Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/Sobornost-RIPE/elQ592rH-KzUL2QHSqcFAfV_ZME.roa
File:                     elQ592rH-KzUL2QHSqcFAfV_ZME.roa (raw, json)
Hash identifier:          5C1B5H2bvzuqKv1RUZ5r/MvgqQSbQi8WlfbC+eWBlXI=
Subject key identifier:   7A:54:39:F7:6A:C7:F8:AC:D4:2F:64:07:4A:A7:05:01:F5:7F:64:C1
Certificate issuer:       /CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
Certificate serial:       9A
Authority key identifier: 82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/elQ592rH-KzUL2QHSqcFAfV_ZME.roa
Signing time:             Wed 27 Jan 2021 22:40:25 +0000
ROA not before:           Wed 27 Jan 2021 22:40:25 +0000
ROA not after:            Fri 01 Jul 2022 00:00:00 +0000
asID:                     15562
IP address blocks:        2001:67c:208c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
        Validity
            Not Before: Jan 27 22:40:25 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=7A5439F76AC7F8ACD42F64074AA70501F57F64C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1d:06:f1:ea:9d:8e:be:4c:b7:f0:8a:e4:99:
                    57:ce:d3:9c:c1:d3:76:8b:c1:8e:df:92:a5:d3:02:
                    f3:82:07:68:de:75:6d:bb:2b:09:90:0d:13:34:4b:
                    c3:6f:06:79:40:54:83:d4:68:71:bf:b6:20:d0:2d:
                    5d:91:2d:84:b0:e7:26:bb:92:ad:d6:4c:93:ff:5c:
                    ec:50:ca:68:eb:2e:f7:82:ed:7e:59:3c:5e:c4:ce:
                    66:3e:f2:db:e1:9e:a1:0e:b4:0f:64:ff:82:da:a6:
                    b3:69:60:29:19:a6:e2:58:63:5e:7e:2b:de:7b:d1:
                    36:92:b5:d6:15:a1:57:b8:45:cf:de:0a:65:b9:a9:
                    f2:77:7e:69:5e:01:76:85:56:02:24:09:cf:23:88:
                    b8:21:e8:e5:81:b1:09:22:91:6b:08:b3:4f:fb:85:
                    50:65:02:1f:3d:f6:43:36:96:35:08:4b:8a:c7:2e:
                    3c:c5:ac:59:ff:e4:0a:fb:e5:41:a1:a1:0a:c0:77:
                    84:41:57:2b:13:a4:8a:01:6d:34:f8:e8:a3:45:56:
                    76:01:5f:b1:fc:d9:ce:c7:5d:b7:b2:9b:bc:3d:a4:
                    26:6e:33:06:ff:6f:7d:28:a6:d9:65:0c:f2:8f:23:
                    4e:87:d5:3c:1b:fb:90:25:0c:42:51:11:b9:7d:f0:
                    43:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:54:39:F7:6A:C7:F8:AC:D4:2F:64:07:4A:A7:05:01:F5:7F:64:C1
            X509v3 Authority Key Identifier:
                keyid:82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/gqGyfHTn9dwDDkAcU0phsbw8pRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/elQ592rH-KzUL2QHSqcFAfV_ZME.roa
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/news-public.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:208c::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:76:01:2f:b1:66:52:f9:1b:7a:5d:6c:7b:28:14:42:24:89:
         9b:6f:17:56:9b:15:94:45:63:82:46:d1:c7:62:bb:e1:9f:b7:
         d9:c7:15:53:d0:47:a5:8f:9c:32:af:bb:aa:19:29:60:d7:2e:
         8a:75:79:4c:f6:29:84:1a:13:56:5e:42:77:75:41:80:df:ec:
         9b:2b:45:8f:d5:af:67:14:84:45:3d:4f:ff:eb:73:f8:81:73:
         a3:20:52:74:f5:92:40:13:51:3d:71:3d:d8:b9:73:a6:b9:0c:
         ee:e4:3e:63:91:e5:64:f0:38:fa:74:79:73:63:73:6e:42:08:
         9c:cc:34:de:80:dc:76:fd:c0:56:5b:8b:43:3d:68:09:ea:58:
         0b:ea:82:6f:48:76:28:61:44:90:33:66:00:36:08:36:ed:71:
         50:e3:08:6d:25:12:93:2a:f6:91:a4:a9:51:30:89:af:47:cc:
         db:08:d7:fa:d6:72:6c:fb:96:47:ac:f0:dc:3a:f7:f8:a1:b5:
         00:42:05:ec:be:41:06:9f:5d:f0:f3:af:41:a4:e8:10:93:aa:
         8a:57:bc:cc:f9:4b:4c:bd:15:5d:5a:46:54:47:fe:56:0b:26:
         b6:83:16:dd:10:29:77:6d:10:1d:cb:76:7f:81:21:4d:65:a6:
         07:b7:8a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----