Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/Sobornost-RIPE/MHv-c7BRou53BqlrYEoqtPZV2Co.roa
File:                     MHv-c7BRou53BqlrYEoqtPZV2Co.roa (raw, json)
Hash identifier:          69vy9rLRkOrhrGut3QCr4X3JjJKPFG8uBm4kZdqxUgg=
Subject key identifier:   30:7B:FE:73:B0:51:A2:EE:77:06:A9:6B:60:4A:2A:B4:F6:55:D8:2A
Certificate issuer:       /CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
Certificate serial:       AE
Authority key identifier: 82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/MHv-c7BRou53BqlrYEoqtPZV2Co.roa
Signing time:             Thu 28 Jan 2021 03:40:27 +0000
ROA not before:           Thu 28 Jan 2021 03:40:27 +0000
ROA not after:            Fri 01 Jul 2022 00:00:00 +0000
asID:                     15562
IP address blocks:        2001:67c:208c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
        Validity
            Not Before: Jan 28 03:40:27 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=307BFE73B051A2EE7706A96B604A2AB4F655D82A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ec:97:e3:28:78:9a:13:00:39:e1:9f:f0:2e:
                    d1:7f:83:c5:e8:76:38:15:2d:c6:80:e5:c9:04:fb:
                    ea:fd:67:47:0d:11:40:52:53:6d:e0:75:d4:64:c3:
                    f1:fe:03:13:7a:19:e1:a8:d4:c0:c8:c8:73:51:2d:
                    d5:97:0c:af:a1:f8:23:21:fd:0c:7c:b6:ba:e7:5c:
                    30:b2:f6:f6:e3:65:75:dd:c8:3c:24:d9:9e:fa:b0:
                    a1:26:40:65:04:37:b8:af:c4:40:57:60:ea:53:1e:
                    ed:14:b8:0e:83:6f:ef:e3:03:06:73:99:9d:00:e5:
                    bb:87:a2:95:49:82:0f:e1:5f:c1:d0:d8:de:06:3e:
                    6e:83:09:2d:2a:2b:59:df:3d:a6:36:48:41:3e:47:
                    e2:0a:dd:24:c9:54:10:95:77:89:d5:42:60:68:9c:
                    2a:b0:09:fa:5d:44:7f:35:06:e0:85:ae:1e:b3:65:
                    39:d7:d1:12:8b:e8:5d:ef:2f:1f:9e:f8:7a:a7:2f:
                    08:6f:c0:04:18:47:da:f7:bf:3a:6b:a0:ee:c0:dc:
                    93:4a:eb:03:50:d4:21:ca:e6:0a:60:e8:a8:ae:9d:
                    1c:57:ca:2b:f1:06:24:70:4e:14:22:f5:fc:e0:73:
                    95:b1:6d:d8:00:58:06:fd:3b:5f:92:b5:32:9c:d2:
                    53:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:7B:FE:73:B0:51:A2:EE:77:06:A9:6B:60:4A:2A:B4:F6:55:D8:2A
            X509v3 Authority Key Identifier:
                keyid:82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/gqGyfHTn9dwDDkAcU0phsbw8pRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/MHv-c7BRou53BqlrYEoqtPZV2Co.roa
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/news-public.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:208c::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:05:ff:19:c7:f0:80:64:d6:3e:a0:d0:9f:0e:7c:0c:69:c8:
         f4:65:88:d4:3f:c6:2c:49:0c:e2:12:9c:6d:d4:ab:73:13:55:
         c5:26:ba:d7:56:8f:da:50:be:dc:8c:4e:67:66:56:be:03:dc:
         cb:58:14:3e:74:4a:27:74:9c:63:95:06:55:e1:25:c1:dd:34:
         85:f8:8f:09:56:86:a6:bf:6f:8f:c7:11:8c:72:5b:01:cb:fa:
         34:19:53:b4:c9:1c:5e:e1:27:ce:41:f1:84:d0:d5:ad:bc:16:
         04:b3:fc:73:d2:44:f6:37:d1:47:59:a0:79:a9:f1:2e:64:a0:
         95:47:60:56:ab:03:f4:b4:5e:27:86:09:08:f5:9c:10:09:49:
         54:0b:ff:a1:db:b0:26:84:15:f2:be:8d:16:18:92:9c:f1:60:
         fd:7d:2c:0c:82:46:69:4d:3f:b7:2c:b1:ab:bc:f4:ad:aa:af:
         f2:db:7d:0d:60:c4:b7:94:8c:ce:ed:f5:a9:e6:94:a2:70:9d:
         a1:60:19:1c:39:05:94:96:51:e4:0e:ee:de:71:8f:5b:bd:ef:
         47:38:fe:f9:c6:da:b1:ee:6a:b0:06:f4:8f:66:d8:f6:7e:c6:
         25:25:aa:67:22:9e:85:54:52:ec:40:88:ca:aa:54:6c:67:65:
         c1:26:9a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----