Route Origin Authorization

$ rpki-client -vvf nostromo.heficed.net/repo/635294/0/3139332e382e3230332e302f32342d3234203d3e20323131353835.roa
File:                     3139332e382e3230332e302f32342d3234203d3e20323131353835.roa (raw, json)
Hash identifier:          GIXmU93snbEWV+SAKdPMB/dmkmPnkDCvjL+9l3TKcf4=
Subject key identifier:   3E:6D:96:AC:66:DE:D7:52:8B:0B:2D:02:88:C6:D3:A2:58:0F:0C:EF
Certificate issuer:       /CN=55c7520271b06cea63277a22bc5326d66a9e1dc8
Certificate serial:       0D89FE5D8A91C81DA41187E767DCF5DB7A7E18A9
Authority key identifier: 55:C7:52:02:71:B0:6C:EA:63:27:7A:22:BC:53:26:D6:6A:9E:1D:C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VcdSAnGwbOpjJ3oivFMm1mqeHcg.cer
Subject info access:      rsync://nostromo.heficed.net/repo/635294/0/3139332e382e3230332e302f32342d3234203d3e20323131353835.roa
Signing time:             Tue 21 Jun 2022 15:21:48 +0000
ROA not before:           Tue 21 Jun 2022 15:16:48 +0000
ROA not after:            Wed 21 Jun 2023 15:21:48 +0000
asID:                     211585
IP address blocks:        193.8.203.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:89:fe:5d:8a:91:c8:1d:a4:11:87:e7:67:dc:f5:db:7a:7e:18:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c7520271b06cea63277a22bc5326d66a9e1dc8
        Validity
            Not Before: Jun 21 15:16:48 2022 GMT
            Not After : Jun 21 15:21:48 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:27:e7:2d:ad:d9:26:cb:27:6d:8c:8e:c2:9b:
                    a8:01:49:cf:44:e0:90:0d:08:bf:e0:de:d8:b8:d8:
                    1e:af:ae:2b:85:9f:b9:31:b6:4d:35:1d:b0:64:72:
                    11:7a:79:ac:90:21:ad:8a:88:53:b1:69:1c:b7:c0:
                    f5:10:e2:f5:f9:55:74:cb:98:a7:a6:1a:08:ae:c5:
                    3d:65:21:a9:e1:9e:73:de:7e:67:cf:80:34:97:96:
                    8b:ad:9a:be:d6:37:9f:cf:02:19:f2:50:44:f7:69:
                    1c:30:ac:fd:ef:d5:40:35:67:83:40:cb:6b:bc:c1:
                    2b:00:01:15:71:8f:1d:b4:03:1f:c3:5f:a7:3f:47:
                    49:cf:f8:68:9b:5c:14:f8:a5:f4:3f:b4:25:2f:26:
                    ca:d2:7f:f7:78:2b:25:a6:e0:18:43:ee:48:1e:15:
                    40:82:06:49:2b:4a:13:02:c6:a3:ce:47:8c:4c:e2:
                    03:01:65:66:c1:76:ef:6e:43:b6:b7:16:a6:32:fa:
                    be:41:ca:b3:09:08:d6:ce:d2:f9:58:fe:19:ba:9c:
                    e5:7c:87:57:e1:66:92:e0:fe:f4:53:ca:28:93:95:
                    d1:8a:55:da:4e:9b:7e:af:f0:c2:dd:49:3c:b7:2f:
                    ff:34:d9:95:ec:49:86:7b:70:85:b4:f4:50:d3:f8:
                    fe:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:6D:96:AC:66:DE:D7:52:8B:0B:2D:02:88:C6:D3:A2:58:0F:0C:EF
            X509v3 Authority Key Identifier:
                keyid:55:C7:52:02:71:B0:6C:EA:63:27:7A:22:BC:53:26:D6:6A:9E:1D:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://nostromo.heficed.net/repo/635294/0/55C7520271B06CEA63277A22BC5326D66A9E1DC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcdSAnGwbOpjJ3oivFMm1mqeHcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://nostromo.heficed.net/repo/635294/0/3139332e382e3230332e302f32342d3234203d3e20323131353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.8.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e8:10:e9:74:bc:80:63:8b:e1:ad:36:ce:24:74:e6:b6:70:8b:
