Route Origin Authorization

$ rpki-client -vvf nostromo.heficed.net/repo/1123912/0/3139322e3130392e3131392e302f32342d3234203d3e203439393831.roa
File:                     3139322e3130392e3131392e302f32342d3234203d3e203439393831.roa (raw, json)
Hash identifier:          ya+PlZbj74ZKLvTNBgI9wi25SGDuCKDDYvGC8pPO9E8=
Subject key identifier:   40:35:C6:5F:38:C9:EC:66:BE:0A:0D:60:34:AF:C3:90:D4:A9:9D:4F
Certificate issuer:       /CN=d432ce1d7a6097498e450960cb8e2eb38f2813d3
Certificate serial:       134B7F37CAE8C909EBF6E04D602D8B59E7287F05
Authority key identifier: D4:32:CE:1D:7A:60:97:49:8E:45:09:60:CB:8E:2E:B3:8F:28:13:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1DLOHXpgl0mORQlgy44us48oE9M.cer
Subject info access:      rsync://nostromo.heficed.net/repo/1123912/0/3139322e3130392e3131392e302f32342d3234203d3e203439393831.roa
Signing time:             Sat 29 Jan 2022 06:00:00 +0000
ROA not before:           Sat 29 Jan 2022 05:55:00 +0000
ROA not after:            Sun 29 Jan 2023 06:00:00 +0000
asID:                     49981
IP address blocks:        192.109.119.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:4b:7f:37:ca:e8:c9:09:eb:f6:e0:4d:60:2d:8b:59:e7:28:7f:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d432ce1d7a6097498e450960cb8e2eb38f2813d3
        Validity
            Not Before: Jan 29 05:55:00 2022 GMT
            Not After : Jan 29 06:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c3:12:ca:56:fd:13:3f:92:18:af:35:d9:36:
                    c4:11:1a:13:b3:fa:23:64:70:99:6c:99:f3:ac:e5:
                    d5:73:2e:78:36:14:30:68:8c:9c:92:3a:fa:8d:20:
                    e7:8d:1f:7a:87:36:ab:af:1c:16:56:14:11:7b:77:
                    0a:98:57:ef:7d:37:07:0f:5c:4d:74:b4:c5:f7:fc:
                    78:54:fb:2e:82:fc:0f:99:4c:3f:73:47:3f:2f:a6:
                    41:b6:7d:59:f4:04:b3:2a:e8:26:ff:a7:69:92:fd:
                    31:6b:f1:11:bb:5c:0f:9b:62:c5:88:b4:9e:25:e8:
                    c4:10:cd:71:37:de:ec:28:cb:2f:34:dd:0b:ee:28:
                    50:4e:73:de:80:e5:a0:a9:c7:c2:18:f4:70:f7:2d:
                    0b:5b:b4:40:43:ad:61:ea:50:0a:4c:1c:84:6f:df:
                    90:01:f4:0f:3f:08:e4:95:79:7a:6c:4f:77:e1:68:
                    f7:49:bb:4e:b8:91:9f:7d:1d:b3:d4:9b:22:6a:31:
                    86:9c:19:c0:52:01:b2:f2:9c:63:e6:41:b9:d7:44:
                    fe:0b:e0:5e:13:7d:20:c8:5c:5d:c7:58:14:50:d0:
                    ac:ff:f9:12:35:80:7c:72:cd:9f:77:2f:bf:07:00:
                    59:a1:38:3f:65:e9:a7:65:3f:b5:fb:02:28:0c:be:
                    7f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:35:C6:5F:38:C9:EC:66:BE:0A:0D:60:34:AF:C3:90:D4:A9:9D:4F
            X509v3 Authority Key Identifier:
                keyid:D4:32:CE:1D:7A:60:97:49:8E:45:09:60:CB:8E:2E:B3:8F:28:13:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://nostromo.heficed.net/repo/1123912/0/D432CE1D7A6097498E450960CB8E2EB38F2813D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DLOHXpgl0mORQlgy44us48oE9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://nostromo.heficed.net/repo/1123912/0/3139322e3130392e3131392e302f32342d3234203d3e203439393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.109.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:fb:5f:de:d2:1b:73:df:18:7e:37:af:41:84:65:1b:f7:c6:
         a9:ea:35:3b:f9:30:8a:0a:7e:52:30:ac:43:9f:63:1d:4c:16:
         15:ce:40:af:0c:87:a9:80:60:ac:7c:9d:89:5b:fd:47:82:81:
         8f:ae:16:4f:e5:44:02:fd:77:4a:a1:76:15:0e:ba:10:f2:50:
         e3:4c:a1:08:39:a0:89:97:1c:aa:b9:51:e8:52:94:80:92:29:
         b6:b2:54:a4:57:ad:9c:f1:d9:74:8f:3e:cf:40:fc:62:70:85:
         1b:88:0f:1f:9a:8c:6d:d8:3b:aa:2b:cd:fc:24:f3:4e:a1:b1:
         7e:85:30:25:44:d0:0c:ae:db:72:41:a0:74:23:d8:d5:b4:52:
         aa:53:80:d2:e8:c1:68:5a:cd:6f:d9:09:ba:db:04:60:0a:1b:
         d6:b0:20:57:19:9c:1e:05:cd:2d:65:01:39:1c:2c:25:4e:ea:
         fc:f4:c8:b8:56:b5:13:82:5a:00:a6:03:28:17:60:4e:f4:1b:
         2e:99:02:13:3b:73:b2:fa:1a:95:b9:8d:44:d7:98:a5:d7:db:
         43:0c:ee:e1:42:d3:ba:06:6c:1b:7c:18:64:96:f6:64:96:36:
         a4:c4:3e:43:92:18:ad:c4:05:c3:86:29:02:22:25:d4:e6:9f:
         fc:ab:0f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----