Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/uplift/koTlzKvDNPagzjhpUVrYkMT8S7E.roa
File:                     koTlzKvDNPagzjhpUVrYkMT8S7E.roa (raw, json)
Hash identifier:          eC6xZ2jj7GcH8sff8zIKat4n4rLeJOV31JVxGgvQvDE=
Subject key identifier:   92:84:E5:CC:AB:C3:34:F6:A0:CE:38:69:51:5A:D8:90:C4:FC:4B:B1
Certificate issuer:       /CN=51164cee3cf55397cbcd8079a520a8d0952061d2
Certificate serial:       03
Authority key identifier: 51:16:4C:EE:3C:F5:53:97:CB:CD:80:79:A5:20:A8:D0:95:20:61:D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/URZM7jz1U5fLzYB5pSCo0JUgYdI.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/uplift/koTlzKvDNPagzjhpUVrYkMT8S7E.roa
Signing time:             Fri 05 Feb 2021 09:33:11 +0000
ROA not before:           Fri 05 Feb 2021 09:33:11 +0000
ROA not after:            Fri 01 Jul 2022 00:00:00 +0000
asID:                     1883
IP address blocks:        2001:67c:2938::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51164cee3cf55397cbcd8079a520a8d0952061d2
        Validity
            Not Before: Feb  5 09:33:11 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=9284E5CCABC334F6A0CE3869515AD890C4FC4BB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0e:30:f2:32:4a:49:14:6d:86:f1:6d:57:8a:
                    37:69:ec:bf:b7:97:00:09:f0:22:fb:eb:fd:ac:33:
                    55:77:79:17:fe:84:1b:5f:fd:a5:df:af:d3:2c:6d:
                    c5:83:36:d1:51:cb:d7:e8:60:71:1f:43:5e:46:3b:
                    9c:d7:a0:fd:6f:bb:d9:84:0b:79:00:c5:3d:c0:85:
                    a1:2f:4f:9e:dd:ff:b2:42:3b:ae:ab:62:74:4e:fa:
                    e5:6a:78:c9:71:1e:ac:24:b8:5a:45:51:c6:98:51:
                    1c:bf:41:5d:1b:be:00:99:8b:5f:9d:85:02:52:b4:
                    07:e6:cc:e9:50:ca:fd:12:53:bb:fd:8a:ab:c8:ae:
                    24:fe:c8:5d:25:c3:6a:0d:08:d4:46:e3:e7:c4:cb:
                    16:27:98:7e:67:9f:86:87:c0:d1:50:42:41:60:e1:
                    a1:97:2f:86:dc:ca:ad:2f:a8:e5:ce:33:a4:4c:3d:
                    13:b9:51:d4:a6:95:dd:f0:e9:f1:27:37:9d:ab:4a:
                    c3:7f:2e:8c:9e:ca:24:26:8b:c7:c2:10:ee:fb:ee:
                    fa:16:7d:5a:c8:55:5e:52:e7:ec:ac:52:66:ff:f0:
                    7f:79:86:2c:46:90:cc:dc:ca:db:15:9f:1a:8d:15:
                    a9:6c:fe:3b:52:b4:40:6d:f3:ab:6f:5b:30:07:55:
                    1f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:84:E5:CC:AB:C3:34:F6:A0:CE:38:69:51:5A:D8:90:C4:FC:4B:B1
            X509v3 Authority Key Identifier:
                keyid:51:16:4C:EE:3C:F5:53:97:CB:CD:80:79:A5:20:A8:D0:95:20:61:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/uplift/URZM7jz1U5fLzYB5pSCo0JUgYdI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/URZM7jz1U5fLzYB5pSCo0JUgYdI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/uplift/koTlzKvDNPagzjhpUVrYkMT8S7E.roa
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/news-public.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2938::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:e9:6c:3e:f2:df:ca:20:d2:76:9c:ab:26:b0:f0:95:1c:6d:
         2e:65:72:93:3d:5b:9f:45:45:0a:b8:41:c7:bd:da:b0:5a:5b:
         fa:ee:29:30:53:c6:c6:e3:7b:40:eb:f1:0e:a3:57:ff:e7:b5:
         d7:c6:f5:4f:3f:fc:59:ce:92:97:d7:36:54:bc:36:b4:32:3a:
         f8:7d:17:33:b4:1f:e0:24:ae:49:8c:f4:ff:e9:df:a0:20:09:
         31:14:56:0c:06:86:b0:ec:85:b9:25:8b:cc:03:1d:7a:16:90:
         f0:2c:bc:a6:04:6d:c9:d1:f1:f7:81:df:36:c4:4e:d7:29:68:
         4b:a9:47:c8:5a:40:15:ad:ae:48:cf:2f:eb:2e:b4:b4:38:71:
         59:3e:7c:53:d2:ad:81:d4:23:0e:ab:fb:f1:9a:2d:ff:e7:4a:
         f5:6f:85:31:55:4f:c9:3e:c3:5f:63:02:82:3e:53:1c:e9:ec:
         dd:29:c0:97:e6:9d:21:a5:0b:d1:4c:d0:db:9e:21:d8:40:c6:
         15:18:5d:d3:31:54:81:86:25:04:82:a7:4c:61:76:7b:7f:3a:
         ff:7f:76:89:3a:29:ba:81:ed:97:1d:04:33:f5:9b:09:90:24:
         60:16:ad:eb:45:9e:69:28:d9:a6:27:6b:0e:5b:28:34:c9:15:
         7f:a8:c3:cb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----