Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/Sobornost-RIPE/57Vp6izLXpr6DanCx5ykLMiuh54.roa
File:                     57Vp6izLXpr6DanCx5ykLMiuh54.roa (raw, json)
Hash identifier:          66DvtZrgUtfqs+W4l8ptFmBqNQf5pzAkaaBjzCURSJQ=
Subject key identifier:   E7:B5:69:EA:2C:CB:5E:9A:FA:0D:A9:C2:C7:9C:A4:2C:C8:AE:87:9E
Certificate issuer:       /CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
Certificate serial:       02BC
Authority key identifier: 82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/57Vp6izLXpr6DanCx5ykLMiuh54.roa
Signing time:             Tue 02 Feb 2021 15:10:48 +0000
ROA not before:           Tue 02 Feb 2021 15:10:48 +0000
ROA not after:            Fri 01 Jul 2022 00:00:00 +0000
asID:                     15562
IP address blocks:        2001:67c:208c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 700 (0x2bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
        Validity
            Not Before: Feb  2 15:10:48 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=E7B569EA2CCB5E9AFA0DA9C2C79CA42CC8AE879E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:20:be:30:c6:96:74:c7:73:2f:26:71:cd:67:
                    bb:a9:51:ea:ac:2d:c0:47:9d:7c:d8:e1:b1:09:c6:
                    3a:db:0c:9e:ff:4a:b4:da:af:4e:e1:cc:f3:4a:9c:
                    f4:eb:a2:73:cf:1e:26:f3:a8:bb:04:b9:8c:7c:88:
                    df:d2:00:8e:4c:7d:eb:dc:7c:d5:a6:72:35:18:81:
                    68:24:91:ee:24:d3:14:21:c3:d5:a8:01:48:b5:04:
                    9c:e8:c4:4f:c1:31:3f:04:18:ea:50:aa:a2:70:35:
                    34:49:49:91:fc:cb:d7:97:9d:a7:07:d6:a6:6b:00:
                    e7:02:bd:98:9c:f8:3f:97:5a:28:1c:fc:7a:33:57:
                    2a:47:55:90:c7:f9:45:00:24:a0:13:d7:73:49:f4:
                    f0:7a:21:99:f6:a7:c0:41:a6:a4:b7:33:63:2c:cb:
                    c4:91:5e:d8:e8:8c:4b:da:da:46:18:1b:ed:cf:eb:
                    38:4a:28:38:82:7d:b3:b2:89:74:5f:0d:c0:d3:b5:
                    4b:39:04:fd:f1:96:16:b3:fb:9b:ce:14:14:f4:0e:
                    0d:5c:59:19:91:d5:75:60:ad:d4:82:c0:f8:df:6c:
                    58:b3:57:a8:7b:23:04:ae:f4:fe:ad:df:bd:d9:6a:
                    d8:3c:cf:47:ef:80:97:29:5e:a8:31:b2:55:c3:38:
                    a6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B5:69:EA:2C:CB:5E:9A:FA:0D:A9:C2:C7:9C:A4:2C:C8:AE:87:9E
            X509v3 Authority Key Identifier:
                keyid:82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/gqGyfHTn9dwDDkAcU0phsbw8pRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/57Vp6izLXpr6DanCx5ykLMiuh54.roa
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/news-public.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:208c::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:d8:a1:f3:0b:b7:4f:01:e7:81:e9:b8:35:df:a3:10:dd:b0:
         ec:46:8e:b6:8f:4d:68:1d:f6:ed:5a:3d:e4:b5:69:6a:5a:e4:
         82:93:5a:51:55:11:4b:56:da:3b:14:47:e1:bd:fc:29:62:59:
         5a:1e:74:8b:e3:3d:3e:c7:32:ba:c7:8a:da:0a:71:ef:9f:a2:
         22:a4:9c:3b:3a:14:c0:1d:95:8d:ef:16:7b:a2:dc:c7:db:09:
         a6:16:80:5c:a4:93:dc:72:4b:21:57:63:ba:1b:8e:68:3d:65:
         ab:28:a8:d8:60:1e:bb:f2:73:e0:03:68:d6:65:f5:dc:aa:02:
         27:ca:89:8a:b0:f2:03:91:50:ad:5e:50:18:4f:df:a9:2f:28:
         ed:5e:e5:78:1a:ae:b3:ab:16:a1:88:7f:ef:4f:cd:f0:f6:f4:
         99:08:4d:8f:de:8b:bc:b8:a4:88:e2:ad:35:33:3c:b9:d3:e7:
         4e:96:52:f1:59:90:92:df:8f:cd:f1:78:4b:6a:fc:ad:c4:9d:
         b0:5b:0e:e9:0c:99:18:39:3e:28:0c:47:ed:fa:ef:a1:a5:be:
         ef:43:be:55:60:5c:b4:a4:4c:02:bc:e5:aa:01:5f:85:cd:a2:
         42:3d:20:b2:aa:30:fd:98:62:fa:8a:06:09:42:2a:91:7e:92:
         4c:81:d9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----