Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/Sobornost-RIPE/8__po6wdCHUtEQ8NO_mNl73oS8k.roa
File:                     8__po6wdCHUtEQ8NO_mNl73oS8k.roa (raw, json)
Hash identifier:          ixCo9UX3RdZTZDI64KOTtqqw6gc8nfDkwKLdL/06Jtw=
Subject key identifier:   F3:FF:E9:A3:AC:1D:08:75:2D:11:0F:0D:3B:F9:8D:97:BD:E8:4B:C9
Certificate issuer:       /CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
Certificate serial:       0284
Authority key identifier: 82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/8__po6wdCHUtEQ8NO_mNl73oS8k.roa
Signing time:             Tue 02 Feb 2021 01:10:45 +0000
ROA not before:           Tue 02 Feb 2021 01:10:45 +0000
ROA not after:            Fri 01 Jul 2022 00:00:00 +0000
asID:                     15562
IP address blocks:        2001:67c:208c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 644 (0x284)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
        Validity
            Not Before: Feb  2 01:10:45 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=F3FFE9A3AC1D08752D110F0D3BF98D97BDE84BC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:54:9d:fc:83:96:fc:a4:10:34:c7:73:0c:40:
                    cc:e1:88:61:a1:bf:e2:a3:27:97:bb:11:40:21:c2:
                    1d:33:f9:d0:6b:b9:0c:e6:8d:a6:ae:fa:c1:b8:d8:
                    31:0c:06:c5:4e:bd:a1:7c:7e:1b:45:11:45:89:19:
                    ce:ad:7a:e1:2d:89:eb:87:5e:00:4f:89:99:63:81:
                    9e:5d:4f:42:bf:d1:77:06:67:81:98:06:91:63:af:
                    c4:d8:37:83:8a:b7:d4:3e:2b:b2:bb:b5:7c:05:56:
                    77:11:b1:89:2a:32:f2:32:41:43:34:48:2f:a2:f7:
                    11:00:30:8c:c2:7e:e7:3b:47:d8:65:c3:aa:13:5b:
                    cb:ea:e4:c8:79:02:b1:23:1f:ea:81:7e:ed:4a:6a:
                    d5:b6:e8:53:c0:ba:7e:4e:09:ea:91:12:a8:91:e9:
                    ac:96:59:08:f3:cd:8c:54:5d:98:45:6d:01:6e:89:
                    32:38:72:1a:35:87:c8:d1:7f:bb:3b:39:25:c9:e1:
                    5c:93:c3:bb:8a:11:4d:1f:6b:59:f0:b0:de:5d:8f:
                    9c:dd:81:6f:4d:d2:cf:ae:32:10:51:64:27:e4:13:
                    a8:9c:cb:c5:e2:0a:02:9f:3a:b2:e9:28:09:26:14:
                    e9:31:49:85:0a:8b:f0:35:32:a4:45:f8:c8:04:dc:
                    bf:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FF:E9:A3:AC:1D:08:75:2D:11:0F:0D:3B:F9:8D:97:BD:E8:4B:C9
            X509v3 Authority Key Identifier:
                keyid:82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/gqGyfHTn9dwDDkAcU0phsbw8pRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/8__po6wdCHUtEQ8NO_mNl73oS8k.roa
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/news-public.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:208c::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:07:a3:d2:85:d8:c3:6e:b1:69:7b:02:ab:f0:96:aa:af:62:
         37:17:e2:da:a5:92:6f:6d:65:32:9d:e6:60:f7:eb:c5:31:c9:
         2d:89:f8:40:35:51:d9:f0:5c:cd:cf:05:a7:bf:ef:1e:2d:43:
         fe:11:dc:47:af:51:29:49:ef:c7:7d:df:27:26:60:30:dc:e8:
         e4:c1:48:0b:4b:d8:2e:e4:03:f9:0b:85:4a:7c:2b:17:a7:43:
         a9:22:b4:a0:8d:bc:5b:8d:5a:0f:50:45:db:75:8b:9f:b2:ee:
         4d:20:cd:95:bd:27:3d:b0:04:72:ab:50:b4:e0:34:32:82:37:
         dd:f1:3b:89:97:68:d1:49:2a:f4:d8:ea:78:d1:d7:17:ae:42:
         5a:37:54:03:ab:84:cd:6e:ec:7e:cd:69:82:6c:48:84:0d:b3:
         64:59:1f:af:af:25:0e:2a:fa:d0:41:d1:3a:e6:2a:b6:4d:cf:
         3c:77:db:70:19:59:83:2a:09:42:2c:65:de:aa:a1:67:32:cd:
         0f:15:5a:f0:58:54:25:11:57:0a:74:0e:b6:8c:38:83:4f:69:
         e6:38:7a:19:ad:51:fc:4d:b1:94:96:20:c1:0d:82:ca:c8:5c:
         8b:e2:e0:79:6f:b4:6d:88:3c:2d:ad:60:c7:a8:fc:49:d2:04:
         67:58:b6:dc
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgICAoQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODJh
MWIyN2M3NGU3ZjVkYzAzMGU0MDFjNTM0YTYxYjFiYzNjYTUxMjAeFw0yMTAyMDIw
MTEwNDVaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKEYzRkZFOUEzQUMxRDA4
NzUyRDExMEYwRDNCRjk4RDk3QkRFODRCQzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBVJ38g5b8pBA0x3MMQMzhiGGhv+KjJ5e7EUAhwh0z+dBruQzm
jaau+sG42DEMBsVOvaF8fhtFEUWJGc6teuEtieuHXgBPiZljgZ5dT0K/0XcGZ4GY
BpFjr8TYN4OKt9Q+K7K7tXwFVncRsYkqMvIyQUM0SC+i9xEAMIzCfuc7R9hlw6oT
W8vq5Mh5ArEjH+qBfu1KatW26FPAun5OCeqREqiR6ayWWQjzzYxUXZhFbQFuiTI4
cho1h8jRf7s7OSXJ4VyTw7uKEU0fa1nwsN5dj5zdgW9N0s+uMhBRZCfkE6icy8Xi
CgKfOrLpKAkmFOkxSYUKi/A1MqRF+MgE3L91AgMBAAGjggIIMIICBDAdBgNVHQ4E
FgQU8//po6wdCHUtEQ8NO/mNl73oS8kwHwYDVR0jBBgwFoAUgqGyfHTn9dwDDkAc
U0phsbw8pRIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9Tb2Jvcm5vc3Qt
UklQRS9ncUd5ZkhUbjlkd0REa0FjVTBwaHNidzhwUkkuY3JsMGQGCCsGAQUFBwEB
BFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9ncUd5ZkhUbjlkd0REa0FjVTBwaHNidzhwUkkuY2VyMA4GA1Ud
DwEB/wQEAwIHgDCBqwYIKwYBBQUHAQsEgZ4wgZswWwYIKwYBBQUHMAuGT3JzeW5j
Oi8vY2hsb2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1NvYm9ybm9zdC1SSVBFLzhfX3Bv
NndkQ0hVdEVROE5PX21ObDczb1M4ay5yb2EwPAYIKwYBBQUHMA2GMGh0dHBzOi8v
Y2hsb2Uuc29ib3Jub3N0Lm5ldC9ycGtpL25ld3MtcHVibGljLnhtbDAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBnwgjDANBgkqhkiG9w0BAQsFAAOCAQEA
AQej0oXYw26xaXsCq/CWqq9iNxfi2qWSb21lMp3mYPfrxTHJLYn4QDVR2fBczc8F
p7/vHi1D/hHcR69RKUnvx33fJyZgMNzo5MFIC0vYLuQD+QuFSnwrF6dDqSK0oI28
W41aD1BF23WLn7LuTSDNlb0nPbAEcqtQtOA0MoI33fE7iZdo0Ukq9NjqeNHXF65C
WjdUA6uEzW7sfs1pgmxIhA2zZFkfr68lDir60EHROuYqtk3PPHfbcBlZgyoJQixl
3qqhZzLNDxVa8FhUJRFXCnQOtow4g09p5jh6Ga1R/E2xlJYgwQ2Cyshci+LgeW+0
bYg8La1gx6j8SdIEZ1i23A==
-----END CERTIFICATE-----