Route Origin Authorization

$ rpki-client -vvf nostromo.heficed.net/repo/1123852/0/3139332e32392e34322e302f32342d3234203d3e203631333137.roa
File:                     3139332e32392e34322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          82J8XrUEiwJvVPg2iWW1VRnQx2hE2JrCG5nd9MPbTkc=
Subject key identifier:   40:09:9E:50:31:BB:9B:C3:A7:45:6A:D0:47:E8:94:F1:9F:F5:C3:3B
Certificate issuer:       /CN=d5aec3ea5f91c20b6ceb3ce70da8cb8a8a5b30b0
Certificate serial:       6D0029AA2FCECA872A6AEDEF2D9E3C28131B2AE8
Authority key identifier: D5:AE:C3:EA:5F:91:C2:0B:6C:EB:3C:E7:0D:A8:CB:8A:8A:5B:30:B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1a7D6l-Rwgts6zznDajLiopbMLA.cer
Subject info access:      rsync://nostromo.heficed.net/repo/1123852/0/3139332e32392e34322e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 25 May 2021 08:00:01 +0000
ROA not before:           Tue 25 May 2021 07:55:01 +0000
ROA not after:            Wed 25 May 2022 08:00:01 +0000
asID:                     61317
IP address blocks:        193.29.42.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:00:29:aa:2f:ce:ca:87:2a:6a:ed:ef:2d:9e:3c:28:13:1b:2a:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5aec3ea5f91c20b6ceb3ce70da8cb8a8a5b30b0
        Validity
            Not Before: May 25 07:55:01 2021 GMT
            Not After : May 25 08:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3f:6b:84:3f:8d:8f:43:b8:d4:86:c5:f7:7d:
                    3f:40:6b:2f:09:30:28:6f:80:ab:02:3f:0d:6b:c3:
                    45:2a:0d:ba:f3:e0:46:f9:af:ac:28:f9:3a:62:48:
                    41:a1:19:be:88:3e:fe:c3:55:f0:aa:72:43:84:55:
                    5e:a5:95:a9:6f:d6:94:3b:5d:9f:3f:b7:36:6c:09:
                    c7:89:58:2b:ed:ed:a3:7d:ea:54:8e:b5:57:73:a3:
                    4d:93:04:d2:1c:d5:99:cd:51:f8:1b:e1:3f:76:03:
                    bb:64:f6:40:2d:9b:6e:1c:73:2e:e2:22:4a:de:8e:
                    02:f9:a4:48:4d:e7:1c:6a:e8:5b:c5:4f:4a:e0:55:
                    a3:c4:b9:c8:8c:67:e9:ee:bc:df:ea:7d:57:0a:6c:
                    76:77:20:d9:17:0d:9a:d2:65:7f:c3:a4:b8:5b:34:
                    4c:34:7d:39:59:9a:4a:e6:5b:a2:a5:53:b6:cd:a9:
                    79:15:a9:eb:65:52:2f:96:11:66:bb:27:f6:22:ce:
                    f9:29:5f:ee:dd:95:9a:1a:fb:91:38:12:65:7f:09:
                    de:c1:21:ab:79:6f:9d:06:cd:a9:f0:80:ca:b4:b5:
                    61:30:8c:95:38:f8:dc:c2:12:eb:e0:3d:88:af:df:
                    0c:02:59:a7:96:63:54:03:6f:44:98:d2:67:9d:59:
                    6d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:09:9E:50:31:BB:9B:C3:A7:45:6A:D0:47:E8:94:F1:9F:F5:C3:3B
            X509v3 Authority Key Identifier:
                keyid:D5:AE:C3:EA:5F:91:C2:0B:6C:EB:3C:E7:0D:A8:CB:8A:8A:5B:30:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://nostromo.heficed.net/repo/1123852/0/D5AEC3EA5F91C20B6CEB3CE70DA8CB8A8A5B30B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a7D6l-Rwgts6zznDajLiopbMLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://nostromo.heficed.net/repo/1123852/0/3139332e32392e34322e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.29.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:03:da:07:ba:32:79:ab:93:d7:62:15:39:97:d4:cb:9f:82:
