Route Origin Authorization

$ rpki-client -vvf nostromo.heficed.net/repo/1123912/0/3139322e3130392e3131302e302f32342d3234203d3e203631333137.roa
File:                     3139322e3130392e3131302e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          PJEZMkj9Y3OMAwbLrv8duJPLiYveya9JYbB4FuabTkY=
Subject key identifier:   52:72:B8:DA:61:9A:B1:18:57:2E:AA:E8:00:E5:6E:41:91:B9:71:22
Certificate issuer:       /CN=d432ce1d7a6097498e450960cb8e2eb38f2813d3
Certificate serial:       1A500974828A9D4189BC02AD4D9FF982D13E3E47
Authority key identifier: D4:32:CE:1D:7A:60:97:49:8E:45:09:60:CB:8E:2E:B3:8F:28:13:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1DLOHXpgl0mORQlgy44us48oE9M.cer
Subject info access:      rsync://nostromo.heficed.net/repo/1123912/0/3139322e3130392e3131302e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 13 Apr 2021 10:00:02 +0000
ROA not before:           Tue 13 Apr 2021 09:55:02 +0000
ROA not after:            Wed 13 Apr 2022 10:00:02 +0000
asID:                     61317
IP address blocks:        192.109.110.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:50:09:74:82:8a:9d:41:89:bc:02:ad:4d:9f:f9:82:d1:3e:3e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d432ce1d7a6097498e450960cb8e2eb38f2813d3
        Validity
            Not Before: Apr 13 09:55:02 2021 GMT
            Not After : Apr 13 10:00:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:70:53:0d:29:d3:c1:dc:9e:9c:e3:1b:9d:2b:
                    8a:cc:b1:a8:a3:8e:91:85:53:7d:c4:c0:11:cd:94:
                    34:a2:ad:95:5a:67:e0:40:62:c4:76:6d:d0:5e:f4:
                    e7:2d:e4:cd:99:68:a3:62:fa:1a:6b:87:f4:b7:15:
                    a3:89:24:d7:06:5b:37:f8:aa:7e:e8:7c:65:5f:36:
                    1d:e8:89:d2:b4:67:af:a6:d7:64:7c:d6:c5:c0:8a:
                    e0:38:e7:d3:0d:3d:84:85:e0:81:4d:25:da:b5:79:
                    d1:2b:71:c9:b5:ae:64:fa:9c:20:8e:5d:cc:8e:ba:
                    66:64:2a:f2:53:ad:74:7e:be:32:36:44:07:70:de:
                    6a:cc:cf:39:1b:f7:46:82:fb:58:85:0f:5d:2d:4d:
                    6f:af:54:05:05:9a:ba:71:8d:20:b3:bd:c3:32:10:
                    b1:7f:df:0f:a8:60:4e:61:6e:c6:02:53:6a:01:dc:
                    49:dc:e5:49:99:55:e5:55:ac:e9:a2:13:8d:82:6c:
                    27:17:fc:7e:48:39:9a:a7:3c:cf:7c:9d:25:e7:f0:
                    84:b1:70:54:7a:95:4e:90:e4:db:37:95:80:13:d1:
                    87:d0:0a:0c:fd:2e:f5:91:a2:17:97:d6:3d:c5:ec:
                    b6:13:f3:ed:31:d6:63:52:c9:6f:fd:89:72:45:d5:
                    5d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:72:B8:DA:61:9A:B1:18:57:2E:AA:E8:00:E5:6E:41:91:B9:71:22
            X509v3 Authority Key Identifier:
                keyid:D4:32:CE:1D:7A:60:97:49:8E:45:09:60:CB:8E:2E:B3:8F:28:13:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://nostromo.heficed.net/repo/1123912/0/D432CE1D7A6097498E450960CB8E2EB38F2813D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DLOHXpgl0mORQlgy44us48oE9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://nostromo.heficed.net/repo/1123912/0/3139322e3130392e3131302e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.109.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:91:db:95:a5:98:3e:c1:93:c1:35:e9:64:81:16:40:a5:b6:
