Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/Sobornost-RIPE/XYv4QmktUJ4nRc5E8VI9lMuubP4.roa
File:                     XYv4QmktUJ4nRc5E8VI9lMuubP4.roa (raw, json)
Hash identifier:          DJgSLlJ6JmL4xLqUkA/Bj7nI/U30q76zVJa/mvDH7xo=
Subject key identifier:   5D:8B:F8:42:69:2D:50:9E:27:45:CE:44:F1:52:3D:94:CB:AE:6C:FE
Certificate issuer:       /CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
Certificate serial:       7E
Authority key identifier: 82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/XYv4QmktUJ4nRc5E8VI9lMuubP4.roa
Signing time:             Wed 27 Jan 2021 15:40:25 +0000
ROA not before:           Wed 27 Jan 2021 15:40:25 +0000
ROA not after:            Fri 01 Jul 2022 00:00:00 +0000
asID:                     15562
IP address blocks:        2001:67c:208c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
        Validity
            Not Before: Jan 27 15:40:25 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=5D8BF842692D509E2745CE44F1523D94CBAE6CFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0a:bb:e7:fe:dd:52:d2:ed:d1:5c:ea:41:7f:
                    f4:f1:82:3f:49:17:df:c8:da:12:eb:56:dd:e1:a9:
                    bc:12:19:cb:f0:63:d6:7a:96:55:12:10:c0:ff:91:
                    3d:b4:c4:2f:37:52:c0:94:0d:60:47:59:41:50:15:
                    d0:0e:78:39:6d:b8:99:83:0f:39:88:97:0b:93:61:
                    ab:13:dc:37:f0:9a:95:90:4d:28:a7:80:31:70:81:
                    54:0d:da:2d:01:a3:21:26:64:c6:5f:20:83:c0:6e:
                    ac:b9:6e:cc:50:c2:00:42:88:64:db:d9:7c:89:ab:
                    df:62:a5:d1:9e:9c:07:53:fb:db:61:14:01:f1:bb:
                    57:73:b4:2f:31:84:e7:b6:4b:41:72:c7:ff:14:cb:
                    67:28:35:ef:5d:f4:70:0f:d4:0a:d9:41:61:7d:54:
                    2c:a9:92:2e:e9:2b:26:ec:47:a9:16:84:a6:79:9e:
                    21:d3:3e:cb:80:6c:ea:ba:ec:22:4a:bd:0a:67:c7:
                    98:7f:10:fa:be:72:69:f2:f3:f1:b8:77:f9:4b:b9:
                    cc:a0:2e:c6:f1:a0:e6:bb:94:b8:7a:d6:f3:60:74:
                    9c:14:79:1d:0b:db:bf:3e:e1:3c:eb:50:e2:9b:44:
                    0f:6f:b9:1e:91:25:59:5a:fa:99:e1:e8:e4:6b:94:
                    53:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:8B:F8:42:69:2D:50:9E:27:45:CE:44:F1:52:3D:94:CB:AE:6C:FE
            X509v3 Authority Key Identifier:
                keyid:82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/gqGyfHTn9dwDDkAcU0phsbw8pRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/XYv4QmktUJ4nRc5E8VI9lMuubP4.roa
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/news-public.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:208c::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:d1:29:10:da:66:8c:c0:ec:c4:2c:8b:9d:10:10:68:8f:80:
