Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/Sobornost-RIPE/s-sWm7r0Qp8sSRIxeavM7gjN-zw.roa
File:                     s-sWm7r0Qp8sSRIxeavM7gjN-zw.roa (raw, json)
Hash identifier:          rL9O7/1rrUmhu+wEIP6RvWm9ub9tJGs8TU6RpYjoD90=
Subject key identifier:   B3:EB:16:9B:BA:F4:42:9F:2C:49:12:31:79:AB:CC:EE:08:CD:FB:3C
Certificate issuer:       /CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
Certificate serial:       4E
Authority key identifier: 82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/s-sWm7r0Qp8sSRIxeavM7gjN-zw.roa
Signing time:             Wed 27 Jan 2021 03:40:23 +0000
ROA not before:           Wed 27 Jan 2021 03:40:23 +0000
ROA not after:            Fri 01 Jul 2022 00:00:00 +0000
asID:                     15562
IP address blocks:        2001:67c:208c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82a1b27c74e7f5dc030e401c534a61b1bc3ca512
        Validity
            Not Before: Jan 27 03:40:23 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=B3EB169BBAF4429F2C49123179ABCCEE08CDFB3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:01:c4:ce:8c:e7:f5:d4:4d:38:f5:3e:09:b3:
                    1f:57:ac:93:5e:54:ff:6f:e4:fb:03:a8:4d:78:01:
                    d0:9e:dd:f7:6c:58:b0:83:48:eb:e1:06:f1:c2:4b:
                    d0:b0:00:d9:cf:5a:5e:82:88:04:ac:39:35:61:dd:
                    24:5e:47:d5:06:a4:a4:8a:fb:04:dc:7e:b8:9f:db:
                    5d:8e:53:34:f6:46:1d:9b:65:27:3c:e3:57:f9:a0:
                    a5:b4:c3:50:27:8b:0e:50:4e:1e:2f:e4:af:2c:58:
                    6c:31:34:58:33:22:52:89:92:b4:77:bb:b9:e0:c6:
                    da:55:9e:b2:67:88:df:79:3c:c4:d6:59:f0:d8:5f:
                    f8:f4:05:91:a4:a4:dd:b3:73:18:be:5f:1d:c5:2d:
                    89:cc:4a:26:82:40:1c:75:e0:de:b7:eb:68:94:d4:
                    2c:68:46:b0:44:1e:06:83:16:69:e7:11:3a:f7:56:
                    2b:1c:b0:0b:a8:aa:2c:57:b6:19:36:8e:b9:9e:d8:
                    5a:9a:2d:e7:9e:a3:6a:11:f6:91:b1:98:72:e3:f8:
                    b7:68:93:d4:0c:8c:00:88:08:1d:64:29:d2:13:05:
                    9a:e6:64:ba:46:25:46:17:e1:e9:5f:33:32:c3:71:
                    46:d7:9a:c6:6f:04:9f:a2:57:fb:e2:cd:b2:c4:90:
                    54:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:EB:16:9B:BA:F4:42:9F:2C:49:12:31:79:AB:CC:EE:08:CD:FB:3C
            X509v3 Authority Key Identifier:
                keyid:82:A1:B2:7C:74:E7:F5:DC:03:0E:40:1C:53:4A:61:B1:BC:3C:A5:12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/gqGyfHTn9dwDDkAcU0phsbw8pRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqGyfHTn9dwDDkAcU0phsbw8pRI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/Sobornost-RIPE/s-sWm7r0Qp8sSRIxeavM7gjN-zw.roa
