Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/Sobornost-RIPE/oE5iklKuONj8fsKGvcQxrHDk6SE.roa
File:                     oE5iklKuONj8fsKGvcQxrHDk6SE.roa (raw, json)
Hash identifier:          jPIQCMPGJYsFfP/jpjfUwPwcCpBCaTAyVLPrX4m5yUY=
Subject key identifier:   A0:4E:62:92:52:AE:38:D8:FC:7E:C2:86:BD:C4:31:AC:70:E4:E9:21
Certificate issuer:       /CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
Certificate serial:       025E
Authority key identifier: 82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/oE5iklKuONj8fsKGvcQxrHDk6SE.roa
Signing time:             Mon 01 Feb 2021 15:40:42 +0000
ROA not before:           Mon 01 Feb 2021 15:40:42 +0000
ROA not after:            Fri 01 Jul 2022 00:00:00 +0000
asID:                     15562
IP address blocks:        2001:67c:208c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 606 (0x25e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
        Validity
            Not Before: Feb  1 15:40:42 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=A04E629252AE38D8FC7EC286BDC431AC70E4E921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:01:b7:67:02:85:2f:bd:5b:3b:08:94:93:1f:
                    5b:db:91:8b:e8:d5:bb:22:c1:de:96:6b:de:be:17:
                    44:a7:a2:1b:19:5e:24:42:d7:61:b0:88:64:1d:65:
                    63:03:da:34:9e:cc:e4:f0:fd:df:3a:41:ff:8d:33:
                    07:1e:b1:3a:9e:59:15:90:63:9f:2f:6e:d6:86:3e:
                    87:c9:ad:9e:b9:0b:01:2d:80:ce:a3:8c:24:8f:6c:
                    30:7e:33:5f:8b:3f:ca:c8:08:05:ab:b5:32:06:d9:
                    31:7b:11:5b:08:07:1d:ef:aa:5f:3d:8e:cf:23:43:
                    61:33:51:f5:4c:3b:30:ec:9a:f8:94:38:fa:90:49:
                    e4:c8:72:c0:1d:a9:fe:f0:82:a1:ea:91:f1:ea:b9:
                    05:3a:18:07:29:47:bc:b5:98:1d:c7:0c:88:1e:93:
                    36:b4:c2:e9:4c:18:32:62:a4:3b:8d:f9:de:04:d9:
                    d3:f2:04:d3:e1:13:51:61:55:97:b8:86:bd:9b:fb:
                    47:44:cf:d1:99:d5:71:af:1d:fe:e2:74:d9:c7:a7:
                    96:08:d6:15:5e:94:a1:f8:bf:39:65:a4:6c:a1:f7:
                    72:84:77:d4:b1:85:17:04:7f:2a:22:b9:f5:e2:e4:
                    95:53:bd:fc:6a:a1:14:ea:7f:f5:7b:82:a1:bb:0b:
                    7e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:4E:62:92:52:AE:38:D8:FC:7E:C2:86:BD:C4:31:AC:70:E4:E9:21
            X509v3 Authority Key Identifier:
                keyid:82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/gqGyfHTn9dwDDkAcU0phsbw8pRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/oE5iklKuONj8fsKGvcQxrHDk6SE.roa
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/news-public.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:208c::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:ab:e4:93:9c:62:7a:17:65:4f:25:a7:b6:d5:bc:7f:55:23:
         1b:87:da:1e:d0:d9:49:67:b3:41:5d:04:35:1d:fd:18:62:26:
         eb:1b:41:c7:f5:51:d9:0d:fd:d1:d4:51:6b:d1:dd:ff:4e:f5:
         f8:91:a1:e5:85:a2:b4:f7:fa:cb:06:50:31:90:e8:74:4c:85:
         d6:df:78:c1:57:7f:da:de:ff:fb:4c:1d:ff:a7:be:69:c0:1d:
         bb:b5:71:f3:d5:49:fd:1e:31:0b:7f:74:ee:30:d6:1c:3c:83:
         9b:18:cc:e5:f1:d5:af:1d:47:47:60:d8:ce:50:67:09:c6:dd:
         69:27:3c:cc:2a:5a:ac:66:93:3c:31:8d:18:f5:60:fa:5b:86:
         3a:af:4a:5d:1f:87:9b:8a:83:99:21:7e:df:a8:f7:6d:66:9f:
         98:38:ee:a7:c2:c9:9a:81:11:80:ea:1e:af:f0:e9:79:88:a1:
         d8:65:a6:9d:93:65:30:4a:15:da:1b:d1:47:e3:87:2e:2b:ea:
         37:fb:5e:30:fd:bb:92:8d:1c:75:88:32:44:9f:04:09:44:8f:
         be:03:57:fb:a8:6f:fb:d6:e8:23:ca:9c:f6:78:0e:08:58:b9:
         92:fa:b8:ce:b0:3b:a9:e6:34:f2:cb:0c:b5:ce:21:d8:f8:60:
         ad:b5:97:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----