Route Origin Authorization

$ rpki-client -vvf nostromo.heficed.net/repo/1123912/0/3139322e3130392e3131372e302f32342d3234203d3e203631333137.roa
File:                     3139322e3130392e3131372e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          Cy1lEfvMzwdVYYlo2uHNY5dPIz3KnS3GRhp+SdoQWFE=
Subject key identifier:   B2:61:71:AD:C1:BE:AB:8A:52:76:4E:6A:6B:20:51:78:97:E8:7F:37
Certificate issuer:       /CN=d432ce1d7a6097498e450960cb8e2eb38f2813d3
Certificate serial:       21DDCEB431BA40F8250D06C89D8A18FE2686CD9A
Authority key identifier: D4:32:CE:1D:7A:60:97:49:8E:45:09:60:CB:8E:2E:B3:8F:28:13:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1DLOHXpgl0mORQlgy44us48oE9M.cer
Subject info access:      rsync://nostromo.heficed.net/repo/1123912/0/3139322e3130392e3131372e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 13 Apr 2021 10:00:02 +0000
ROA not before:           Tue 13 Apr 2021 09:55:02 +0000
ROA not after:            Wed 13 Apr 2022 10:00:02 +0000
asID:                     61317
IP address blocks:        192.109.117.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:dd:ce:b4:31:ba:40:f8:25:0d:06:c8:9d:8a:18:fe:26:86:cd:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d432ce1d7a6097498e450960cb8e2eb38f2813d3
        Validity
            Not Before: Apr 13 09:55:02 2021 GMT
            Not After : Apr 13 10:00:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:26:bc:77:90:8c:23:53:86:3d:85:60:82:47:
                    53:be:8e:3b:e5:2c:94:c2:64:40:51:6d:10:5b:1e:
                    e1:b2:f4:a6:5e:a2:8a:4c:63:43:1b:d1:51:cf:9f:
                    89:e8:2f:b3:87:98:d9:00:80:cd:78:de:67:96:20:
                    1b:e0:e5:45:53:fc:8a:6a:46:1c:ab:eb:f7:d3:85:
                    2c:52:ed:8c:ca:8d:1c:29:cc:75:71:b0:6e:63:ef:
                    37:4b:6e:29:8d:83:0b:08:87:44:de:b7:d5:5d:ce:
                    92:d7:ee:05:aa:24:f0:e2:13:cd:0c:b4:d9:b0:00:
                    e6:80:56:13:a1:85:d0:fe:fe:9c:78:4f:f6:58:a6:
                    e9:40:0a:b9:28:46:07:e1:3e:e4:90:9c:cb:ef:b7:
                    35:0b:6e:ce:b8:3d:76:86:74:b0:78:4f:a6:42:58:
                    b5:c3:fc:ac:ed:bf:cc:d6:0f:2f:2f:4e:6c:e3:92:
                    16:96:85:0a:49:83:22:0a:ed:3a:2d:4a:f4:ae:50:
                    db:74:97:84:3a:2e:96:b2:e8:31:d1:c9:0e:2b:55:
                    9b:8e:b0:81:c5:df:ec:30:3e:f8:27:5a:9e:89:2e:
                    4f:2e:7a:06:d5:5d:f7:53:f2:4e:db:37:a7:35:68:
                    90:64:fe:44:09:5f:f5:70:9f:45:cc:99:93:47:36:
                    62:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:61:71:AD:C1:BE:AB:8A:52:76:4E:6A:6B:20:51:78:97:E8:7F:37
            X509v3 Authority Key Identifier:
                keyid:D4:32:CE:1D:7A:60:97:49:8E:45:09:60:CB:8E:2E:B3:8F:28:13:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://nostromo.heficed.net/repo/1123912/0/D432CE1D7A6097498E450960CB8E2EB38F2813D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DLOHXpgl0mORQlgy44us48oE9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://nostromo.heficed.net/repo/1123912/0/3139322e3130392e3131372e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.109.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:fc:c0:c5:5b:91:0e:6f:f7:4b:76:71:7c:1b:a1:1f:62:34:
         77:9e:f1:bc:a8:d1:68:91:b2:ec:6b:e6:46:4a:84:d7:17:50:
         57:36:36:8f:06:e2:3e:ee:2d:ca:2c:1d:5a:7d:c2:e3:92:70:
         16:fb:55:fc:05:07:35:39:30:e4:bd:fb:82:13:65:d3:90:a8:
         d5:d5:c8:56:0a:ff:b4:f1:ee:e3:65:2f:e7:5f:83:3c:10:ab:
         f0:fc:7e:70:f0:f3:6a:66:7f:c2:e8:6f:36:46:86:fb:52:08:
         11:2c:84:4e:df:00:4e:d1:79:bd:58:62:b2:32:e5:4e:49:a2:
         d1:5b:24:50:34:b1:9d:29:56:46:fb:33:36:54:ad:ae:2d:29:
         fb:f1:0c:79:95:8e:61:06:82:62:88:a1:a2:ca:cb:f9:8e:eb:
         82:1d:3a:6c:9a:62:67:a0:c0:18:cf:e7:92:e2:7d:38:ac:29:
         80:40:a4:0f:1f:2d:25:75:9b:cb:2e:5d:89:fd:60:0c:7e:87:
         68:9a:2c:d1:85:bf:be:f7:2f:55:a5:f3:1b:bb:47:67:b2:ab:
         9f:b6:35:7c:52:77:c6:7f:6c:85:3f:62:37:20:a0:7f:08:ad:
         df:ef:04:a0:b8:15:b6:cf:09:63:b9:a8:1d:56:8c:29:4c:b9:
         8a:55:bf:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----