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/news-public.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:208c::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:62:54:95:22:68:9c:a0:f8:b6:08:be:f4:68:da:5c:72:12:
         f9:11:f7:73:92:41:9a:0c:88:73:41:72:94:b8:f1:37:a9:63:
         e3:56:1c:1d:d6:f8:47:a0:f5:15:b5:29:68:f4:fa:c6:5e:44:
         0b:ca:73:93:a0:48:ad:b5:53:66:e4:39:65:f6:2e:f9:d2:87:
         aa:65:a2:2c:8c:b5:cb:0b:e4:01:63:ad:f2:c1:c7:a5:23:f0:
         31:f8:a0:07:33:43:c1:21:dc:d2:c4:3c:f6:4c:0c:f6:ef:54:
         ef:6c:27:79:6b:6b:cc:30:a6:3a:73:09:39:f8:5e:cf:16:57:
         b1:5a:7b:22:53:11:5d:ab:8a:5a:da:d8:d8:02:2a:fd:3c:16:
         63:df:c3:75:78:92:2e:f5:d2:1c:3a:6f:29:29:b5:ea:0f:85:
         c5:1b:a9:ea:90:9f:40:1a:1c:30:62:a9:08:ed:aa:47:69:5e:
         a1:fd:b5:6f:8c:0a:fb:aa:08:15:23:e0:7a:ae:7a:96:99:4f:
         4a:37:90:c8:81:79:de:44:24:30:58:83:6d:a9:3f:57:fc:ff:
         dc:a1:88:72:a1:e8:f2:07:a2:df:6b:bb:2f:7b:e6:e5:ff:33:
         ad:58:6a:aa:72:97:6d:78:27:88:1e:87:c9:c5:e5:bd:11:0c:
         b3:f3:ac:98
-----BEGIN CERTIFICATE-----
MIIE6zCCA9OgAwIBAgIBTjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4MmEx
YjI3Yzc0ZTdmNWRjMDMwZTQwMWM1MzRhNjFiMWJjM2NhNTEyMB4XDTIxMDEyNzAz
NDAyM1oXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoQjNFQjE2OUJCQUY0NDI5
RjJDNDkxMjMxNzlBQkNDRUUwOENERkIzQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKwBxM6M5/XUTTj1PgmzH1esk15U/2/k+wOoTXgB0J7d92xYsINI
6+EG8cJL0LAA2c9aXoKIBKw5NWHdJF5H1QakpIr7BNx+uJ/bXY5TNPZGHZtlJzzj
V/mgpbTDUCeLDlBOHi/kryxYbDE0WDMiUomStHe7ueDG2lWesmeI33k8xNZZ8Nhf
+PQFkaSk3bNzGL5fHcUticxKJoJAHHXg3rfraJTULGhGsEQeBoMWaecROvdWKxyw
C6iqLFe2GTaOuZ7YWpot556jahH2kbGYcuP4t2iT1AyMAIgIHWQp0hMFmuZkukYl
Rhfh6V8zMsNxRteaxm8En6JX++LNssSQVB0CAwEAAaOCAggwggIEMB0GA1UdDgQW
BBSz6xabuvRCnyxJEjF5q8zuCM37PDAfBgNVHSMEGDAWgBSCobJ8dOf13AMOQBxT
SmGxvDylEjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGAGA1UdHwRZMFcwVaBT
oFGGT3JzeW5jOi8vY2hsb2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1NvYm9ybm9zdC1S
SVBFL2dxR3lmSFRuOWR3RERrQWNVMHBoc2J3OHBSSS5jcmwwZAYIKwYBBQUHAQEE
WDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL2dxR3lmSFRuOWR3RERrQWNVMHBoc2J3OHBSSS5jZXIwDgYDVR0P
AQH/BAQDAgeAMIGrBggrBgEFBQcBCwSBnjCBmzBbBggrBgEFBQcwC4ZPcnN5bmM6
Ly9jaGxvZS5zb2Jvcm5vc3QubmV0L3Jwa2kvU29ib3Jub3N0LVJJUEUvcy1zV203
cjBRcDhzU1JJeGVhdk03Z2pOLXp3LnJvYTA8BggrBgEFBQcwDYYwaHR0cHM6Ly9j
aGxvZS5zb2Jvcm5vc3QubmV0L3Jwa2kvbmV3cy1wdWJsaWMueG1sMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCCMMA0GCSqGSIb3DQEBCwUAA4IBAQCn
YlSVImicoPi2CL70aNpcchL5EfdzkkGaDIhzQXKUuPE3qWPjVhwd1vhHoPUVtSlo
9PrGXkQLynOToEittVNm5Dll9i750oeqZaIsjLXLC+QBY63ywcelI/Ax+KAHM0PB
IdzSxDz2TAz271TvbCd5a2vMMKY6cwk5+F7PFlexWnsiUxFdq4pa2tjYAir9PBZj
38N1eJIu9dIcOm8pKbXqD4XFG6nqkJ9AGhwwYqkI7apHaV6h/bVvjAr7qggVI+B6
rnqWmU9KN5DIgXneRCQwWINtqT9X/P/coYhyoejyB6Lfa7sve+bl/zOtWGqqcpdt
eCeIHofJxeW9EQyz86yY
-----END CERTIFICATE-----