Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/Sobornost-RIPE/H2h6vpCYXjCVoPmFNkxrNvtPbTc.roa
File:                     H2h6vpCYXjCVoPmFNkxrNvtPbTc.roa (raw, json)
Hash identifier:          JrK10MHQX0cqSNhjCyq670YJlaZxUzOaqSEzmrWgcOY=
Subject key identifier:   1F:68:7A:BE:90:98:5E:30:95:A0:F9:85:36:4C:6B:36:FB:4F:6D:37
Certificate issuer:       /CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
Certificate serial:       60
Authority key identifier: 82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/H2h6vpCYXjCVoPmFNkxrNvtPbTc.roa
Signing time:             Wed 27 Jan 2021 08:10:24 +0000
ROA not before:           Wed 27 Jan 2021 08:10:24 +0000
ROA not after:            Fri 01 Jul 2022 00:00:00 +0000
asID:                     15562
IP address blocks:        2001:67c:208c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
        Validity
            Not Before: Jan 27 08:10:24 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=1F687ABE90985E3095A0F985364C6B36FB4F6D37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:06:8e:94:f0:2d:b6:eb:e8:1f:b7:af:0c:73:
                    24:43:bf:27:77:cd:76:e3:ec:ae:75:e5:8b:cd:dd:
                    16:86:95:a2:f2:77:e2:0d:38:15:ea:fd:5a:71:2e:
                    0c:d1:81:e7:44:f6:90:b8:5b:f0:67:60:93:3f:b6:
                    b9:a1:d8:58:64:3c:ca:e7:a4:c0:f2:bb:54:c0:6a:
                    6d:af:b8:71:88:13:14:6f:74:1e:14:e4:b3:da:80:
                    b9:63:e7:66:d6:1f:f9:99:5e:7e:6a:9f:b6:27:3c:
                    b2:3b:ab:cf:f0:c4:15:36:58:bf:6f:01:5a:db:57:
                    c9:39:e7:83:7c:38:e4:2f:ad:d6:10:9a:de:22:02:
                    80:ab:ad:a0:0f:6e:ae:50:19:18:c8:f0:61:40:66:
                    2c:e1:63:db:4a:8b:90:21:74:84:3f:c5:e4:fa:c1:
                    b1:3d:74:74:a7:84:b7:ec:1e:60:0b:48:78:14:30:
                    6b:13:db:57:48:3f:04:4c:a4:ee:9a:e4:99:c3:e5:
                    49:02:b6:e3:9c:ef:39:5f:81:6a:8e:bc:75:78:a4:
                    1d:1c:22:31:d0:07:2c:0b:ca:8d:2c:61:70:a1:1f:
                    f2:38:13:ce:f7:ab:6e:cf:92:af:c4:92:e0:97:33:
                    bd:7e:cf:5b:44:ae:b5:da:31:54:19:59:71:b3:78:
                    35:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:68:7A:BE:90:98:5E:30:95:A0:F9:85:36:4C:6B:36:FB:4F:6D:37
            X509v3 Authority Key Identifier:
                keyid:82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/gqGyfHTn9dwDDkAcU0phsbw8pRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/H2h6vpCYXjCVoPmFNkxrNvtPbTc.roa
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/news-public.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:208c::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:4d:28:fe:a0:fb:6e:67:34:8a:1e:45:97:1d:18:f1:73:c2:
         e4:dc:97:de:df:78:62:59:42:70:b5:db:20:55:9c:aa:f7:6d:
         0b:ae:e5:a7:06:17:d6:57:98:fb:38:56:5d:db:59:14:9b:ed:
         27:df:d8:a1:11:0f:59:26:ca:0b:5c:ef:85:9f:0a:df:b2:ad:
         ac:e9:73:2b:f3:c5:f8:e1:ec:33:b6:a4:54:9c:07:18:fc:1f:
         f0:01:4c:8a:94:79:fa:d8:12:09:5c:9b:34:ec:68:a3:7c:a7:
         92:d6:6b:f5:db:4d:b9:1e:1d:e8:5f:3c:b1:c8:58:38:e3:0c:
         71:43:d3:0b:05:02:e6:8c:00:da:fd:57:26:1f:a2:2f:1d:21:
         11:2f:cb:11:d8:78:6e:e5:0e:5e:71:a7:a3:69:92:32:84:c3:
         0a:75:7f:e7:d7:75:cb:92:a5:06:b4:92:ef:c8:33:ff:8f:9b:
         64:b5:7a:ef:f7:3b:17:16:70:d8:89:1b:41:70:c9:70:7d:b5:
         c1:6a:f8:89:e5:8d:9d:5b:a6:33:f9:e6:89:5d:cf:1e:4f:ae:
         96:b2:dd:41:e5:28:bb:15:14:71:79:72:f7:11:91:2d:19:1e:
         95:a1:e0:02:0b:b0:16:dc:2b:e4:b8:97:cd:7f:c0:cb:ec:39:
         e7:59:19:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----