         02:83:91:4e:21:2c:d7:81:99:7f:51:30:b6:81:32:cd:a4:3e:
         bd:f0:72:f0:87:6a:be:b6:56:1e:a3:32:d4:59:c2:c6:c3:c1:
         5a:dd:48:06:ff:ae:1e:28:9f:ad:73:81:4d:c5:e7:5d:52:ca:
         54:cd:9d:ee:92:d6:bb:27:02:10:c5:4b:3d:b7:fd:19:f8:66:
         69:de:f7:ac:b3:8c:ae:0f:1a:fb:4f:9c:d3:1e:75:4d:cc:d2:
         55:fc:89:0c:df:5c:c0:e1:2b:a1:cd:fc:c4:0b:a6:a9:fb:87:
         33:cc:1e:66:d0:88:bc:ff:99:b6:c9:38:b2:c5:67:a6:02:c4:
         9d:0c:3f:d3:4a:7f:b0:25:07:ac:41:9f:6a:64:13:ca:aa:a9:
         53:76:b6:06:8b:40:2b:1e:90:6f:60:26:3d:24:93:94:a6:69:
         bf:6f:6e:8c:00:6d:66:ff:3c:1c:1b:2a:ee:a1:2f:f5:fa:ab:
         28:e0:48:5e:77:4a:d5:72:a6:c0:43:8d:33:c0:48:96:c1:45:
         fe:f3:f6:f4:79:be:c1:ad:b1:81:24:78:e9:5f:7e:2e:94:fc:
         84:c9:f7:61:49:14:4a:5d:d1:c2:d5:ce:05:58:6e:b7:71:ad:
         df:7d:83:ab
-----BEGIN CERTIFICATE-----
MIIG1TCCBb2gAwIBAgIUDYn+XYqRyB2kEYfnZ9z123p+GKkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTVjNzUyMDI3MWIwNmNlYTYzMjc3YTIyYmM1MzI2ZDY2
YTllMWRjODAeFw0yMjA2MjExNTE2NDhaFw0yMzA2MjExNTIxNDhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjMyN0U3MkRBREQ5MjZDQjI3
NkQ4QzhFQzI5QkE4MDE0OUNGNDRFMDkwMEQwOEJGRTBERUQ4QjhEODFFQUZBRTJC
ODU5RkI5MzFCNjREMzUxREIwNjQ3MjExN0E3OUFDOTAyMUFEOEE4ODUzQjE2OTFD
QjdDMEY1MTBFMkY1Rjk1NTc0Q0I5OEE3QTYxQTA4QUVDNTNENjUyMUE5RTE5RTcz
REU3RTY3Q0Y4MDM0OTc5NjhCQUQ5QUJFRDYzNzlGQ0YwMjE5RjI1MDQ0Rjc2OTFD
MzBBQ0ZERUZENTQwMzU2NzgzNDBDQjZCQkNDMTJCMDAwMTE1NzE4RjFEQjQwMzFG
QzM1RkE3M0Y0NzQ5Q0ZGODY4OUI1QzE0RjhBNUY0M0ZCNDI1MkYyNkNBRDI3RkY3
NzgyQjI1QTZFMDE4NDNFRTQ4MUUxNTQwODIwNjQ5MkI0QTEzMDJDNkEzQ0U0NzhD
NENFMjAzMDE2NTY2QzE3NkVGNkU0M0I2QjcxNkE2MzJGQUJFNDFDQUIzMDkwOEQ2
Q0VEMkY5NThGRTE5QkE5Q0U1N0M4NzU3RTE2NjkyRTBGRUY0NTNDQTI4OTM5NUQx
OEE1NURBNEU5QjdFQUZGMEMyREQ0OTNDQjcyRkZGMzREOTk1RUM0OTg2N0I3MDg1
QjRGNDUwRDNGOEZFRDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsyfnLa3ZJssnbYyOwpuoAUnPROCQDQi/4N7YuNger64rhZ+5MbZN
NR2wZHIRenmskCGtiohTsWkct8D1EOL1+VV0y5inphoIrsU9ZSGp4Z5z3n5nz4A0
l5aLrZq+1jefzwIZ8lBE92kcMKz979VANWeDQMtrvMErAAEVcY8dtAMfw1+nP0dJ
z/hom1wU+KX0P7QlLybK0n/3eCslpuAYQ+5IHhVAggZJK0oTAsajzkeMTOIDAWVm
wXbvbkO2txamMvq+QcqzCQjWztL5WP4ZupzlfIdX4WaS4P70U8ook5XRilXaTpt+
r/DC3Uk8ty//NNmV7EmGe3CFtPRQ0/j+0QIDAQABo4IB4zCCAd8wHQYDVR0OBBYE
FD5tlqxm3tdSiwstAojG06JYDwzvMB8GA1UdIwQYMBaAFFXHUgJxsGzqYyd6IrxT
JtZqnh3IMA4GA1UdDwEB/wQEAwIHgDBoBgNVHR8EYTBfMF2gW6BZhldyc3luYzov
L25vc3Ryb21vLmhlZmljZWQubmV0L3JlcG8vNjM1Mjk0LzAvNTVDNzUyMDI3MUIw
NkNFQTYzMjc3QTIyQkM1MzI2RDY2QTlFMURDOC5jcmwwZAYIKwYBBQUHAQEEWDBW
MFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9E
RUZBVUxUL1ZjZFNBbkd3Yk9wakozb2l2Rk1tMW1xZUhjZy5jZXIwgYEGCCsGAQUF
BwELBHUwczBxBggrBgEFBQcwC4ZlcnN5bmM6Ly9ub3N0cm9tby5oZWZpY2VkLm5l
dC9yZXBvLzYzNTI5NC8wLzMxMzkzMzJlMzgyZTMyMzAzMzJlMzAyZjMyMzQyZDMy
MzQyMDNkM2UyMDMyMzEzMTM1MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEIyzANBgkqhkiG9w0B
AQsFAAOCAQEA6BDpdLyAY4vhrTbOJHTmtnCLAoORTiEs14GZf1EwtoEyzaQ+vfBy
8IdqvrZWHqMy1FnCxsPBWt1IBv+uHiifrXOBTcXnXVLKVM2d7pLWuycCEMVLPbf9
Gfhmad73rLOMrg8a+0+c0x51TczSVfyJDN9cwOEroc38xAumqfuHM8weZtCIvP+Z
tsk4ssVnpgLEnQw/00p/sCUHrEGfamQTyqqpU3a2BotAKx6Qb2AmPSSTlKZpv29u
jABtZv88HBsq7qEv9fqrKOBIXndK1XKmwEONM8BIlsFF/vP29Hm+wa2xgSR46V9+
LpT8hMn3YUkUSl3RwtXOBVhut3Gt332Dqw==
-----END CERTIFICATE-----