Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/ZKleK6jOSHKLwPONR0e5XVcwqAM.roa
File:                     ZKleK6jOSHKLwPONR0e5XVcwqAM.roa (raw, json)
Hash identifier:          /yl2/U6f80H7GQhsHX8uoNQbMDUr22unPB/T+9vWkiY=
Subject key identifier:   64:A9:5E:2B:A8:CE:48:72:8B:C0:F3:8D:47:47:B9:5D:57:30:A8:03
Certificate issuer:       /CN=38e14f92fdc7ccfbfc182361523ae27d697e952f
Certificate serial:       2D0F
Authority key identifier: 38:E1:4F:92:FD:C7:CC:FB:FC:18:23:61:52:3A:E2:7D:69:7E:95:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OOFPkv3HzPv8GCNhUjrifWl-lS8.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/ZKleK6jOSHKLwPONR0e5XVcwqAM.roa
Signing time:             Thu 30 Sep 2021 09:45:15 +0000
ROA not before:           Thu 30 Sep 2021 09:45:15 +0000
ROA not after:            Fri 01 Jul 2022 00:00:00 +0000
asID:                     15562
IP address blocks:        2a0e:b240:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11535 (0x2d0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38e14f92fdc7ccfbfc182361523ae27d697e952f
        Validity
            Not Before: Sep 30 09:45:15 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=64A95E2BA8CE48728BC0F38D4747B95D5730A803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ad:fc:f0:5e:1c:12:45:7d:79:34:c4:f4:35:
                    e9:67:f0:83:d0:95:1e:40:8c:39:64:2e:ac:1c:41:
                    ff:31:7a:98:24:85:ff:d5:af:0a:10:5a:7d:33:c4:
                    52:8b:1c:67:7a:e0:8c:50:76:d0:56:4d:b5:d2:cc:
                    dc:63:a5:7a:65:c4:26:b9:f7:62:f0:c8:8b:fc:45:
                    5e:98:64:6a:d9:57:3f:03:97:c6:52:df:a6:53:16:
                    76:bb:c8:ce:9e:24:88:75:a1:c6:5e:a7:7c:b7:6a:
                    b1:2d:a1:bc:7e:c1:8f:da:92:32:ed:05:a3:1d:21:
                    83:5a:72:6d:11:14:bf:cc:7c:04:fd:2f:c1:be:c9:
                    7c:b8:a3:b6:6a:5c:f9:f4:8c:75:a8:17:b2:8a:6c:
                    60:ec:0a:22:41:9e:6e:b4:c3:2b:da:52:b8:8b:d3:
                    d0:dd:6f:06:b0:00:22:c1:4b:3f:8b:fe:38:31:e0:
                    01:dd:49:ea:9d:4f:78:95:77:54:ec:e1:99:a7:db:
                    f0:ef:fe:73:ed:d1:11:83:47:5f:47:91:01:20:74:
                    f9:3a:25:a0:22:86:69:be:3a:86:11:f6:62:a5:be:
                    b8:ce:9c:bb:31:04:9b:c7:28:64:27:5d:58:53:7d:
                    d3:06:44:c8:1c:2f:b5:37:ed:d7:bf:eb:3f:46:b3:
                    80:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A9:5E:2B:A8:CE:48:72:8B:C0:F3:8D:47:47:B9:5D:57:30:A8:03
            X509v3 Authority Key Identifier:
                keyid:38:E1:4F:92:FD:C7:CC:FB:FC:18:23:61:52:3A:E2:7D:69:7E:95:2F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/OOFPkv3HzPv8GCNhUjrifWl-lS8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOFPkv3HzPv8GCNhUjrifWl-lS8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/ZKleK6jOSHKLwPONR0e5XVcwqAM.roa
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/news.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b240:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:3c:de:17:e9:77:82:35:4c:ad:1b:e3:47:ea:5a:e8:7a:d2:
         b9:b3:2c:37:ad:65:39:42:74:c5:80:2b:fb:8c:b1:1c:e0:42:
         5c:d4:13:60:e7:95:0a:38:4c:7b:7e:5e:f9:78:bf:76:67:0e:
         9e:34:be:ab:1a:57:58:31:fb:bc:78:76:b5:6e:90:6f:45:fe:
         50:65:c5:c4:c0:59:27:e8:3c:28:da:ae:11:86:d1:29:d5:ce:
         a7:56:df:22:3f:07:b5:e6:cb:d4:2c:09:88:db:3a:23:0c:33:
         8b:c4:bc:48:00:02:a1:7c:24:18:7d:a1:74:d9:ff:b3:09:53:
         5a:4c:48:65:0f:30:1c:cf:42:dc:dd:33:12:d4:45:7c:9c:41:
         2c:d6:23:cf:28:7d:f4:48:f0:7a:30:01:5b:5f:b6:4e:04:da:
         34:be:a3:cb:e4:b9:ce:c9:57:ac:7f:38:50:18:55:68:da:55:
         ac:24:bc:92:1e:f0:cd:c6:3c:27:9d:3a:64:3a:f6:53:87:6f:
         32:43:53:b0:20:db:54:21:a5:64:4b:a8:5d:63:8d:e3:68:72:
         03:9b:2e:46:fe:34:de:cf:51:5d:96:86:0f:56:21:23:02:68:
         1c:69:c6:15:42:89:eb:9c:b2:dd:85:32:16:5b:c7:b9:01:cd:
         ff:0c:f5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----