         0c:8b:78:b3:35:13:4f:d8:35:2b:44:d9:5f:f0:49:52:13:02:
         52:42:0a:eb:a8:5e:2a:7a:9c:7f:42:da:9f:ee:c7:c8:de:58:
         1f:f9:b4:b9:4b:52:ef:07:4e:1f:bd:31:41:68:45:1b:b6:86:
         36:21:6f:17:ac:20:cf:ac:39:9a:f5:60:04:61:4d:35:e3:81:
         52:9c:0d:93:40:16:89:03:81:dc:c9:a2:09:58:8a:7f:71:32:
         f8:32:56:96:73:7a:c1:ce:90:4a:cb:ac:af:c8:e7:ae:d1:2c:
         e8:ba:ca:97:8e:a6:4d:b3:4e:b9:d9:76:25:59:ba:2c:f3:bd:
         ac:bd:09:e8:71:c6:15:f9:ce:86:27:4f:ac:de:ea:bc:e2:aa:
         10:a6:6d:7e:7a:d3:57:32:97:60:d2:ab:e8:14:1e:ec:ee:38:
         f9:49:b2:80:9b:ad:5c:4b:4f:35:e8:01:ff:77:cf:0e:49:41:
         67:04:2d:e8:04:05:67:3f:e8:9f:bf:d4:f2:4c:64:61:9e:15:
         e0:59:35:36:2c:30:df:f2:67:ba:26:f0:27:00:97:64:39:42:
         55:68:dc:86:48:ac:81:73:34:ea:66:7b:ca:4f:3f:14:15:56:
         47:8c:c6:85
-----BEGIN CERTIFICATE-----
MIIG2TCCBcGgAwIBAgIUGlAJdIKKnUGJvAKtTZ/5gtE+PkcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDQzMmNlMWQ3YTYwOTc0OThlNDUwOTYwY2I4ZTJlYjM4
ZjI4MTNkMzAeFw0yMTA0MTMwOTU1MDJaFw0yMjA0MTMxMDAwMDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDE3MDUzMEQyOUQzQzFEQzlF
OUNFMzFCOUQyQjhBQ0NCMUE4QTM4RTkxODU1MzdEQzRDMDExQ0Q5NDM0QTJBRDk1
NUE2N0UwNDA2MkM0NzY2REQwNUVGNEU3MkRFNENEOTk2OEEzNjJGQTFBNkI4N0Y0
QjcxNUEzODkyNEQ3MDY1QjM3RjhBQTdFRTg3QzY1NUYzNjFERTg4OUQyQjQ2N0FG
QTZENzY0N0NENkM1QzA4QUUwMzhFN0QzMEQzRDg0ODVFMDgxNEQyNURBQjU3OUQx
MkI3MUM5QjVBRTY0RkE5QzIwOEU1RENDOEVCQTY2NjQyQUYyNTNBRDc0N0VCRTMy
MzY0NDA3NzBERTZBQ0NDRjM5MUJGNzQ2ODJGQjU4ODUwRjVEMkQ0RDZGQUY1NDA1
MDU5QUJBNzE4RDIwQjNCREMzMzIxMEIxN0ZERjBGQTg2MDRFNjE2RUM2MDI1MzZB
MDFEQzQ5RENFNTQ5OTk1NUU1NTVBQ0U5QTIxMzhEODI2QzI3MTdGQzdFNDgzOTlB
QTczQ0NGN0M5RDI1RTdGMDg0QjE3MDU0N0E5NTRFOTBFNERCMzc5NTgwMTNEMTg3
RDAwQTBDRkQyRUY1OTFBMjE3OTdENjNEQzVFQ0I2MTNGM0VEMzFENjYzNTJDOTZG
RkQ4OTcyNDVENTVEMzcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0XBTDSnTwdyenOMbnSuKzLGoo46RhVN9xMARzZQ0oq2VWmfgQGLE
dm3QXvTnLeTNmWijYvoaa4f0txWjiSTXBls3+Kp+6HxlXzYd6InStGevptdkfNbF
wIrgOOfTDT2EheCBTSXatXnRK3HJta5k+pwgjl3MjrpmZCryU610fr4yNkQHcN5q
zM85G/dGgvtYhQ9dLU1vr1QFBZq6cY0gs73DMhCxf98PqGBOYW7GAlNqAdxJ3OVJ
mVXlVazpohONgmwnF/x+SDmapzzPfJ0l5/CEsXBUepVOkOTbN5WAE9GH0AoM/S71
kaIXl9Y9xey2E/PtMdZjUslv/YlyRdVdNwIDAQABo4IB5zCCAeMwHQYDVR0OBBYE
FFJyuNphmrEYVy6q6ADlbkGRuXEiMB8GA1UdIwQYMBaAFNQyzh16YJdJjkUJYMuO
LrOPKBPTMA4GA1UdDwEB/wQEAwIHgDBpBgNVHR8EYjBgMF6gXKBahlhyc3luYzov
L25vc3Ryb21vLmhlZmljZWQubmV0L3JlcG8vMTEyMzkxMi8wL0Q0MzJDRTFEN0E2
MDk3NDk4RTQ1MDk2MENCOEUyRUIzOEYyODEzRDMuY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8xRExPSFhwZ2wwbU9SUWxneTQ0dXM0OG9FOU0uY2VyMIGEBggrBgEF
BQcBCwR4MHYwdAYIKwYBBQUHMAuGaHJzeW5jOi8vbm9zdHJvbW8uaGVmaWNlZC5u
ZXQvcmVwby8xMTIzOTEyLzAvMzEzOTMyMmUzMTMwMzkyZTMxMzEzMDJlMzAyZjMy
MzQyZDMyMzQyMDNkM2UyMDM2MzEzMzMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAbW4wDQYJKoZI
hvcNAQELBQADggEBAJaR25WlmD7Bk8E16WSBFkCltgyLeLM1E0/YNStE2V/wSVIT
AlJCCuuoXip6nH9C2p/ux8jeWB/5tLlLUu8HTh+9MUFoRRu2hjYhbxesIM+sOZr1
YARhTTXjgVKcDZNAFokDgdzJoglYin9xMvgyVpZzesHOkErLrK/I567RLOi6ypeO
pk2zTrnZdiVZuizzvay9CehxxhX5zoYnT6ze6rziqhCmbX5601cyl2DSq+gUHuzu
OPlJsoCbrVxLTzXoAf93zw5JQWcELegEBWc/6J+/1PJMZGGeFeBZNTYsMN/yZ7om
8CcAl2Q5QlVo3IZIrIFzNOpme8pPPxQVVkeMxoU=
-----END CERTIFICATE-----