Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/Sobornost-RIPE/BRGwDNpczGTt1SoFb46sB72LUYw.roa
File:                     BRGwDNpczGTt1SoFb46sB72LUYw.roa (raw, json)
Hash identifier:          +zOq9qz1gi4pe4d9/FQw7hC7I/T+0FGtF9J4mKWLJEU=
Subject key identifier:   05:11:B0:0C:DA:5C:CC:64:ED:D5:2A:05:6F:8E:AC:07:BD:8B:51:8C
Certificate issuer:       /CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
Certificate serial:       88
Authority key identifier: 82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/BRGwDNpczGTt1SoFb46sB72LUYw.roa
Signing time:             Wed 27 Jan 2021 18:10:26 +0000
ROA not before:           Wed 27 Jan 2021 18:10:26 +0000
ROA not after:            Fri 01 Jul 2022 00:00:00 +0000
asID:                     15562
IP address blocks:        2001:67c:208c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
        Validity
            Not Before: Jan 27 18:10:26 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=0511B00CDA5CCC64EDD52A056F8EAC07BD8B518C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a1:8c:ce:11:4a:6e:e8:41:28:b1:16:12:2f:
                    20:0e:d8:62:1c:f6:46:5b:96:3f:4d:f7:44:61:bf:
                    a2:ce:71:41:c1:1a:73:30:29:62:ff:68:56:a8:cd:
                    6b:5c:84:bb:93:0e:42:c6:01:91:62:3f:e0:e6:f1:
                    f5:56:cc:bd:82:9c:08:04:2b:aa:b0:e1:7d:4d:dc:
                    9d:d5:90:46:e3:a1:75:29:0a:46:e5:43:40:0c:8f:
                    15:6a:a7:f4:c6:9c:e3:a0:05:0c:55:2f:92:a7:e2:
                    08:17:42:bc:de:f9:95:cc:84:d3:cf:76:07:b0:92:
                    dd:72:6d:25:e2:f4:70:9a:d4:ae:4c:91:fb:e4:00:
                    5a:66:7d:24:db:44:ec:af:be:59:45:fa:46:f2:f1:
                    7a:ce:a7:07:57:14:a6:84:e4:f0:fd:d3:25:15:a0:
                    5f:32:c5:dc:11:34:d9:4c:ab:7f:72:61:22:b7:e0:
                    8a:7c:49:8d:6e:f3:81:f5:aa:84:ec:8d:96:47:b8:
                    25:4d:85:02:44:b9:c0:42:7c:34:d8:18:a7:0a:32:
                    1b:04:24:00:20:2c:b8:0e:ef:7d:07:21:5a:ea:6a:
                    e8:45:9a:84:c7:b0:d3:ea:02:e5:e4:f1:cb:70:fc:
                    89:43:86:d9:66:13:f0:ec:f0:1a:e5:37:d7:6d:a7:
                    75:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:11:B0:0C:DA:5C:CC:64:ED:D5:2A:05:6F:8E:AC:07:BD:8B:51:8C
            X509v3 Authority Key Identifier:
                keyid:82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/gqGyfHTn9dwDDkAcU0phsbw8pRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/BRGwDNpczGTt1SoFb46sB72LUYw.roa
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/news-public.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:208c::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:46:43:ec:1d:f4:78:6b:be:d5:3f:07:bb:dd:33:fd:a2:d5:
