Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/Sobornost/8hULMqKxvDxjGoMaZDLCJA-N17g.roa
File:                     8hULMqKxvDxjGoMaZDLCJA-N17g.roa (raw, json)
Hash identifier:          MdNK7K0WMkU1RAyDYnbZKOFwqdYt5ghDEPzv9PtuCNc=
Subject key identifier:   F2:15:0B:32:A2:B1:BC:3C:63:1A:83:1A:64:32:C2:24:0F:8D:D7:B8
Certificate issuer:       /CN=4be2706ac16dc810b08cbeb400e17382b2c25a64
Certificate serial:       E1
Authority key identifier: 4B:E2:70:6A:C1:6D:C8:10:B0:8C:BE:B4:00:E1:73:82:B2:C2:5A:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S-JwasFtyBCwjL60AOFzgrLCWmQ.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/Sobornost/8hULMqKxvDxjGoMaZDLCJA-N17g.roa
Signing time:             Thu 10 Dec 2020 13:43:08 +0000
ROA not before:           Thu 10 Dec 2020 13:43:08 +0000
ROA not after:            Thu 01 Jul 2021 00:00:00 +0000
asID:                     15562
IP address blocks:        2001:67c:208c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 225 (0xe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4be2706ac16dc810b08cbeb400e17382b2c25a64
        Validity
            Not Before: Dec 10 13:43:08 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=F2150B32A2B1BC3C631A831A6432C2240F8DD7B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:10:bd:f4:c1:02:89:dc:8c:91:b3:63:e1:7e:
                    fd:7b:55:49:fc:5c:a7:4b:ac:6c:b3:90:61:55:27:
                    4c:4b:74:df:cb:97:9c:1f:75:44:b1:ba:52:8e:68:
                    0f:82:dd:b7:dc:21:40:a1:0a:e2:b8:89:5e:cf:52:
                    65:8c:7b:13:60:48:a3:56:75:52:21:a5:5c:f2:f3:
                    83:d6:f1:c8:5e:d2:1b:08:0b:78:d5:ab:77:a7:1d:
                    c2:bd:4a:c6:b8:24:92:9b:5a:98:98:9b:eb:67:15:
                    e4:63:6a:f0:49:ec:d8:ec:f9:80:93:9f:b8:75:ad:
                    6a:7c:e3:63:50:4d:e8:20:be:91:3a:79:1d:3b:08:
                    4a:3a:54:dc:ce:7a:5b:0c:70:b5:ff:b7:d5:dc:20:
                    2b:e4:5c:19:62:5b:92:6f:ca:5c:b6:82:2d:f5:d2:
                    79:0f:af:7d:c6:8f:c0:b6:51:ea:2f:4b:b2:5f:04:
                    4f:44:f2:74:78:78:4d:d9:dd:31:64:ef:80:56:9e:
                    9c:40:3c:c6:43:c5:b9:a6:ce:30:a8:13:cc:18:e2:
                    ed:14:2f:f5:b5:39:3e:19:a2:63:db:4a:35:f7:15:
                    74:d1:c2:cc:3b:9d:50:3a:c6:7c:f1:2e:5a:4d:13:
                    0d:1f:bf:cb:27:e4:9b:d1:2d:f6:e1:85:dd:0b:a4:
                    2a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:15:0B:32:A2:B1:BC:3C:63:1A:83:1A:64:32:C2:24:0F:8D:D7:B8
            X509v3 Authority Key Identifier:
                keyid:4B:E2:70:6A:C1:6D:C8:10:B0:8C:BE:B4:00:E1:73:82:B2:C2:5A:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/Sobornost/S-JwasFtyBCwjL60AOFzgrLCWmQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-JwasFtyBCwjL60AOFzgrLCWmQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/Sobornost/8hULMqKxvDxjGoMaZDLCJA-N17g.roa
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:208c::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:cc:ce:61:e7:e4:65:95:b8:0d:d3:c8:a0:0b:cd:f6:c0:81:
         27:b9:84:85:f5:11:33:ed:cb:16:ee:17:f7:6d:ac:2b:b7:07:
         cd:a4:61:8a:4e:8a:3d:b0:2f:5e:bb:37:a6:16:3f:bf:76:e3:
         23:ac:c2:8b:c3:ef:45:af:86:f8:2b:30:ff:a3:be:03:2b:46:
         67:48:49:c3:d7:0d:7f:1b:d6:59:28:a7:72:39:5a:a1:23:c1:
         0f:7d:fe:88:ca:84:c9:c0:a2:3c:fe:f1:70:87:c2:3b:c0:c1:
         b0:51:30:4a:c0:e3:47:22:68:99:4e:1d:3f:10:e6:65:f4:6c:
         a7:d9:2e:0f:65:b8:43:da:97:6c:6e:27:1f:13:a3:e5:e1:d8:
         6c:14:12:b1:2a:e8:9a:57:94:a3:4c:1d:73:b4:b5:07:0f:e5:
         40:a6:52:ac:ea:83:3d:7a:e5:41:52:5b:b8:e9:ce:ed:df:9d:
         31:32:0f:5e:1a:00:72:08:de:87:eb:77:5b:70:75:e6:90:cd:
         50:85:d4:97:52:e9:52:de:06:3d:c8:a9:7d:8e:54:60:6b:8d:
         97:8b:1d:f0:e6:40:02:57:bc:87:e2:d8:28:83:b6:a6:95:39:
         c2:af:2f:25:c7:09:1b:ba:bc:e3:98:f7:4b:8c:5e:6c:f1:ca:
         c8:a7:af:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----