Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/Sobornost/G6nkgfDHdwkcYNsIsv4-FP0sg90.roa
File:                     G6nkgfDHdwkcYNsIsv4-FP0sg90.roa (raw, json)
Hash identifier:          nbwCZduvrY6c5jzCeN5lGOXnsXEtbguqMDpTgXkJyQM=
Subject key identifier:   1B:A9:E4:81:F0:C7:77:09:1C:60:DB:08:B2:FE:3E:14:FD:2C:83:DD
Certificate issuer:       /CN=1ABE80AE3501D812469E1EFEB187D241711AFCF2
Certificate serial:       019A
Authority key identifier: 1A:BE:80:AE:35:01:D8:12:46:9E:1E:FE:B1:87:D2:41:71:1A:FC:F2
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/Gr6ArjUB2BJGnh7-sYfSQXEa_PI.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/Sobornost/G6nkgfDHdwkcYNsIsv4-FP0sg90.roa
Signing time:             Fri 25 Dec 2020 22:52:53 +0000
ROA not before:           Fri 25 Dec 2020 22:52:53 +0000
ROA not after:            Sat 11 Dec 2021 18:09:13 +0000
asID:                     15562
IP address blocks:        147.28.48.0/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410 (0x19a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ABE80AE3501D812469E1EFEB187D241711AFCF2
        Validity
            Not Before: Dec 25 22:52:53 2020 GMT
            Not After : Dec 11 18:09:13 2021 GMT
        Subject: CN=1BA9E481F0C777091C60DB08B2FE3E14FD2C83DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cc:d7:eb:cf:99:ee:db:79:e8:e4:41:5c:66:
                    ae:d7:89:ae:d1:c6:05:b0:14:9b:96:4e:63:11:8f:
                    6e:82:57:0b:3d:77:ec:77:e0:4c:6a:4c:c6:42:c0:
                    05:5e:20:41:ef:01:c9:57:f5:ae:4f:5d:a1:be:51:
                    38:56:ef:b6:90:b1:c6:ab:09:cc:33:9c:6c:3d:6c:
                    88:5c:21:f3:fb:6a:c9:02:2a:72:e8:ee:d1:2d:cf:
                    af:dc:b7:be:69:f1:a3:ee:ea:f9:f3:9a:38:70:2a:
                    b9:e9:b3:e2:f2:73:06:88:ec:e7:89:5c:fd:f0:c3:
                    09:73:f9:58:7f:41:f5:41:cf:e2:63:f4:94:d0:85:
                    8b:ca:7f:91:9b:30:ed:57:6d:c5:ba:c6:89:ca:9d:
                    a5:70:79:0a:2a:59:89:94:21:7b:2c:3c:92:15:b1:
                    a6:87:d2:20:65:e1:a9:49:c9:e4:b4:01:85:7e:73:
                    28:ec:bd:6d:49:fb:a1:cb:44:22:4e:d6:c9:4a:29:
                    2d:02:a0:b9:8f:a9:f1:e6:dc:98:f5:9f:1c:22:50:
                    05:de:60:a6:6c:d7:9e:4b:85:b5:36:71:23:e3:f4:
                    e5:91:f8:4a:e1:c2:0d:c4:6f:d0:e5:31:75:56:6f:
                    1c:73:33:84:6a:f2:67:94:06:85:36:2a:f3:2a:f4:
                    a1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A9:E4:81:F0:C7:77:09:1C:60:DB:08:B2:FE:3E:14:FD:2C:83:DD
            X509v3 Authority Key Identifier:
                keyid:1A:BE:80:AE:35:01:D8:12:46:9E:1E:FE:B1:87:D2:41:71:1A:FC:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/Sobornost/Gr6ArjUB2BJGnh7-sYfSQXEa_PI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/Gr6ArjUB2BJGnh7-sYfSQXEa_PI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/Sobornost/G6nkgfDHdwkcYNsIsv4-FP0sg90.roa
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/news.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.48.0/32

    Signature Algorithm: sha256WithRSAEncryption
         12:99:11:d3:c8:89:61:97:4a:ad:2c:93:08:be:1d:31:ac:32:
         0c:03:df:71:38:0c:b9:af:8b:c8:7d:d7:8a:b5:fe:21:9e:11:
         3e:72:41:23:f5:fd:00:0b:bb:69:96:52:c6:ff:83:9e:3d:db:
         04:a3:c4:14:2e:11:17:68:15:3c:20:d6:fd:ab:b1:72:10:cb:
         af:1f:d7:cd:73:73:b4:18:16:89:d0:5c:1d:df:6e:93:8a:f0:
         df:07:ac:36:13:38:3f:6b:e5:cb:5d:65:06:ba:cc:f2:ed:6c:
         67:6a:7c:6f:b9:bd:fb:d7:22:fa:cc:bd:86:7b:40:ef:27:fc:
         c7:2a:77:d3:7f:15:12:03:a8:de:bb:9b:d5:3a:74:7a:a4:88:
         79:b1:7e:6f:b9:d8:ac:e7:f1:d8:e8:59:ff:18:54:08:ae:2e:
         d6:eb:f3:78:16:26:b6:54:5a:a9:89:d8:36:19:7b:eb:d1:c5:
         ba:91:55:97:5d:6a:fb:08:5c:42:5b:98:e7:d9:3e:62:3c:25:
         b6:6e:8a:54:90:f8:3b:a1:31:79:80:52:15:33:83:59:de:e7:
         63:c7:ba:43:75:b4:c7:7d:9b:31:62:34:95:df:56:80:40:5c:
         07:50:29:ed:76:ee:b2:ec:0a:96:fb:85:92:fc:c9:22:b1:75:
         dc:46:70:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----