Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/Sobornost-RIPE/9gyMSwXi6dzjPjXLLwJBeAOHm4M.roa
File:                     9gyMSwXi6dzjPjXLLwJBeAOHm4M.roa (raw, json)
Hash identifier:          Ac6+z/qvPdfdaKOaY/UQ4u2/FD5GAeZQUiVc7JfC2VY=
Subject key identifier:   F6:0C:8C:4B:05:E2:E9:DC:E3:3E:35:CB:2F:02:41:78:03:87:9B:83
Certificate issuer:       /CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
Certificate serial:       027A
Authority key identifier: 82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/9gyMSwXi6dzjPjXLLwJBeAOHm4M.roa
Signing time:             Mon 01 Feb 2021 22:40:43 +0000
ROA not before:           Mon 01 Feb 2021 22:40:43 +0000
ROA not after:            Fri 01 Jul 2022 00:00:00 +0000
asID:                     15562
IP address blocks:        2001:67c:208c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 634 (0x27a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
        Validity
            Not Before: Feb  1 22:40:43 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=F60C8C4B05E2E9DCE33E35CB2F02417803879B83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:8f:b5:94:43:88:a8:52:85:94:4d:c1:47:d2:
                    f6:f2:77:bf:70:98:6b:87:d8:7d:7b:fc:c5:22:8e:
                    65:b5:94:9f:b5:a8:d2:7e:e1:3e:53:43:27:17:ef:
                    ce:05:14:9b:01:02:7f:d1:de:19:3d:d3:0e:b7:03:
                    ea:cc:52:67:fa:92:c0:07:3f:59:2e:20:bb:52:7b:
                    6b:a2:07:5f:a1:3d:16:e3:99:ab:fd:ea:ee:eb:75:
                    d6:1d:a5:9c:6b:28:d5:94:46:a6:4c:a6:a1:e9:fe:
                    c2:55:e0:6c:de:ca:35:42:f5:13:94:db:23:73:6c:
                    4c:47:3b:3c:cc:5d:27:e5:a6:b5:8b:c1:00:5c:ca:
                    c0:ba:c5:5b:08:3f:32:39:b9:2f:2d:93:4e:e0:fd:
                    9a:31:25:4d:63:2f:0b:85:8b:1b:a5:19:6d:98:24:
                    4d:9e:93:ee:3d:cc:79:1a:fd:d0:52:94:45:d6:60:
                    62:d9:84:e5:8b:04:f9:9f:f3:04:31:bd:e7:09:7f:
                    f6:e1:01:63:e0:22:83:8b:74:37:f1:c1:03:0a:e0:
                    1b:c9:c3:9a:4d:a0:4f:06:76:86:16:55:1a:48:31:
                    a2:ee:6b:9f:98:d2:d2:5d:8e:56:8c:55:09:24:31:
                    77:26:ad:b0:1b:22:15:91:48:c7:1a:4d:d4:0b:38:
                    25:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0C:8C:4B:05:E2:E9:DC:E3:3E:35:CB:2F:02:41:78:03:87:9B:83
            X509v3 Authority Key Identifier:
                keyid:82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/gqGyfHTn9dwDDkAcU0phsbw8pRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/9gyMSwXi6dzjPjXLLwJBeAOHm4M.roa
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/news-public.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:208c::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:b2:1b:13:9a:19:b1:bb:ec:56:84:90:3b:e8:db:fd:5c:e2:
         01:9a:f8:d9:20:aa:7b:38:58:ae:b4:5f:e0:8f:4d:a7:77:1e:
         0e:7e:d7:d5:52:ea:8e:e0:fd:29:b3:3c:1c:04:ae:aa:fc:35:
         4d:af:89:e2:c0:ae:b6:5e:ba:98:fb:5b:05:52:9c:32:8a:56:
         9b:fd:89:bb:f6:ef:4a:d6:78:dd:dc:c6:8d:17:6f:47:bb:d7:
         d2:86:f6:36:38:45:4c:59:36:d7:81:29:68:4f:c1:ca:81:a2:
         4c:14:7d:3d:94:39:2f:33:15:07:73:22:9f:f1:cc:dd:7a:c5:
         a6:84:9f:8b:a8:af:52:b8:fc:0a:69:b0:6a:d2:82:30:62:87:
         b0:fd:2a:81:47:21:63:b2:69:57:a7:d5:3b:09:42:02:41:f2:
         8f:ed:8c:0c:be:41:63:6b:04:39:89:f2:e9:da:58:62:ca:03:
         2d:4f:ae:cb:c5:b5:81:ae:b4:1a:49:be:78:d2:d4:7f:40:ca:
         4c:b2:b8:4a:73:db:c3:59:45:4b:38:d5:76:7c:ff:1b:7d:a9:
         cd:6b:55:4a:30:62:e7:d4:86:51:0f:5e:ee:83:30:0e:f4:d9:
         b5:21:8a:82:dd:a7:67:58:78:dd:b0:81:f1:0d:db:d4:20:cd:
         80:40:b1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----