Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/G0x3_Kuz6jvSUMCrjrDMz1UYsIY.roa
File:                     G0x3_Kuz6jvSUMCrjrDMz1UYsIY.roa (raw, json)
Hash identifier:          yKgQiWIgzJ7qhhxgCCWo9OEj4XaeyQMfSuo4JNaR8mA=
Subject key identifier:   1B:4C:77:FC:AB:B3:EA:3B:D2:50:C0:AB:8E:B0:CC:CF:55:18:B0:86
Certificate issuer:       /CN=38e14f92fdc7ccfbfc182361523ae27d697e952f
Certificate serial:       B366
Authority key identifier: 38:E1:4F:92:FD:C7:CC:FB:FC:18:23:61:52:3A:E2:7D:69:7E:95:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OOFPkv3HzPv8GCNhUjrifWl-lS8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/G0x3_Kuz6jvSUMCrjrDMz1UYsIY.roa
Signing time:             Thu 13 Oct 2022 09:46:33 +0000
ROA not before:           Thu 13 Oct 2022 09:46:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     0
IP address blocks:        2a0e:b240::/29 maxlen: 29
                          2a0e:b240::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45926 (0xb366)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38e14f92fdc7ccfbfc182361523ae27d697e952f
        Validity
            Not Before: Oct 13 09:46:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1B4C77FCABB3EA3BD250C0AB8EB0CCCF5518B086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d1:d9:02:93:dd:7d:a2:94:17:a1:90:0b:f2:
                    f2:c8:38:04:78:30:09:e7:85:c4:e2:70:b7:24:76:
                    05:9d:f8:6d:8f:f0:b8:5e:08:96:f1:78:26:be:d6:
                    5d:01:ed:97:24:3f:18:ff:9e:b8:cb:26:ce:2d:9f:
                    e7:0d:d4:06:5f:18:d1:7f:c4:05:8b:25:dc:48:4f:
                    a3:86:ec:77:38:0e:14:1a:49:05:68:0f:7e:40:0f:
                    d5:53:23:9d:02:3e:41:6d:1d:7f:3c:10:ec:12:c0:
                    ec:e2:8d:56:8c:66:ec:df:f5:73:53:ac:ef:35:c1:
                    03:de:bb:ee:25:ad:46:7f:90:f0:4e:49:10:9a:45:
                    88:eb:49:4b:4c:df:f9:0c:37:b5:0e:a0:3e:84:e6:
                    8b:8c:22:27:e0:ad:7d:ec:0a:72:23:26:78:c0:ef:
                    a8:63:c0:2f:09:8e:ac:e8:26:93:5d:74:9f:38:19:
                    38:c8:f8:bc:0a:be:20:3f:95:22:0b:b4:33:62:79:
                    22:7b:81:fb:32:60:3c:5c:32:79:b3:7d:15:52:fd:
                    72:17:ee:53:95:e2:7c:e7:b2:57:fc:88:4f:8a:49:
                    2b:e6:13:e8:a3:ed:79:a7:c1:c9:43:cf:96:f1:64:
                    32:e0:dd:fc:36:9a:1b:bf:1e:14:ca:16:7a:1e:73:
                    92:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:4C:77:FC:AB:B3:EA:3B:D2:50:C0:AB:8E:B0:CC:CF:55:18:B0:86
            X509v3 Authority Key Identifier:
                keyid:38:E1:4F:92:FD:C7:CC:FB:FC:18:23:61:52:3A:E2:7D:69:7E:95:2F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/OOFPkv3HzPv8GCNhUjrifWl-lS8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOFPkv3HzPv8GCNhUjrifWl-lS8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/G0x3_Kuz6jvSUMCrjrDMz1UYsIY.roa
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/news.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b240::/29

    Signature Algorithm: sha256WithRSAEncryption
         04:5e:89:94:d3:8c:9c:89:b5:ee:05:e4:11:f9:ae:6b:74:b4:
         97:cf:3c:c4:cd:0b:8c:98:a3:fd:4b:bd:62:76:9d:5b:ef:97:
         a5:32:13:1f:91:cf:27:91:d6:8a:9b:c1:c4:2b:79:5b:15:35:
         bc:14:67:c2:ce:43:74:09:8a:bf:f4:f9:02:15:23:e5:41:55:
         6f:5d:79:38:6d:49:77:25:09:09:2c:c0:6b:31:dc:8d:20:24:
         2d:58:eb:73:bc:65:ab:25:3a:9f:d3:50:67:70:9e:d8:ad:34:
         71:7b:1f:02:f2:cc:0b:87:1a:f7:2b:fd:7e:82:42:a3:f0:ce:
         19:f9:64:17:09:9c:7a:9c:8c:1a:11:17:f9:13:c7:0f:ba:2b:
         0d:49:e9:b6:96:09:eb:a8:4f:68:44:58:b2:b2:d8:3d:2c:37:
         36:db:34:c1:f7:95:fe:82:67:b4:65:74:5f:a0:72:3e:65:1e:
         11:82:c0:7e:d5:60:17:e0:df:39:31:f2:67:2f:32:6d:d9:19:
         f5:91:12:f4:65:11:51:b1:01:ea:24:50:8f:c7:44:c8:31:95:
         c6:32:44:a2:e5:d5:b5:89:c3:fb:ee:b0:5a:87:fa:bc:9d:55:
         67:4d:02:bd:8e:85:7c:6e:c8:ba:e8:bd:4f:7d:53:00:09:34:
         b7:d8:56:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----