Route Origin Authorization

$ rpki-client -vvf nostromo.heficed.net/repo/1123912/0/3139322e3130392e3130392e302f32342d3234203d3e203631333137.roa
File:                     3139322e3130392e3130392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          k7CMXTC6qdLTq523VD/HCIYr6K/M2ZRLcbDYyPyBEnk=
Subject key identifier:   86:BC:CF:FE:8B:5E:8B:AA:9D:F8:75:EE:54:58:03:27:AB:C5:C3:CB
Certificate issuer:       /CN=d432ce1d7a6097498e450960cb8e2eb38f2813d3
Certificate serial:       04C3BE8F9BCB7A491EA68ACE4C9DF3380AAC365D
Authority key identifier: D4:32:CE:1D:7A:60:97:49:8E:45:09:60:CB:8E:2E:B3:8F:28:13:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1DLOHXpgl0mORQlgy44us48oE9M.cer
Subject info access:      rsync://nostromo.heficed.net/repo/1123912/0/3139322e3130392e3130392e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 13 Apr 2021 10:00:03 +0000
ROA not before:           Tue 13 Apr 2021 09:55:03 +0000
ROA not after:            Wed 13 Apr 2022 10:00:03 +0000
asID:                     61317
IP address blocks:        192.109.109.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c3:be:8f:9b:cb:7a:49:1e:a6:8a:ce:4c:9d:f3:38:0a:ac:36:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d432ce1d7a6097498e450960cb8e2eb38f2813d3
        Validity
            Not Before: Apr 13 09:55:03 2021 GMT
            Not After : Apr 13 10:00:03 2022 GMT
        Subject: CN=3082010A0282010100984F952422AE424EAE13FE95348FE5B4EDB61DD4AD851861CC0723EDEF75A4D38DA3DFEB31F0D33B1A879C824B03ABC360AB6974D933CC0E88BBE5FE323B8556951B991767D83CEEED7E2BD47493E92E71833B7622F9FA92EA9F14A0D08EBF4FA80ECE78CC8C6B8210D7A7F995BD1AFB78E7B5DAF41DFEB0ABBC29B5409C5A1B9AC803E32DCC79BBB697DFA7FB75D6449163B744EC406059ECB1700CCF26EAC9FFB30DE652225DD5CF9967D2D6BA8BBB39EA2E8DB34239E37CC9AF85FA4D86C990B054C2ED1E2C04562C2890F9AA6061E7D1C815060D6BDA343650FF6F96D801C4497F8B443332527416DB547930579A70C58EC02F235E156F7AD99A97D9F61F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4f:95:24:22:ae:42:4e:ae:13:fe:95:34:8f:
                    e5:b4:ed:b6:1d:d4:ad:85:18:61:cc:07:23:ed:ef:
                    75:a4:d3:8d:a3:df:eb:31:f0:d3:3b:1a:87:9c:82:
                    4b:03:ab:c3:60:ab:69:74:d9:33:cc:0e:88:bb:e5:
                    fe:32:3b:85:56:95:1b:99:17:67:d8:3c:ee:ed:7e:
                    2b:d4:74:93:e9:2e:71:83:3b:76:22:f9:fa:92:ea:
                    9f:14:a0:d0:8e:bf:4f:a8:0e:ce:78:cc:8c:6b:82:
                    10:d7:a7:f9:95:bd:1a:fb:78:e7:b5:da:f4:1d:fe:
                    b0:ab:bc:29:b5:40:9c:5a:1b:9a:c8:03:e3:2d:cc:
                    79:bb:b6:97:df:a7:fb:75:d6:44:91:63:b7:44:ec:
                    40:60:59:ec:b1:70:0c:cf:26:ea:c9:ff:b3:0d:e6:
                    52:22:5d:d5:cf:99:67:d2:d6:ba:8b:bb:39:ea:2e:
                    8d:b3:42:39:e3:7c:c9:af:85:fa:4d:86:c9:90:b0:
                    54:c2:ed:1e:2c:04:56:2c:28:90:f9:aa:60:61:e7:
                    d1:c8:15:06:0d:6b:da:34:36:50:ff:6f:96:d8:01:
                    c4:49:7f:8b:44:33:32:52:74:16:db:54:79:30:57:
                    9a:70:c5:8e:c0:2f:23:5e:15:6f:7a:d9:9a:97:d9:
                    f6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:BC:CF:FE:8B:5E:8B:AA:9D:F8:75:EE:54:58:03:27:AB:C5:C3:CB
            X509v3 Authority Key Identifier:
                keyid:D4:32:CE:1D:7A:60:97:49:8E:45:09:60:CB:8E:2E:B3:8F:28:13:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://nostromo.heficed.net/repo/1123912/0/D432CE1D7A6097498E450960CB8E2EB38F2813D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DLOHXpgl0mORQlgy44us48oE9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://nostromo.heficed.net/repo/1123912/0/3139322e3130392e3130392e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.109.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:ef:f5:41:e4:c3:63:96:6b:33:77:e4:ca:20:69:31:1c:18:
         51:b2:b1:c9:fd:6b:4f:fa:6e:0f:62:75:83:91:55:c1:0e:3f:
         b3:69:24:64:a9:a4:0f:b0:91:53:18:d8:de:f6:a4:ae:7f:5b:
         35:70:c4:ac:a0:c0:4d:24:c9:32:c3:8d:9c:d1:57:eb:f3:0b:
         ab:11:c1:23:ad:62:ff:5f:cf:31:57:9a:67:7d:b8:6d:06:d5:
         5a:d8:b9:45:a5:d6:a8:93:49:62:d9:57:5c:dd:27:dc:58:17:
         a2:24:28:98:f6:a5:33:99:e7:f7:bc:07:85:7c:58:da:44:cb:
         7a:40:30:8b:22:e0:6f:b2:82:19:6c:5c:d4:5a:91:bb:55:82:
         00:67:d7:e0:df:aa:9d:d4:4a:a0:8f:b9:61:be:fc:ff:8f:7c:
         a4:5c:26:1d:22:f0:54:e4:94:20:e5:e2:d6:17:34:0d:83:1f:
         1d:6e:6a:d0:c9:08:30:e6:95:5b:30:b6:f7:50:ef:20:29:1d:
         eb:aa:70:0c:00:e5:db:e5:e7:96:1f:07:0f:eb:77:78:51:f1:
         61:8c:ed:3f:cb:ff:17:65:f7:a1:92:5a:da:69:a3:00:dc:07:
         54:1b:b1:f4:e0:f5:e9:d4:9d:73:c0:eb:02:e8:73:36:c1:7d:
         51:12:93:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:39 2023 by rpki-client on console-fra.rpki-client.org