:16:39:32:13:f8:e6:c7:07:2a:ad:
                    6d:67:68:30:a9:16:eb:39:09:bb:c6:1e:64:af:48:
                    9d:25:07:9b:9b:6f:65:2e:5e:04:8f:bb:35:14:e1:
                    30:83:ba:d5:0f:5f:bc:b5:ce:88:af:fc:89:0f:93:
                    52:96:8a:b8:20:f7:03:7d:dc:a1:93:b5:c9:2c:fd:
                    9c:b4:e4:97:0f:d2:51:8c:26:e2:89:78:18:19:d1:
                    34:e3:d5:2d:66:29:32:c5:5f:11:a1:6a:97:4e:f9:
                    02:6a:2e:cc:51:79:8d:99:34:c0:ad:87:ed:fa:94:
                    28:ef:58:d0:1f:7b:69:cc:42:f6:9e:47:6c:c8:3b:
                    d1:0f:6f:1b:fc:8f:99:b3:66:2b:a5:ef:60:86:a9:
                    3a:8b:37:a4:f6:fb:7a:e1:06:c6:ff:5a:22:44:f5:
                    9b:0a:0b:2a:f5:27:c9:6a:ab:b6:ca:5a:31:2b:e6:
                    76:5e:d1:f2:5f:8f:bb:09:d6:45:c6:bf:99:6b:df:
                    dc:3e:17:20:91:f2:c8:ec:24:d1:f3:95:f8:ff:ac:
                    c2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:1C:62:A9:88:5A:C5:2F:9C:FC:CD:48:E6:FE:8D:2F:B3:A8:DF:78
            X509v3 Authority Key Identifier:
                keyid:D5:AE:C3:EA:5F:91:C2:0B:6C:EB:3C:E7:0D:A8:CB:8A:8A:5B:30:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://nostromo.heficed.net/repo/1123852/0/D5AEC3EA5F91C20B6CEB3CE70DA8CB8A8A5B30B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a7D6l-Rwgts6zznDajLiopbMLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://nostromo.heficed.net/repo/1123852/0/3139332e32392e3235312e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.29.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:71:57:50:06:99:bc:08:73:8b:6a:f1:a8:ec:56:30:d8:16:
         5d:17:57:d0:b9:7f:27:26:80:08:a5:97:64:27:17:ad:b4:61:
         4a:1e:a4:da:ad:82:1d:37:50:17:5d:8f:e9:b4:c8:4d:f5:a3:
         36:6f:20:e9:37:42:18:30:1b:b0:21:eb:3a:c2:45:2b:98:36:
         ea:58:98:4c:18:e5:d9:ba:a9:12:19:a6:eb:77:37:72:92:ef:
         cc:67:a5:d3:ba:68:3b:c1:5c:6e:5e:d4:84:08:2e:81:c0:79:
         f6:bd:7f:d8:ba:93:59:83:65:ee:71:a9:95:1b:f4:1b:3e:b8:
         a8:d9:0f:1f:9f:9c:4c:e5:06:79:76:d2:f6:82:71:7b:dc:72:
         5e:bc:20:e0:48:73:c1:0c:00:3d:9e:da:48:68:78:23:8e:bc:
         3b:33:77:59:dc:28:80:20:2e:d0:a0:2a:04:c3:c0:48:a5:9d:
         f1:de:e0:36:0b:de:24:bb:26:66:30:4d:52:03:4e:32:5e:2b:
         98:21:a9:85:7a:c5:22:fa:4b:2a:41:63:27:1d:ba:93:23:be:
         fb:15:8f:d6:70:77:be:af:2f:79:0d:24:d2:ab:98:5d:6e:63:
         4e:aa:9e:1c:b1:57:76:76:f2:87:b8:15:eb:65:b2:16:5c:f3:
         81:52:6a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----