Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/Sobornost-RIPE/MCZIaMFKXihNw1htilAKBCi90X0.roa
File:                     MCZIaMFKXihNw1htilAKBCi90X0.roa (raw, json)
Hash identifier:          tmr2sfEznPXzRuch5wZ5Z66RUw6Ftv/b/+5v6yEFzEM=
Subject key identifier:   30:26:48:68:C1:4A:5E:28:4D:C3:58:6D:8A:50:0A:04:28:BD:D1:7D
Certificate issuer:       /CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
Certificate serial:       26
Authority key identifier: 82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/MCZIaMFKXihNw1htilAKBCi90X0.roa
Signing time:             Tue 26 Jan 2021 17:40:23 +0000
ROA not before:           Tue 26 Jan 2021 17:40:23 +0000
ROA not after:            Fri 01 Jul 2022 00:00:00 +0000
asID:                     15562
IP address blocks:        2001:67c:208c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
        Validity
            Not Before: Jan 26 17:40:23 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=30264868C14A5E284DC3586D8A500A0428BDD17D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e7:95:c7:a8:43:c0:c3:dd:54:ff:cd:da:1c:
                    8c:c3:69:71:6d:b8:ca:7f:2b:ec:a7:13:b8:25:ff:
                    85:f6:24:73:c2:f1:26:b6:a7:d3:41:7e:db:53:10:
                    52:5b:0c:ec:92:b2:30:a4:5c:2f:f4:e9:03:7a:e7:
                    4a:99:1c:b4:cd:0b:5c:20:75:f9:e1:48:37:8a:95:
                    d2:9d:17:f5:55:f2:69:f8:a7:37:e1:27:2b:9f:49:
                    3e:d9:fa:e4:15:bd:21:b3:a6:bb:41:83:f2:06:71:
                    fb:03:f2:de:15:8e:7e:87:73:5f:cd:99:35:77:43:
                    6e:63:18:35:15:34:a6:43:fc:c3:c9:05:52:80:d6:
                    c2:c3:2e:02:87:5e:29:f4:a1:58:e8:b8:9f:e7:19:
                    51:73:62:7e:93:4d:ef:ed:e4:a7:23:70:32:d0:ac:
                    71:14:3a:d0:af:63:fd:79:27:a9:ea:6c:dd:9e:6b:
                    81:2f:97:e4:b4:05:e0:c2:d0:e1:5a:e4:bd:60:d5:
                    84:dc:86:0c:48:00:dd:3f:c8:57:b8:97:d2:6f:24:
                    e8:db:f6:b9:fc:06:54:62:c3:d8:37:33:c6:bd:54:
                    85:1f:ad:ff:d1:80:75:6c:0a:dc:28:90:fe:b0:62:
                    c7:cd:41:53:c3:ec:f4:60:2b:90:a1:82:c9:46:96:
                    a9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:26:48:68:C1:4A:5E:28:4D:C3:58:6D:8A:50:0A:04:28:BD:D1:7D
            X509v3 Authority Key Identifier:
                keyid:82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/gqGyfHTn9dwDDkAcU0phsbw8pRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/MCZIaMFKXihNw1htilAKBCi90X0.roa
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/news-public.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:208c::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:45:ee:bf:aa:32:59:4e:16:00:dc:af:67:5e:23:2f:22:87:
         f9:ad:3c:9e:b9:ff:76:e0:bf:04:2c:de:0d:82:d4:bf:1b:20:
         ca:1a:a4:88:a5:98:6d:32:86:36:ff:1f:fc:ba:dd:92:51:81:
         db:b0:5a:5a:4f:96:ba:1c:89:fa:4c:3f:27:3b:3a:37:31:6a:
         2b:03:b3:11:1b:97:fe:f5:18:63:86:f7:08:e9:e7:71:45:0e:
         b5:64:21:5c:9c:b8:1b:c5:a4:2a:52:58:44:7f:61:5c:a0:cd:
         35:16:01:d0:16:63:52:f0:ec:e5:25:45:46:e2:98:f8:e3:79:
         ae:36:84:4a:a7:f2:d5:21:af:f1:6f:5a:86:a5:d2:95:a3:2d:
         34:39:88:3f:62:d3:c7:56:19:5f:bd:d1:d3:c8:af:02:2d:f6:
         11:ee:81:1a:21:e2:23:3f:04:98:62:cd:0e:ad:3e:16:9f:32:
         90:8f:f0:50:4e:fa:60:59:a4:fa:04:38:f5:a8:d2:15:c8:f5:
         b2:d0:a1:49:31:ab:b6:14:8d:da:a6:3f:55:82:9a:a2:b0:25:
         a7:57:94:fe:44:25:d0:ac:b4:ef:79:3b:85:d3:ac:de:d3:6f:
         de:ec:9a:1b:49:f4:48:7a:77:46:8c:3f:d3:8d:65:ce:16:06:
         ec:c0:6a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----