Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/Sobornost-RIPE/RQL9qjvwqgD7kPYPU3_taGs_eGo.roa
File:                     RQL9qjvwqgD7kPYPU3_taGs_eGo.roa (raw, json)
Hash identifier:          0bTvyOwNw3Bwu2hV2PR4MJVFb6Ov4eDiNdEmHUtO0UA=
Subject key identifier:   45:02:FD:AA:3B:F0:AA:00:FB:90:F6:0F:53:7F:ED:68:6B:3F:78:6A
Certificate issuer:       /CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
Certificate serial:       C2
Authority key identifier: 82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/RQL9qjvwqgD7kPYPU3_taGs_eGo.roa
Signing time:             Thu 28 Jan 2021 08:40:27 +0000
ROA not before:           Thu 28 Jan 2021 08:40:27 +0000
ROA not after:            Fri 01 Jul 2022 00:00:00 +0000
asID:                     15562
IP address blocks:        2001:67c:208c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
        Validity
            Not Before: Jan 28 08:40:27 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=4502FDAA3BF0AA00FB90F60F537FED686B3F786A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3f:37:aa:ea:5c:07:4d:0f:be:eb:97:96:cb:
                    2e:21:ba:57:84:f9:b9:73:60:69:7c:31:ff:1f:9a:
                    cb:d0:06:6c:79:54:7b:2d:02:f2:43:cf:93:8a:7f:
                    a1:92:86:03:81:a1:c1:7a:b5:ed:96:75:94:03:92:
                    22:42:0d:98:d7:37:1f:be:ad:ee:89:c3:78:4e:91:
                    45:4c:db:6b:c3:4f:94:3d:06:af:27:7f:03:35:15:
                    9f:22:4f:45:da:69:db:b9:dc:60:d2:24:e1:96:be:
                    97:64:bc:81:8e:c9:26:6a:72:cd:81:34:7a:ef:0b:
                    7c:5b:55:04:c2:1e:03:e9:30:3e:16:65:66:1a:45:
                    f1:72:a6:9e:1d:27:41:96:fb:ad:3e:2e:64:f5:ba:
                    7a:d6:2e:14:3e:f3:85:05:81:64:14:05:41:be:87:
                    82:4e:a4:e1:e3:d3:77:41:29:b5:1d:46:3e:67:0d:
                    d3:ac:c1:ea:9f:a6:0d:f6:29:38:61:06:5d:5a:21:
                    3a:89:23:c7:78:e5:07:36:99:38:0f:21:a4:13:6a:
                    52:d9:00:b1:33:ca:da:88:09:3c:a3:0b:87:4a:a8:
                    ff:22:3e:c0:dc:41:4a:46:78:52:11:b1:1b:05:69:
                    20:65:26:28:0f:9f:fa:99:f2:7b:e9:cb:05:76:c9:
                    ac:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:02:FD:AA:3B:F0:AA:00:FB:90:F6:0F:53:7F:ED:68:6B:3F:78:6A
            X509v3 Authority Key Identifier:
                keyid:82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/gqGyfHTn9dwDDkAcU0phsbw8pRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/RQL9qjvwqgD7kPYPU3_taGs_eGo.roa
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/news-public.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:208c::/48

    Signature Algorithm: sha256WithRSAEncryption
         c8:4a:6e:86:2b:5a:9a:1b:31:cf:2c:0f:37:07:11:97:54:87:
         99:d7:05:4c:57:d2:93:ff:dc:0c:f6:48:57:35:61:f4:ce:f5:
         1a:31:27:77:6a:c3:e1:ec:55:04:e4:cc:fc:99:22:f8:b6:7a:
         4b:2d:fd:e0:d8:9a:38:99:ba:6e:34:40:9a:7c:da:e5:93:d0:
         71:73:72:95:b2:ac:1b:85:39:94:d7:b6:d7:fe:08:8a:c9:b4:
         00:a7:1e:ce:7e:71:7a:bc:7d:9e:8a:91:4a:d4:10:75:76:fe:
         fd:ec:05:b3:6d:35:59:24:23:af:14:c4:b9:10:02:6b:1d:38:
         59:ae:32:11:c6:80:f2:33:18:d9:cc:8a:8c:f4:c4:40:23:e7:
         62:af:51:11:ad:45:81:8a:de:2f:26:8d:18:7a:1b:7b:4c:0d:
         17:d4:f6:df:c7:a2:a2:1a:cb:43:a8:bb:08:0f:7e:26:c3:50:
         ef:3f:71:4b:69:41:63:17:fc:b9:36:7c:37:f6:c6:03:7d:e9:
         34:88:54:33:ca:db:d6:6d:35:af:55:06:25:75:2e:48:ac:d9:
         be:3a:79:d8:f5:0b:d8:e2:27:04:00:93:50:88:55:cb:e8:a5:
         dc:f7:1c:a5:f7:a9:59:3a:50:46:de:a9:4d:b9:54:4c:f0:35:
         31:8b:2c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----