Route Origin Authorization

$ rpki-client -vvf nostromo.heficed.net/repo/1123852/0/3139332e32392e34322e302f32342d3234203d3e20323039353236.roa
File:                     3139332e32392e34322e302f32342d3234203d3e20323039353236.roa (raw, json)
Hash identifier:          tpM/osKx9AURidbWnd/K3xh5k5I23EUxiOiRIQF2FSY=
Subject key identifier:   37:72:A3:68:A7:47:07:05:3A:79:B2:87:DD:02:FC:AC:76:42:3C:68
Certificate issuer:       /CN=d5aec3ea5f91c20b6ceb3ce70da8cb8a8a5b30b0
Certificate serial:       43D327CAD729A8985F1E48A6EE1EC06AE3B0E2D3
Authority key identifier: D5:AE:C3:EA:5F:91:C2:0B:6C:EB:3C:E7:0D:A8:CB:8A:8A:5B:30:B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1a7D6l-Rwgts6zznDajLiopbMLA.cer
Subject info access:      rsync://nostromo.heficed.net/repo/1123852/0/3139332e32392e34322e302f32342d3234203d3e20323039353236.roa
Signing time:             Tue 25 May 2021 08:00:02 +0000
ROA not before:           Tue 25 May 2021 07:55:02 +0000
ROA not after:            Wed 25 May 2022 08:00:02 +0000
asID:                     209526
IP address blocks:        193.29.42.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:d3:27:ca:d7:29:a8:98:5f:1e:48:a6:ee:1e:c0:6a:e3:b0:e2:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5aec3ea5f91c20b6ceb3ce70da8cb8a8a5b30b0
        Validity
            Not Before: May 25 07:55:02 2021 GMT
            Not After : May 25 08:00:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:80:ae:93:b7:d4:15:5c:c4:50:d1:78:5d:bb:
                    48:3d:c9:00:bd:35:9e:c2:88:ac:19:8b:c5:d5:6b:
                    5c:80:6f:47:ba:92:ed:a9:e1:24:25:ad:f2:ad:c2:
                    8c:78:63:5b:97:c5:77:01:23:47:47:2f:1e:f8:3d:
                    c6:5c:6d:e7:fb:84:f7:31:be:de:19:b9:8c:f5:e7:
                    4e:de:f3:87:e0:0f:2c:47:37:35:f0:54:2d:f8:b6:
                    3e:c0:d3:b8:4d:ce:1e:61:45:ae:d2:0b:e4:c7:e6:
                    db:a3:4c:37:48:66:50:a3:e5:83:d5:b5:7c:bf:86:
                    cf:95:08:5c:7d:04:08:dc:f0:fb:7f:aa:8a:a0:87:
                    38:38:04:b9:c5:48:90:34:a1:a9:8d:79:64:f5:11:
                    0c:76:aa:78:9d:fb:ab:51:8b:6b:71:ac:26:a5:ba:
                    0e:e1:a7:4f:2e:d6:c2:22:a7:d4:ed:6f:0a:a3:46:
                    55:21:93:16:f9:aa:dd:87:92:45:1c:f4:2d:ac:f6:
                    6a:03:37:75:03:ff:e1:41:87:7f:d4:7c:5f:ce:08:
                    ad:e1:61:71:20:37:f6:15:90:d0:bd:7d:16:15:d6:
                    a2:e6:fb:b5:c1:94:ce:1a:1d:c2:84:b2:68:91:1c:
                    8c:02:42:74:51:a1:c2:93:3d:79:0e:00:02:18:93:
                    d7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:72:A3:68:A7:47:07:05:3A:79:B2:87:DD:02:FC:AC:76:42:3C:68
            X509v3 Authority Key Identifier:
                keyid:D5:AE:C3:EA:5F:91:C2:0B:6C:EB:3C:E7:0D:A8:CB:8A:8A:5B:30:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://nostromo.heficed.net/repo/1123852/0/D5AEC3EA5F91C20B6CEB3CE70DA8CB8A8A5B30B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a7D6l-Rwgts6zznDajLiopbMLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://nostromo.heficed.net/repo/1123852/0/3139332e32392e34322e302f32342d3234203d3e20323039353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.29.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:ef:40:16:68:3f:bd:2e:5c:0e:80:19:a2:8e:a2:ae:4f:6f:
         5e:97:e6:f5:1e:3a:87:80:91:9e:a5:4b:34:7b:ea:0a:75:7f:
         79:5b:9b:7a:6e:7e:e7:35:f5:43:9a:4a:bd:e4:57:27:26:88:
         6d:e1:3b:f2:e9:b2:a3:7a:bc:99:7a:90:55:55:19:25:03:2d:
         80:34:2d:0f:dd:17:12:43:35:23:75:e9:8a:4c:35:b2:0c:f3:
         aa:7c:8d:bd:f8:44:fe:e2:2f:0d:41:72:dd:15:09:78:b6:a3:
         c9:cd:5f:46:b9:92:4a:fc:c4:a3:b0:06:63:6b:5a:63:58:4f:
         a9:67:9c:34:ee:89:2a:d7:fe:ef:ab:a5:8a:da:cb:e2:86:07:
         87:96:e2:88:a2:63:5b:bf:8e:46:a7:ee:ee:b0:e9:55:8f:05:
         e3:bb:59:ff:6a:fe:cf:70:1a:7d:36:45:0b:02:3d:be:85:cb:
         d1:8f:29:6f:5f:2f:02:9d:8d:c8:83:69:f2:7b:00:1b:3f:f5:
         35:49:14:25:03:70:19:2e:99:75:c6:59:cb:43:12:12:98:bf:
         22:7c:9a:ed:92:fd:82:e0:23:52:96:8e:df:0a:9f:9a:49:d6:
         69:85:47:66:33:4c:3c:2b:37:a2:41:b7:71:33:53:83:f4:d7:
         ec:23:3c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----