Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/8EjgZ6BLB_EFHp9nPxEgX5icjjM.roa
File:                     8EjgZ6BLB_EFHp9nPxEgX5icjjM.roa (raw, json)
Hash identifier:          SOEcjkVgU5iVKTy6DA/on2jX0uBNJYLk92JjWdMtfpk=
Subject key identifier:   F0:48:E0:67:A0:4B:07:F1:05:1E:9F:67:3F:11:20:5F:98:9C:8E:33
Certificate issuer:       /CN=38e14f92fdc7ccfbfc182361523ae27d697e952f
Certificate serial:       2C8D
Authority key identifier: 38:E1:4F:92:FD:C7:CC:FB:FC:18:23:61:52:3A:E2:7D:69:7E:95:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OOFPkv3HzPv8GCNhUjrifWl-lS8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/8EjgZ6BLB_EFHp9nPxEgX5icjjM.roa
Signing time:             Mon 27 Sep 2021 19:04:22 +0000
ROA not before:           Mon 27 Sep 2021 19:04:22 +0000
ROA not after:            Fri 01 Jul 2022 00:00:00 +0000
asID:                     15562
IP address blocks:        2001:67c:208c::/48 maxlen: 48
                          2a0e:b240::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11405 (0x2c8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38e14f92fdc7ccfbfc182361523ae27d697e952f
        Validity
            Not Before: Sep 27 19:04:22 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=F048E067A04B07F1051E9F673F11205F989C8E33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:57:6b:c8:fd:56:aa:79:88:88:7e:27:b3:af:
                    82:99:20:14:89:ad:84:d3:e6:14:a9:e4:4f:9a:82:
                    02:87:24:87:d3:19:24:c0:3a:72:fb:ed:36:ba:90:
                    24:0b:14:30:40:f6:41:3d:9c:a1:12:3a:60:a3:82:
                    3c:5c:17:8b:58:dc:b9:c5:4a:40:6f:36:73:87:19:
                    c7:54:36:c9:87:bb:2c:44:e2:be:3c:97:e0:a4:49:
                    f9:08:55:b4:e7:84:61:d1:62:71:f1:11:ac:37:39:
                    86:dc:50:b7:b8:06:0b:f5:d7:82:69:73:f6:af:1b:
                    49:35:1f:6c:23:22:4c:3a:11:1a:68:88:cc:88:a3:
                    b9:b6:79:72:47:7a:79:61:fb:f8:66:3d:94:14:f8:
                    61:92:fa:3b:f5:bd:b2:b9:84:c1:a6:70:98:ac:7d:
                    71:2d:8a:4b:2f:25:b6:e2:4f:99:0b:74:67:50:10:
                    32:af:88:8b:bb:78:49:40:a2:0c:c9:92:1e:96:37:
                    43:7b:42:b4:f7:8f:d2:67:c5:20:35:6c:2d:cf:f8:
                    9d:43:80:4c:e3:11:71:07:73:ac:4a:3f:f5:9e:d8:
                    e7:e3:59:bc:ee:13:05:da:60:cb:37:92:9b:c0:50:
                    a8:73:39:29:82:11:86:61:d2:24:95:85:f3:14:7a:
                    a3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:48:E0:67:A0:4B:07:F1:05:1E:9F:67:3F:11:20:5F:98:9C:8E:33
            X509v3 Authority Key Identifier:
                keyid:38:E1:4F:92:FD:C7:CC:FB:FC:18:23:61:52:3A:E2:7D:69:7E:95:2F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/OOFPkv3HzPv8GCNhUjrifWl-lS8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOFPkv3HzPv8GCNhUjrifWl-lS8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/8EjgZ6BLB_EFHp9nPxEgX5icjjM.roa
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/news.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:208c::/48
                  2a0e:b240::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:56:60:66:74:14:db:2f:31:c6:3f:cd:69:26:2a:eb:65:28:
         cf:ed:e8:d1:55:9c:4f:a9:9f:0d:59:b2:e5:17:be:9b:96:da:
         b2:f4:55:8c:87:79:ae:10:2e:f7:d0:33:f9:87:cb:6d:6f:20:
         b6:cd:a8:ee:fe:8e:33:a9:49:ae:51:a7:71:db:f0:ff:36:ac:
         44:77:2c:0d:d7:43:bd:98:64:c7:3e:60:a1:ed:50:3d:25:9e:
         8e:ac:07:76:b9:ea:e3:63:a6:c4:77:5b:4e:6e:71:66:ae:12:
         ba:d5:03:0c:42:4f:1f:62:04:fe:23:e0:9c:6d:ed:9e:c4:b8:
         85:06:c9:c3:aa:69:80:9d:aa:85:e6:8f:63:8a:53:e1:f6:cf:
         ac:a6:57:ab:25:4b:e0:df:dc:c6:f8:c7:66:55:ac:5b:54:d1:
         32:f3:0d:97:bc:74:52:7d:4e:48:be:60:f4:86:c6:12:ff:4d:
         6c:f3:5d:3e:eb:4f:9e:09:6d:b7:1a:be:95:48:a8:49:c5:bd:
         36:21:ee:34:b7:c8:1a:df:5d:ba:bc:09:f0:8e:22:bd:68:ea:
         2e:7c:f0:fc:72:33:c0:90:41:3a:9b:1f:6e:70:46:98:26:59:
         3f:2a:fa:23:2f:48:38:47:5e:6b:2b:fa:b5:5c:d6:60:81:c4:
         17:68:40:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----