         33:d0:93:ef:ec:a5:db:06:83:4e:00:04:d8:95:81:d1:7f:f7:
         75:1a:45:40:c1:11:41:c8:5c:4d:5c:98:6d:68:7f:77:54:c3:
         d8:3c:09:bc:bb:95:f5:5b:d1:32:d4:9f:7a:82:77:ed:96:85:
         7d:9a:23:c7:98:34:c6:7c:4f:3b:f4:4a:37:76:8b:05:a4:e4:
         38:cd:01:dc:32:68:04:cf:51:dc:be:87:e6:37:59:13:2f:89:
         70:01:22:16:6c:48:39:f0:e8:e3:83:90:e9:bc:79:54:00:5e:
         36:49:56:46:4f:f8:cb:9d:67:f1:ca:70:97:f6:55:4d:64:d1:
         2f:aa:f3:07:b9:40:c0:5e:ff:8f:f4:a0:09:8d:56:ac:fb:f9:
         b9:55:54:a0:d3:3f:ba:2e:45:c6:31:8d:1b:df:99:01:e1:a3:
         a7:93:c5:b9:59:8b:23:d6:b6:f9:96:d6:f3:70:34:e6:43:bf:
         cf:f6:e6:19:42:27:a1:03:b3:4c:f4:22:81:db:04:49:c9:6b:
         63:1e:8e:d5:9b:2b:87:23:18:77:16:51:d3:19:11:ee:84:4a:
         7e:f7:ca:75:2d:df:82:b5:45:85:04:d9:66:fb:41:3d:0d:0b:
         2e:35:3a:2f
-----BEGIN CERTIFICATE-----
MIIE6zCCA9OgAwIBAgIBfjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4MmEx
YjI3Yzc0ZTdmNWRjMDMwZTQwMWM1MzRhNjFiMWJjM2NhNTEyMB4XDTIxMDEyNzE1
NDAyNVoXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNUQ4QkY4NDI2OTJENTA5
RTI3NDVDRTQ0RjE1MjNEOTRDQkFFNkNGRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKcKu+f+3VLS7dFc6kF/9PGCP0kX38jaEutW3eGpvBIZy/Bj1nqW
VRIQwP+RPbTELzdSwJQNYEdZQVAV0A54OW24mYMPOYiXC5NhqxPcN/CalZBNKKeA
MXCBVA3aLQGjISZkxl8gg8BurLluzFDCAEKIZNvZfImr32Kl0Z6cB1P722EUAfG7
V3O0LzGE57ZLQXLH/xTLZyg17130cA/UCtlBYX1ULKmSLukrJuxHqRaEpnmeIdM+
y4Bs6rrsIkq9CmfHmH8Q+r5yafLz8bh3+Uu5zKAuxvGg5ruUuHrW82B0nBR5HQvb
vz7hPOtQ4ptED2+5HpElWVr6meHo5GuUUzMCAwEAAaOCAggwggIEMB0GA1UdDgQW
BBRdi/hCaS1QnidFzkTxUj2Uy65s/jAfBgNVHSMEGDAWgBSCobJ8dOf13AMOQBxT
SmGxvDylEjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGAGA1UdHwRZMFcwVaBT
oFGGT3JzeW5jOi8vY2hsb2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1NvYm9ybm9zdC1S
SVBFL2dxR3lmSFRuOWR3RERrQWNVMHBoc2J3OHBSSS5jcmwwZAYIKwYBBQUHAQEE
WDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL2dxR3lmSFRuOWR3RERrQWNVMHBoc2J3OHBSSS5jZXIwDgYDVR0P
AQH/BAQDAgeAMIGrBggrBgEFBQcBCwSBnjCBmzBbBggrBgEFBQcwC4ZPcnN5bmM6
Ly9jaGxvZS5zb2Jvcm5vc3QubmV0L3Jwa2kvU29ib3Jub3N0LVJJUEUvWFl2NFFt
a3RVSjRuUmM1RThWSTlsTXV1YlA0LnJvYTA8BggrBgEFBQcwDYYwaHR0cHM6Ly9j
aGxvZS5zb2Jvcm5vc3QubmV0L3Jwa2kvbmV3cy1wdWJsaWMueG1sMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCCMMA0GCSqGSIb3DQEBCwUAA4IBAQCU
0SkQ2maMwOzELIudEBBoj4Az0JPv7KXbBoNOAATYlYHRf/d1GkVAwRFByFxNXJht
aH93VMPYPAm8u5X1W9Ey1J96gnftloV9miPHmDTGfE879Eo3dosFpOQ4zQHcMmgE
z1HcvofmN1kTL4lwASIWbEg58Ojjg5DpvHlUAF42SVZGT/jLnWfxynCX9lVNZNEv
qvMHuUDAXv+P9KAJjVas+/m5VVSg0z+6LkXGMY0b35kB4aOnk8W5WYsj1rb5ltbz
cDTmQ7/P9uYZQiehA7NM9CKB2wRJyWtjHo7VmyuHIxh3FlHTGRHuhEp+98p1Ld+C
tUWFBNlm+0E9DQsuNTov
-----END CERTIFICATE-----