Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/Sobornost-RIPE/2Pcj_pKL3hMN0ZVW-XpWByqSDgE.roa
File:                     2Pcj_pKL3hMN0ZVW-XpWByqSDgE.roa (raw, json)
Hash identifier:          Me0fJ/dValWTrRLb9ayJSFJjw2p9Eer5bDwYW9+D08Y=
Subject key identifier:   D8:F7:23:FE:92:8B:DE:13:0D:D1:95:56:F9:7A:56:07:2A:92:0E:01
Certificate issuer:       /CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
Certificate serial:       B8
Authority key identifier: 82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/2Pcj_pKL3hMN0ZVW-XpWByqSDgE.roa
Signing time:             Thu 28 Jan 2021 06:10:27 +0000
ROA not before:           Thu 28 Jan 2021 06:10:27 +0000
ROA not after:            Fri 01 Jul 2022 00:00:00 +0000
asID:                     15562
IP address blocks:        2001:67c:208c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
        Validity
            Not Before: Jan 28 06:10:27 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=D8F723FE928BDE130DD19556F97A56072A920E01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0f:15:70:6a:3e:de:45:5a:bf:d1:99:24:b5:
                    17:c5:b4:a4:58:5d:34:3d:2c:3a:1b:86:32:66:70:
                    dc:f4:3a:0d:01:85:c6:b5:c9:9c:56:fc:c6:ac:5f:
                    80:80:a6:ab:67:31:a6:25:a5:0a:af:ea:43:95:59:
                    b2:05:c9:c9:ce:b9:3c:8b:00:2a:85:b3:21:eb:8e:
                    1b:f4:55:f6:4b:26:2d:2a:af:60:79:21:78:18:62:
                    3a:e9:c9:fa:cd:ae:04:28:27:af:2c:1f:fe:d1:a1:
                    8d:31:4e:28:34:24:6b:ee:cf:cd:a5:d0:bb:df:48:
                    75:bb:16:d2:94:bf:bf:96:bc:6c:31:46:f1:b7:6a:
                    a3:b1:2f:b5:7b:1d:86:63:6a:38:42:f4:38:63:45:
                    bb:6c:8e:b6:0a:ef:6c:df:81:63:a8:2a:6d:19:7a:
                    4b:9f:48:ca:eb:97:86:1e:88:d6:c3:cc:4f:d5:b4:
                    ba:62:41:fe:41:73:88:b4:62:f1:57:aa:cb:da:77:
                    c1:c1:e6:31:d5:ea:43:af:55:73:2a:b3:90:66:75:
                    50:2c:1c:fc:37:3b:3f:6a:1e:6f:97:f2:98:7c:2d:
                    18:25:8a:e6:0e:68:19:02:d0:75:b5:26:e6:cf:0a:
                    9b:98:70:31:4d:d8:d7:15:e8:59:1c:0d:f3:42:4e:
                    8b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F7:23:FE:92:8B:DE:13:0D:D1:95:56:F9:7A:56:07:2A:92:0E:01
            X509v3 Authority Key Identifier:
                keyid:82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/gqGyfHTn9dwDDkAcU0phsbw8pRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/2Pcj_pKL3hMN0ZVW-XpWByqSDgE.roa
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/news-public.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:208c::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:6d:56:37:94:b2:79:f4:90:73:40:33:39:3b:4d:34:cd:8f:
