Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/Sobornost-RIPE/Os4WSIB8hcsbZ_oUGdmvx1SrfwI.roa
File:                     Os4WSIB8hcsbZ_oUGdmvx1SrfwI.roa (raw, json)
Hash identifier:          UlhFEXNdKyMLb4WixmWLmAsBGV21fwmnYoo75BqJaxQ=
Subject key identifier:   3A:CE:16:48:80:7C:85:CB:1B:67:FA:14:19:D9:AF:C7:54:AB:7F:02
Certificate issuer:       /CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
Certificate serial:       74
Authority key identifier: 82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/Os4WSIB8hcsbZ_oUGdmvx1SrfwI.roa
Signing time:             Wed 27 Jan 2021 13:10:25 +0000
ROA not before:           Wed 27 Jan 2021 13:10:25 +0000
ROA not after:            Fri 01 Jul 2022 00:00:00 +0000
asID:                     15562
IP address blocks:        2001:67c:208c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
        Validity
            Not Before: Jan 27 13:10:25 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=3ACE1648807C85CB1B67FA1419D9AFC754AB7F02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:95:7b:cb:14:b5:3e:a2:b2:ce:e1:7e:21:86:
                    43:84:dc:f0:18:64:1e:28:22:df:25:3f:bb:5f:fe:
                    5a:89:14:6c:0a:b7:1d:89:77:3e:07:39:14:30:04:
                    6f:da:2c:2c:58:79:d6:bb:fd:84:a7:8f:e2:ed:4c:
                    55:36:0e:61:a7:98:8d:d7:10:f2:d7:8d:75:fd:96:
                    cd:fb:bd:60:e4:1c:02:4d:fa:58:25:c2:04:ad:10:
                    90:41:01:85:9a:0c:95:7b:fb:e2:71:f4:9b:fc:fb:
                    0a:22:7f:df:3d:da:ce:fd:55:19:b7:76:c3:d6:26:
                    81:55:83:2f:1d:63:ca:b4:8a:22:33:83:30:99:c9:
                    f4:1b:8d:17:8f:61:25:32:72:ca:9f:91:90:37:72:
                    fe:e3:b1:33:93:92:4a:9c:6e:bc:58:ac:7e:7f:c6:
                    21:ac:51:ad:a3:56:c9:94:b2:32:91:23:9c:cc:97:
                    89:4b:57:93:51:b3:fc:57:2f:c8:11:11:55:45:a8:
                    c5:ee:2b:25:bf:44:2b:01:1f:09:9f:05:86:4e:3d:
                    f0:91:35:5a:f0:cb:a9:2d:55:45:a4:af:99:6a:0f:
                    f9:84:9c:f3:b4:58:2f:ae:04:61:f7:91:17:e2:56:
                    91:04:b8:fa:12:4d:7a:37:d6:5a:f8:45:ca:71:49:
                    7d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:CE:16:48:80:7C:85:CB:1B:67:FA:14:19:D9:AF:C7:54:AB:7F:02
            X509v3 Authority Key Identifier:
                keyid:82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/gqGyfHTn9dwDDkAcU0phsbw8pRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/Os4WSIB8hcsbZ_oUGdmvx1SrfwI.roa
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/news-public.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:208c::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:cd:65:3c:57:2a:b3:5c:59:15:ee:8d:61:08:2d:cb:9d:a3:
         23:55:aa:76:09:f0:96:ae:52:44:94:43:f9:01:de:d7:86:21:
         3c:08:e1:29:65:9d:ae:50:6e:d9:9c:df:62:63:13:56:ef:93:
         93:b5:56:84:90:bb:b2:28:7c:47:a7:3e:b3:cf:07:66:da:75:
         38:34:da:92:8a:4b:43:1f:a9:5b:49:7c:e9:f3:fa:1c:61:0e:
         4b:1b:9c:47:20:25:11:ec:35:41:51:b4:95:e6:d9:f6:0e:86:
         aa:3e:22:aa:17:9b:e5:af:78:d6:55:9a:8c:3f:e2:29:fb:55:
         94:70:f8:c5:f4:8a:05:d8:97:50:fe:52:1e:b2:3c:09:3c:8d:
         25:0e:f1:e7:e6:ae:3f:a8:96:5f:0a:e2:c3:14:66:2a:3e:e5:
         1a:c1:52:0d:41:5a:c6:dc:10:75:7c:ef:71:af:bd:02:81:8b:
         f2:82:a7:ab:e8:5f:a4:be:66:25:88:f9:df:50:68:00:e7:6d:
         5c:ec:56:b2:18:8b:20:5e:d0:2a:ac:90:3d:88:df:0e:5b:e2:
         10:38:70:96:83:52:21:8f:33:28:31:1a:23:1c:25:df:63:34:
         4b:7b:dc:95:f7:19:33:a1:e9:ca:79:cf:13:54:ba:d1:47:23:
         a4:18:64:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----