Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nla2bip6/LD80zKFy52rSLblDw_Qv5ExKL3o.roa
File:                     LD80zKFy52rSLblDw_Qv5ExKL3o.roa (raw, json)
Hash identifier:          8kEmB329k/ZnxPqZ9vQRCESYSgA7lLaZoh14F3OqyD0=
Subject key identifier:   2C:3F:34:CC:A1:72:E7:6A:D2:2D:B9:43:C3:F4:2F:E4:4C:4A:2F:7A
Certificate issuer:       /CN=1794a7dfba28592d921de3c7902f6af662b7a2b9
Certificate serial:       039D
Authority key identifier: 17:94:A7:DF:BA:28:59:2D:92:1D:E3:C7:90:2F:6A:F6:62:B7:A2:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5Sn37ooWS2SHePHkC9q9mK3ork.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nla2bip6/LD80zKFy52rSLblDw_Qv5ExKL3o.roa
Signing time:             Sat 17 Jun 2023 00:00:33 +0000
ROA not before:           Sat 17 Jun 2023 00:00:33 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51088
IP address blocks:        2a13:2c00::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 925 (0x39d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1794a7dfba28592d921de3c7902f6af662b7a2b9
        Validity
            Not Before: Jun 17 00:00:33 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2C3F34CCA172E76AD22DB943C3F42FE44C4A2F7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:67:e5:94:0f:04:e2:ba:c5:4f:eb:cc:6f:75:
                    b3:36:13:d5:b6:19:09:86:a6:9e:03:63:c9:fe:d6:
                    3c:06:23:1a:e5:9b:dc:a5:84:4d:e8:b7:0f:7d:da:
                    19:15:52:6e:47:46:af:bc:c4:8c:ea:c9:8b:b9:d1:
                    83:23:c3:0d:29:5c:82:37:e1:f1:50:92:0f:fd:ad:
                    30:26:fa:06:05:d6:79:69:b8:dc:9a:0f:35:16:55:
                    67:36:9b:2c:6d:4a:53:f3:de:ce:19:d7:55:cb:93:
                    1e:78:ff:67:b3:6a:1f:54:e8:cb:79:d2:74:c6:83:
                    56:29:05:19:f2:0d:56:2d:4b:8e:ae:ef:2e:3c:2f:
                    79:3b:9a:74:c3:62:66:89:ed:b2:8d:70:96:fd:b7:
                    8b:d1:a1:c3:2c:7d:9d:97:9a:f9:33:36:ee:0e:36:
                    63:b9:e1:60:de:4b:b1:ba:2e:97:92:ef:e9:77:04:
                    54:a8:4f:6e:b3:18:3e:39:de:13:f0:5a:6a:f4:02:
                    4b:70:27:20:fa:4f:c6:e3:b4:28:ab:b3:1b:06:90:
                    a4:12:9f:02:0d:2d:43:af:97:b7:a6:de:00:aa:4f:
                    4c:b5:b9:cd:5d:33:cd:14:5e:ed:8a:9f:10:56:40:
                    8f:f5:14:d8:8e:36:64:0c:5b:22:62:ca:66:63:ae:
                    d8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:3F:34:CC:A1:72:E7:6A:D2:2D:B9:43:C3:F4:2F:E4:4C:4A:2F:7A
            X509v3 Authority Key Identifier:
                keyid:17:94:A7:DF:BA:28:59:2D:92:1D:E3:C7:90:2F:6A:F6:62:B7:A2:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nla2bip6/F5Sn37ooWS2SHePHkC9q9mK3ork.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5Sn37ooWS2SHePHkC9q9mK3ork.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nla2bip6/LD80zKFy52rSLblDw_Qv5ExKL3o.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:2c00::/29

    Signature Algorithm: sha256WithRSAEncryption
         af:d8:2a:a9:c3:c3:03:16:b2:e5:61:58:55:09:84:f3:21:e9:
         7b:cf:64:ee:07:84:2e:a9:fa:83:9c:a3:92:a8:76:69:7d:71:
         91:d6:cf:84:93:f3:18:10:14:97:6d:9c:94:dd:3a:e3:b3:25:
         1e:aa:90:0e:53:f5:ec:ee:93:c9:80:c4:15:39:d8:53:aa:d2:
         86:8f:57:13:03:f4:1f:29:64:4b:65:18:a0:7c:5c:33:9e:17:
         92:7f:a9:fa:95:1b:c7:d3:4b:1c:ad:53:ac:f3:0b:84:0c:aa:
         3b:b6:a7:8a:cf:aa:96:99:b6:e0:b2:54:d0:12:c9:2c:70:31:
         15:4c:6c:4d:5d:ee:e1:77:ed:8a:65:cd:c1:b6:ba:34:b6:d9:
         77:32:79:db:0f:8b:47:a1:55:6f:c5:30:d7:cb:cd:de:2a:35:
         d0:60:9b:d3:69:43:7e:95:f9:c5:bc:7f:80:0b:50:ec:15:e1:
         ed:ef:85:10:2e:bb:88:cc:4d:f9:04:0f:a0:8c:12:5d:6b:52:
         d2:3a:c3:31:32:0d:25:fc:ef:09:57:6c:e9:7f:14:55:02:f9:
         6e:2e:c2:30:c8:39:8a:87:38:79:7a:9d:fc:95:cb:3e:53:9e:
         56:67:36:e4:5e:9b:08:5d:eb:5f:c6:b3:6e:fa:ff:f0:1d:0d:
         ad:f7:9f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----