Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/Sobornost-RIPE/Je579Kz9fiiDGJqsW-FkuwL6WgE.roa
File:                     Je579Kz9fiiDGJqsW-FkuwL6WgE.roa (raw, json)
Hash identifier:          XF9T9+lSxtpGJUXCwoH5ddSbHkA/BqoOmoMrN2b5Ygg=
Subject key identifier:   25:EE:7B:F4:AC:FD:7E:28:83:18:9A:AC:5B:E1:64:BB:02:FA:5A:01
Certificate issuer:       /CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
Certificate serial:       1C
Authority key identifier: 82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/Je579Kz9fiiDGJqsW-FkuwL6WgE.roa
Signing time:             Tue 26 Jan 2021 15:10:22 +0000
ROA not before:           Tue 26 Jan 2021 15:10:22 +0000
ROA not after:            Fri 01 Jul 2022 00:00:00 +0000
asID:                     15562
IP address blocks:        2001:67c:208c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
        Validity
            Not Before: Jan 26 15:10:22 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=25EE7BF4ACFD7E2883189AAC5BE164BB02FA5A01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:02:94:cf:fa:c3:53:9d:7a:3e:37:1d:1c:96:
                    8b:94:66:5e:4e:81:68:5b:d4:8c:88:a3:0d:cf:61:
                    3c:2a:f0:08:5b:6b:0a:ec:33:70:21:06:bf:8b:e0:
                    08:af:85:76:8f:36:90:c1:f7:8f:17:5f:87:46:54:
                    66:b6:01:8d:46:8f:76:61:41:2c:2b:19:cf:e5:1c:
                    bc:98:14:f1:b6:17:bc:31:69:ee:53:05:80:88:88:
                    b9:68:a0:ae:18:63:c2:67:a9:ab:e3:18:df:9e:d8:
                    d9:f6:7c:21:ba:ad:2d:61:8a:83:c4:aa:22:96:e0:
                    dd:36:4a:e8:48:ab:39:94:cf:99:9a:a2:8c:2a:a5:
                    75:fd:fe:1c:93:f9:10:d5:2f:81:26:73:b7:43:7d:
                    93:10:72:8c:0d:df:7b:0e:18:2a:8e:5e:09:aa:b9:
                    93:c3:63:bf:42:36:c1:29:64:be:eb:89:dd:19:75:
                    bc:96:12:ab:8d:cf:90:4c:ae:da:a3:25:de:28:ff:
                    84:ef:75:81:3b:49:e4:66:82:98:d4:59:15:b3:bd:
                    72:77:d9:c4:c5:76:86:52:57:a8:db:ea:48:1a:ca:
                    fd:9c:7e:0d:47:05:66:05:5c:ec:3c:6a:f7:f5:95:
                    2c:59:9a:bf:b0:be:c3:e5:0c:c6:f4:d7:2d:ca:d3:
                    df:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:EE:7B:F4:AC:FD:7E:28:83:18:9A:AC:5B:E1:64:BB:02:FA:5A:01
            X509v3 Authority Key Identifier:
                keyid:82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/gqGyfHTn9dwDDkAcU0phsbw8pRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/Je579Kz9fiiDGJqsW-FkuwL6WgE.roa
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/news-public.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:208c::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:20:79:f8:5f:f5:42:5d:86:73:d8:31:9d:05:15:a8:66:fe:
         4b:5b:53:af:30:a4:2d:06:3e:b8:b3:46:25:a8:e5:52:5c:2d:
         a8:22:86:34:85:2a:fd:e0:1a:83:eb:0c:33:d5:4b:a2:39:99:
         b4:18:ce:2b:fc:63:44:fc:b6:2c:01:96:09:7f:99:90:80:a2:
         63:e4:58:55:00:93:16:d7:cc:7f:9b:12:d3:68:b7:ef:b2:08:
         ae:73:26:a9:54:87:f5:31:aa:55:7c:57:fe:42:88:c4:75:37:
         c8:e3:cc:04:a5:c1:94:a0:80:53:90:c1:2f:0c:88:ba:99:93:
         a8:b8:60:5b:22:cf:ed:33:6e:08:93:92:b5:9c:35:96:10:d9:
         64:8d:51:d2:4a:ed:43:29:a7:53:c2:ce:60:90:c0:4c:75:b9:
         e4:ac:7e:94:86:49:e2:f1:83:4d:2b:2e:f7:ca:b6:b2:50:92:
         4d:53:2a:a3:43:29:72:59:50:cb:5a:46:c1:85:19:7c:bb:ba:
         c8:98:35:3d:54:97:35:78:fd:1e:ab:63:a0:e4:ae:e6:31:89:
         14:96:d8:ee:6a:f7:92:90:c4:fe:f9:a1:0c:a4:36:d0:73:a2:
         8e:06:e7:f2:c4:99:61:ff:fb:da:90:65:00:de:c8:d8:fe:a7:
         89:de:c6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----