         b1:e6:92:a4:65:73:ef:9d:48:b3:26:0d:78:1d:57:a7:20:aa:
         78:92:67:c2:f7:94:a3:cd:ce:53:f4:5f:e2:85:fb:0f:41:d3:
         78:ee:f4:80:5f:eb:13:6b:a7:b5:fc:89:e8:03:eb:06:61:cb:
         9e:cd:09:a2:55:dd:a5:b3:d0:18:48:d9:b6:2f:61:74:d1:07:
         56:e2:6f:44:e9:8d:e0:1d:5a:43:4b:f5:be:2a:52:a2:85:15:
         68:2e:e3:20:a6:1b:60:4e:d8:79:b9:e9:e4:6a:09:2a:c1:fa:
         0d:d3:fb:21:b8:3d:51:d1:46:bf:ac:a9:85:85:c3:6a:b9:07:
         42:01:33:6a:a2:a9:37:d6:68:7f:80:ca:9d:8e:58:04:11:f0:
         23:38:25:b7:fe:ce:32:be:3d:de:7e:40:24:23:1b:63:45:6e:
         1d:3a:13:e8:ad:2c:20:a2:2b:8f:e1:05:b6:2f:82:8c:fd:94:
         a3:a0:a0:e9:a2:d4:6a:10:78:35:d8:7f:04:58:19:1f:40:14:
         63:4c:3c:26:1c:66:73:61:b5:a7:99:37:6a:34:0c:c1:f3:9f:
         29:c3:fb:f9:9d:c5:c5:71:07:80:31:71:f1:71:37:b2:4d:1e:
         6e:e8:e1:05
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgICALgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODJh
MWIyN2M3NGU3ZjVkYzAzMGU0MDFjNTM0YTYxYjFiYzNjYTUxMjAeFw0yMTAxMjgw
NjEwMjdaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKEQ4RjcyM0ZFOTI4QkRF
MTMwREQxOTU1NkY5N0E1NjA3MkE5MjBFMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXDxVwaj7eRVq/0ZkktRfFtKRYXTQ9LDobhjJmcNz0Og0Bhca1
yZxW/MasX4CApqtnMaYlpQqv6kOVWbIFycnOuTyLACqFsyHrjhv0VfZLJi0qr2B5
IXgYYjrpyfrNrgQoJ68sH/7RoY0xTig0JGvuz82l0LvfSHW7FtKUv7+WvGwxRvG3
aqOxL7V7HYZjajhC9DhjRbtsjrYK72zfgWOoKm0ZekufSMrrl4YeiNbDzE/VtLpi
Qf5Bc4i0YvFXqsvad8HB5jHV6kOvVXMqs5BmdVAsHPw3Oz9qHm+X8ph8LRgliuYO
aBkC0HW1JubPCpuYcDFN2NcV6FkcDfNCTovBAgMBAAGjggIIMIICBDAdBgNVHQ4E
FgQU2Pcj/pKL3hMN0ZVW+XpWByqSDgEwHwYDVR0jBBgwFoAUgqGyfHTn9dwDDkAc
U0phsbw8pRIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9Tb2Jvcm5vc3Qt
UklQRS9ncUd5ZkhUbjlkd0REa0FjVTBwaHNidzhwUkkuY3JsMGQGCCsGAQUFBwEB
BFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9ncUd5ZkhUbjlkd0REa0FjVTBwaHNidzhwUkkuY2VyMA4GA1Ud
DwEB/wQEAwIHgDCBqwYIKwYBBQUHAQsEgZ4wgZswWwYIKwYBBQUHMAuGT3JzeW5j
Oi8vY2hsb2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1NvYm9ybm9zdC1SSVBFLzJQY2pf
cEtMM2hNTjBaVlctWHBXQnlxU0RnRS5yb2EwPAYIKwYBBQUHMA2GMGh0dHBzOi8v
Y2hsb2Uuc29ib3Jub3N0Lm5ldC9ycGtpL25ld3MtcHVibGljLnhtbDAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBnwgjDANBgkqhkiG9w0BAQsFAAOCAQEA
F21WN5SyefSQc0AzOTtNNM2PseaSpGVz751IsyYNeB1XpyCqeJJnwveUo83OU/Rf
4oX7D0HTeO70gF/rE2untfyJ6APrBmHLns0JolXdpbPQGEjZti9hdNEHVuJvROmN
4B1aQ0v1vipSooUVaC7jIKYbYE7Yebnp5GoJKsH6DdP7Ibg9UdFGv6yphYXDarkH
QgEzaqKpN9Zof4DKnY5YBBHwIzglt/7OMr493n5AJCMbY0VuHToT6K0sIKIrj+EF
ti+CjP2Uo6Cg6aLUahB4Ndh/BFgZH0AUY0w8Jhxmc2G1p5k3ajQMwfOfKcP7+Z3F
xXEHgDFx8XE3sk0ebujhBQ==
-----END CERTIFICATE-----