         91:11:f2:ef:6f:3b:52:41:ce:81:e1:c0:ae:60:77:9c:b3:bb:
         6c:f5:78:ce:9f:4f:60:5e:61:5a:72:9f:54:36:9c:b1:15:96:
         36:ce:6f:ae:f3:9b:35:ae:6c:b3:4c:9e:2d:71:57:a1:46:00:
         e7:1c:ca:2a:c4:f8:9d:b4:9a:a0:db:df:ac:c6:23:42:10:41:
         05:cc:b0:5a:b9:0f:7a:9d:d1:c9:63:d6:48:a5:9d:69:68:a8:
         e0:a8:cd:cf:90:1c:44:d7:b9:01:cc:04:b0:cb:ea:3f:77:1f:
         41:a1:b5:f7:b4:c3:ea:72:9f:6f:cd:87:8e:99:ce:57:00:e7:
         19:4b:03:11:6a:42:74:92:ea:b3:ff:8c:aa:68:26:c2:07:59:
         d4:56:a0:ab:84:75:eb:19:52:e6:da:16:76:51:9c:85:b7:a5:
         5e:35:8c:83:0b:69:b2:3b:de:9e:d7:01:b0:9e:52:bd:d6:7f:
         31:33:0f:25:9f:88:e3:d3:e5:c8:1f:a5:7f:78:7d:19:fb:f0:
         2a:1d:9e:89:04:2d:f1:1e:98:d0:3c:11:eb:7b:ed:74:32:2c:
         e0:35:b2:77:b8:dd:c4:b4:e1:3b:d3:a4:ff:ea:ff:c7:56:e2:
         7a:e3:80:41
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODJh
MWIyN2M3NGU3ZjVkYzAzMGU0MDFjNTM0YTYxYjFiYzNjYTUxMjAeFw0yMTAxMjcx
ODEwMjZaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDA1MTFCMDBDREE1Q0ND
NjRFREQ1MkEwNTZGOEVBQzA3QkQ4QjUxOEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5oYzOEUpu6EEosRYSLyAO2GIc9kZblj9N90Rhv6LOcUHBGnMw
KWL/aFaozWtchLuTDkLGAZFiP+Dm8fVWzL2CnAgEK6qw4X1N3J3VkEbjoXUpCkbl
Q0AMjxVqp/TGnOOgBQxVL5Kn4ggXQrze+ZXMhNPPdgewkt1ybSXi9HCa1K5Mkfvk
AFpmfSTbROyvvllF+kby8XrOpwdXFKaE5PD90yUVoF8yxdwRNNlMq39yYSK34Ip8
SY1u84H1qoTsjZZHuCVNhQJEucBCfDTYGKcKMhsEJAAgLLgO730HIVrqauhFmoTH
sNPqAuXk8ctw/IlDhtlmE/Ds8BrlN9dtp3VbAgMBAAGjggIIMIICBDAdBgNVHQ4E
FgQUBRGwDNpczGTt1SoFb46sB72LUYwwHwYDVR0jBBgwFoAUgqGyfHTn9dwDDkAc
U0phsbw8pRIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9Tb2Jvcm5vc3Qt
UklQRS9ncUd5ZkhUbjlkd0REa0FjVTBwaHNidzhwUkkuY3JsMGQGCCsGAQUFBwEB
BFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9ncUd5ZkhUbjlkd0REa0FjVTBwaHNidzhwUkkuY2VyMA4GA1Ud
DwEB/wQEAwIHgDCBqwYIKwYBBQUHAQsEgZ4wgZswWwYIKwYBBQUHMAuGT3JzeW5j
Oi8vY2hsb2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1NvYm9ybm9zdC1SSVBFL0JSR3dE
TnBjekdUdDFTb0ZiNDZzQjcyTFVZdy5yb2EwPAYIKwYBBQUHMA2GMGh0dHBzOi8v
Y2hsb2Uuc29ib3Jub3N0Lm5ldC9ycGtpL25ld3MtcHVibGljLnhtbDAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBnwgjDANBgkqhkiG9w0BAQsFAAOCAQEA
S0ZD7B30eGu+1T8Hu90z/aLVkRHy7287UkHOgeHArmB3nLO7bPV4zp9PYF5hWnKf
VDacsRWWNs5vrvObNa5ss0yeLXFXoUYA5xzKKsT4nbSaoNvfrMYjQhBBBcywWrkP
ep3RyWPWSKWdaWio4KjNz5AcRNe5AcwEsMvqP3cfQaG197TD6nKfb82HjpnOVwDn
GUsDEWpCdJLqs/+MqmgmwgdZ1Fagq4R16xlS5toWdlGchbelXjWMgwtpsjventcB
sJ5SvdZ/MTMPJZ+I49PlyB+lf3h9GfvwKh2eiQQt8R6Y0DwR63vtdDIs4DWyd7jd
xLThO9Ok/+r/x1bieuOAQQ==
-----END CERTIFICATE-----