Route Origin Authorization

$ rpki-client -vvf nostromo.heficed.net/repo/635294/0/3139332e382e3230332e302f32342d3234203d3e203631333137.roa
File:                     3139332e382e3230332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          yTJChm6YmHmqscinM0xaa1lwgqPVSE7yYw8FPUC+wy8=
Subject key identifier:   E4:0F:10:E3:26:9A:06:62:D1:E7:24:9E:50:0E:F2:B4:7E:DE:F8:61
Certificate issuer:       /CN=55c7520271b06cea63277a22bc5326d66a9e1dc8
Certificate serial:       28E63AC5868DB057B0B001C1BB2ACCF51FC18239
Authority key identifier: 55:C7:52:02:71:B0:6C:EA:63:27:7A:22:BC:53:26:D6:6A:9E:1D:C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VcdSAnGwbOpjJ3oivFMm1mqeHcg.cer
Subject info access:      rsync://nostromo.heficed.net/repo/635294/0/3139332e382e3230332e302f32342d3234203d3e203631333137.roa
Signing time:             Wed 09 Mar 2022 13:00:00 +0000
ROA not before:           Wed 09 Mar 2022 12:55:00 +0000
ROA not after:            Thu 09 Mar 2023 13:00:00 +0000
asID:                     61317
IP address blocks:        193.8.203.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:e6:3a:c5:86:8d:b0:57:b0:b0:01:c1:bb:2a:cc:f5:1f:c1:82:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c7520271b06cea63277a22bc5326d66a9e1dc8
        Validity
            Not Before: Mar  9 12:55:00 2022 GMT
            Not After : Mar  9 13:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d1:fe:25:4a:dc:1e:25:c8:eb:de:93:1f:c7:
                    b1:93:17:5f:66:df:27:98:8b:a3:16:18:b6:8f:70:
                    0d:42:cb:0c:26:07:f6:34:45:35:d6:86:f0:44:e4:
                    ad:73:e0:be:77:e5:ed:2f:18:71:a3:be:18:10:e3:
                    db:c5:ed:c8:56:8d:c1:c7:e7:44:77:5b:3a:e7:c2:
                    44:33:88:9b:3e:49:74:5e:65:0c:a8:8f:2e:8d:1c:
                    12:ac:f7:b5:6e:d9:c8:e7:7c:a8:c0:ed:a0:7f:2e:
                    e9:87:44:8b:9d:f7:e1:a0:be:b7:ea:6e:52:c2:fe:
                    8d:58:e4:d5:02:14:f1:d1:c2:3b:2d:83:38:1a:56:
                    6c:9a:4e:3e:47:da:ea:fb:b3:75:d5:e6:f4:85:52:
                    07:d8:47:1e:d1:ee:4e:f7:a7:9c:5d:f3:b4:4a:10:
                    f6:77:d7:0f:79:ee:c6:97:97:96:2f:30:11:49:bf:
                    c7:77:bf:f0:f7:29:25:a0:b9:9a:ea:7a:60:52:17:
                    80:31:fe:40:7a:26:a3:22:1f:6f:06:44:8e:4d:25:
                    47:d0:d4:8b:d0:b5:cd:5e:52:1f:4c:28:b8:96:df:
                    24:a1:f4:7a:3f:21:4f:6f:92:26:07:d1:c3:b2:fe:
                    0d:ce:bb:93:f8:ab:ce:5b:52:e4:0e:32:eb:8f:2e:
                    4d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0F:10:E3:26:9A:06:62:D1:E7:24:9E:50:0E:F2:B4:7E:DE:F8:61
            X509v3 Authority Key Identifier:
                keyid:55:C7:52:02:71:B0:6C:EA:63:27:7A:22:BC:53:26:D6:6A:9E:1D:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://nostromo.heficed.net/repo/635294/0/55C7520271B06CEA63277A22BC5326D66A9E1DC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcdSAnGwbOpjJ3oivFMm1mqeHcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://nostromo.heficed.net/repo/635294/0/3139332e382e3230332e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.8.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:43:b0:1d:75:93:f7:f6:39:37:cc:b0:03:ea:73:8e:bd:2b:
         f4:31:d5:3e:1c:9b:e0:4b:df:b3:16:25:bf:42:e6:14:4e:55:
         98:3d:79:df:29:0a:98:92:81:6d:a7:4e:eb:b7:22:fa:7a:d4:
         32:59:4a:01:30:d2:b3:7f:26:b3:88:c3:d2:98:86:71:55:41:
         69:a3:95:30:1c:ee:0d:a4:a1:d4:b9:28:b3:ae:f7:a8:93:4c:
         a4:c4:1f:d6:de:c6:0e:b0:a3:a7:3b:9e:10:70:6c:03:37:f4:
         83:5e:06:76:3e:ae:98:8f:c1:d4:e3:67:f2:96:af:a1:a9:79:
         f4:62:eb:3d:d8:b1:dc:1e:b8:38:f6:31:97:6f:86:50:e5:96:
         87:96:2c:e9:5d:e3:58:27:d6:26:cd:8f:4b:40:09:35:d5:a4:
         18:70:63:45:c5:79:b7:ba:5f:ab:de:fe:c7:14:2d:84:be:c6:
         61:8d:70:63:ec:e1:12:e9:47:8e:02:b2:3b:45:d8:af:4c:f1:
         78:f4:0c:21:aa:d8:83:94:60:76:01:d8:4d:59:30:7a:26:c3:
         60:a7:e2:bd:eb:5f:48:ac:77:24:66:2e:de:86:b2:b8:8c:d0:
         38:69:d0:44:c9:11:7d:6d:93:e6:76:79:ff:3a:76:4a:6d:bf:
         5a:78:59:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----