         b2:24:5a:49:ff:e8:21:e2:cf:bb:99:e3:14:c6:6f:cb:d6:97:
         3d:ce:1a:ee:6d:a0:9c:96:ba:92:0b:76:af:9a:4f:e8:a1:c3:
         24:ea:32:7d:6f:43:f7:06:39:f7:64:9e:84:51:7f:f8:e5:8b:
         3b:09:e7:20:ff:1f:28:c3:66:87:31:4f:c5:0d:02:bb:7f:f2:
         d6:67:6d:8d:38:e0:a0:eb:a9:23:e5:b3:5a:9b:7f:b2:d9:14:
         26:92:d6:ad:5d:95:03:4a:a5:31:07:86:57:b3:8c:37:bc:89:
         45:b0:3c:a5:b8:d4:4d:77:fd:8a:1d:ea:fd:6c:8c:a5:51:22:
         17:1a:79:3d:e5:c6:a2:1a:bc:96:37:a9:a6:8d:fc:9c:de:f4:
         8b:ff:5e:b3:5e:6f:26:55:00:7a:09:e3:03:ed:a4:bc:41:48:
         37:37:1f:be:4a:e2:f3:20:7a:83:1f:de:a2:12:3d:1b:8e:8d:
         88:7d:76:3c:8b:51:16:95:ee:60:f4:0c:23:46:4c:ef:56:c6:
         f6:1b:80:b6:a6:af:53:8b:53:0c:93:a5:e0:7d:bc:3d:1a:72:
         74:06:c7:51:8d:a8:b7:5b:8a:e2:87:36:61:9e:68:22:fb:f5:
         1f:22:a4:85
-----BEGIN CERTIFICATE-----
MIIG1TCCBb2gAwIBAgIUbQApqi/Oyocqau3vLZ48KBMbKugwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDVhZWMzZWE1ZjkxYzIwYjZjZWIzY2U3MGRhOGNiOGE4
YTViMzBiMDAeFw0yMTA1MjUwNzU1MDFaFw0yMjA1MjUwODAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUEzRjZCODQzRjhEOEY0M0I4
RDQ4NkM1Rjc3RDNGNDA2QjJGMDkzMDI4NkY4MEFCMDIzRjBENkJDMzQ1MkEwREJB
RjNFMDQ2RjlBRkFDMjhGOTNBNjI0ODQxQTExOUJFODgzRUZFQzM1NUYwQUE3MjQz
ODQ1NTVFQTU5NUE5NkZENjk0M0I1RDlGM0ZCNzM2NkMwOUM3ODk1ODJCRURFREEz
N0RFQTU0OEVCNTU3NzNBMzREOTMwNEQyMUNENTk5Q0Q1MUY4MUJFMTNGNzYwM0JC
NjRGNjQwMkQ5QjZFMUM3MzJFRTIyMjRBREU4RTAyRjlBNDQ4NERFNzFDNkFFODVC
QzU0RjRBRTA1NUEzQzRCOUM4OEM2N0U5RUVCQ0RGRUE3RDU3MEE2Qzc2NzcyMEQ5
MTcwRDlBRDI2NTdGQzNBNEI4NUIzNDRDMzQ3RDM5NTk5QTRBRTY1QkEyQTU1M0I2
Q0RBOTc5MTVBOUVCNjU1MjJGOTYxMTY2QkIyN0Y2MjJDRUY5Mjk1RkVFREQ5NTlB
MUFGQjkxMzgxMjY1N0YwOURFQzEyMUFCNzk2RjlEMDZDREE5RjA4MENBQjRCNTYx
MzA4Qzk1MzhGOERDQzIxMkVCRTAzRDg4QUZERjBDMDI1OUE3OTY2MzU0MDM2RjQ0
OThEMjY3OUQ1OTZENEIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqj9rhD+Nj0O41IbF930/QGsvCTAob4CrAj8Na8NFKg268+BG+a+s
KPk6YkhBoRm+iD7+w1XwqnJDhFVepZWpb9aUO12fP7c2bAnHiVgr7e2jfepUjrVX
c6NNkwTSHNWZzVH4G+E/dgO7ZPZALZtuHHMu4iJK3o4C+aRITeccauhbxU9K4FWj
xLnIjGfp7rzf6n1XCmx2dyDZFw2a0mV/w6S4WzRMNH05WZpK5luipVO2zal5Fanr
ZVIvlhFmuyf2Is75KV/u3ZWaGvuROBJlfwnewSGreW+dBs2p8IDKtLVhMIyVOPjc
whLr4D2Ir98MAlmnlmNUA29EmNJnnVltSwIDAQABo4IB4zCCAd8wHQYDVR0OBBYE
FEAJnlAxu5vDp0Vq0EfolPGf9cM7MB8GA1UdIwQYMBaAFNWuw+pfkcILbOs85w2o
y4qKWzCwMA4GA1UdDwEB/wQEAwIHgDBpBgNVHR8EYjBgMF6gXKBahlhyc3luYzov
L25vc3Ryb21vLmhlZmljZWQubmV0L3JlcG8vMTEyMzg1Mi8wL0Q1QUVDM0VBNUY5
MUMyMEI2Q0VCM0NFNzBEQThDQjhBOEE1QjMwQjAuY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8xYTdENmwtUndndHM2enpuRGFqTGlvcGJNTEEuY2VyMIGABggrBgEF
BQcBCwR0MHIwcAYIKwYBBQUHMAuGZHJzeW5jOi8vbm9zdHJvbW8uaGVmaWNlZC5u
ZXQvcmVwby8xMTIzODUyLzAvMzEzOTMzMmUzMjM5MmUzNDMyMmUzMDJmMzIzNDJk
MzIzNDIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEdKjANBgkqhkiG9w0B
AQsFAAOCAQEAIwPaB7oyeauT12IVOZfUy5+CsiRaSf/oIeLPu5njFMZvy9aXPc4a
7m2gnJa6kgt2r5pP6KHDJOoyfW9D9wY592SehFF/+OWLOwnnIP8fKMNmhzFPxQ0C
u3/y1mdtjTjgoOupI+WzWpt/stkUJpLWrV2VA0qlMQeGV7OMN7yJRbA8pbjUTXf9
ih3q/WyMpVEiFxp5PeXGohq8ljeppo38nN70i/9es15vJlUAegnjA+2kvEFINzcf
vkri8yB6gx/eohI9G46NiH12PItRFpXuYPQMI0ZM71bG9huAtqavU4tTDJOl4H28
PRpydAbHUY2ot1uK4oc2YZ5oIvv1HyKkhQ==
-----END CERTIFICATE-----