Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/Sobornost/Hj2GC-dC6SjFX63oy3VEjxfA4lA.roa
File:                     Hj2GC-dC6SjFX63oy3VEjxfA4lA.roa (raw, json)
Hash identifier:          DmHpfXFPwpt2PPJ/WB8IbDLZuzLWRi/uTuwyWpk2ZJ8=
Subject key identifier:   1E:3D:86:0B:E7:42:E9:28:C5:5F:AD:E8:CB:75:44:8F:17:C0:E2:50
Certificate issuer:       /CN=4be2706ac16dc810b08cbeb400e17382b2c25a64
Certificate serial:       32
Authority key identifier: 4B:E2:70:6A:C1:6D:C8:10:B0:8C:BE:B4:00:E1:73:82:B2:C2:5A:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S-JwasFtyBCwjL60AOFzgrLCWmQ.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/Sobornost/Hj2GC-dC6SjFX63oy3VEjxfA4lA.roa
Signing time:             Mon 07 Dec 2020 15:19:49 +0000
ROA not before:           Mon 07 Dec 2020 15:19:49 +0000
ROA not after:            Thu 01 Jul 2021 00:00:00 +0000
asID:                     15562
IP address blocks:        2001:67c:208c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4be2706ac16dc810b08cbeb400e17382b2c25a64
        Validity
            Not Before: Dec  7 15:19:49 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=1E3D860BE742E928C55FADE8CB75448F17C0E250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:11:ba:9b:a6:43:a7:e3:09:20:62:0f:fa:d3:
                    dc:36:9e:f8:19:fa:ca:87:c9:ec:ff:e4:7e:9b:4b:
                    11:8f:fd:57:44:8a:b3:14:5b:0e:e3:ca:32:57:9d:
                    ea:ba:b9:a7:6f:ab:6e:b7:84:d0:61:30:f1:a4:08:
                    68:4f:a3:f7:d4:e9:2e:95:ec:a5:61:d1:20:62:9e:
                    1b:ab:73:a1:d4:96:98:e2:c5:cb:6d:b7:8c:d9:26:
                    7b:77:99:bf:9c:19:52:2a:0f:70:9a:76:d1:45:b6:
                    40:c9:84:88:85:5b:75:24:68:2b:25:cd:83:a9:c9:
                    84:21:11:17:5f:4c:ee:72:2f:8c:a9:20:57:0b:75:
                    5e:35:e6:aa:78:1c:b4:e6:79:3a:4b:56:0f:65:bb:
                    72:f7:76:67:31:85:e3:ab:ea:ee:f8:54:c9:f9:81:
                    6c:8b:34:8c:f1:e2:8c:bd:c1:1d:d5:c7:bd:6b:74:
                    b5:73:58:70:96:c5:a4:3c:bc:66:d8:ab:a7:53:f9:
                    27:9e:0b:cd:8e:cc:4b:78:00:9a:c9:2b:f0:5c:9d:
                    b4:75:53:40:ea:4b:81:0a:f0:d4:29:fe:fa:a1:71:
                    63:22:b4:e4:55:9b:4d:c9:80:06:b8:06:98:4d:ec:
                    a1:7e:90:5a:b8:9e:10:f1:49:54:69:e4:9e:2f:d7:
                    98:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:3D:86:0B:E7:42:E9:28:C5:5F:AD:E8:CB:75:44:8F:17:C0:E2:50
            X509v3 Authority Key Identifier:
                keyid:4B:E2:70:6A:C1:6D:C8:10:B0:8C:BE:B4:00:E1:73:82:B2:C2:5A:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/Sobornost/S-JwasFtyBCwjL60AOFzgrLCWmQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-JwasFtyBCwjL60AOFzgrLCWmQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/Sobornost/Hj2GC-dC6SjFX63oy3VEjxfA4lA.roa
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:208c::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:28:42:ce:c8:58:47:ca:88:e1:c2:2d:52:41:0a:93:20:c3:
         f1:d7:46:02:8e:8f:7e:26:18:47:de:11:3a:9f:4c:cd:1f:34:
         79:fa:05:5c:e7:ce:76:7e:13:44:d4:3c:75:d7:9c:d7:38:bf:
         b5:26:26:1d:d0:61:92:a4:d7:dc:1c:c0:1d:94:d1:63:3a:29:
         eb:54:e0:aa:9b:06:d9:bc:03:d9:e6:2b:44:08:f4:bd:e4:b1:
         f8:b2:66:ec:04:e6:a5:08:5d:10:14:59:43:0e:70:6b:0a:51:
         f4:d2:59:41:5d:48:01:42:67:7e:12:6b:3f:62:2c:c7:78:6c:
         75:70:1e:e7:f3:27:08:b5:87:80:04:aa:3c:b4:e7:77:aa:83:
         b1:a0:6b:ab:61:22:c7:7d:3d:5c:f8:65:c1:b9:55:8b:34:10:
         03:38:7e:8a:fc:45:fa:3d:ca:da:42:18:34:b9:27:98:b6:c3:
         70:bc:5e:76:90:5c:4a:04:af:1a:91:9f:c8:fc:93:e0:eb:3e:
         05:5b:70:f4:f8:01:41:68:58:f2:a3:06:c8:92:b3:c6:ec:c9:
         bc:72:ab:e6:41:32:98:e2:3c:95:d7:05:a7:60:f6:4d:1d:b7:
         25:a4:c7:bb:0c:fd:b5:62:14:ec:1f:d7:6a:66:c0:1e:17:66:
         cc:0c:f0:38
-----BEGIN CERTIFICATE-----
MIIE3DCCA8SgAwIBAgIBMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0YmUy
NzA2YWMxNmRjODEwYjA4Y2JlYjQwMGUxNzM4MmIyYzI1YTY0MB4XDTIwMTIwNzE1
MTk0OVoXDTIxMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMUUzRDg2MEJFNzQyRTky
OEM1NUZBREU4Q0I3NTQ0OEYxN0MwRTI1MDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALARupumQ6fjCSBiD/rT3Dae+Bn6yofJ7P/kfptLEY/9V0SKsxRb
DuPKMled6rq5p2+rbreE0GEw8aQIaE+j99TpLpXspWHRIGKeG6tzodSWmOLFy223
jNkme3eZv5wZUioPcJp20UW2QMmEiIVbdSRoKyXNg6nJhCERF19M7nIvjKkgVwt1
XjXmqngctOZ5OktWD2W7cvd2ZzGF46vq7vhUyfmBbIs0jPHijL3BHdXHvWt0tXNY
cJbFpDy8Ztirp1P5J54LzY7MS3gAmskr8FydtHVTQOpLgQrw1Cn++qFxYyK05FWb
TcmABrgGmE3soX6QWrieEPFJVGnkni/XmAsCAwEAAaOCAfkwggH1MB0GA1UdDgQW
BBQePYYL50LpKMVfrejLdUSPF8DiUDAfBgNVHSMEGDAWgBRL4nBqwW3IELCMvrQA
4XOCssJaZDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGA1UdHwRUMFIwUKBO
oEyGSnJzeW5jOi8vY2hsb2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1NvYm9ybm9zdC9T
LUp3YXNGdHlCQ3dqTDYwQU9GemdyTENXbVEuY3JsMGQGCCsGAQUFBwEBBFgwVjBU
BggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVG
QVVMVC9TLUp3YXNGdHlCQ3dqTDYwQU9GemdyTENXbVEuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBoQYIKwYBBQUHAQsEgZQwgZEwVgYIKwYBBQUHMAuGSnJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1NvYm9ybm9zdC9IajJHQy1kQzZTakZYNjNv
eTNWRWp4ZkE0bEEucm9hMDcGCCsGAQUFBzANhitodHRwczovL2NobG9lLnNvYm9y
bm9zdC5uZXQvcnBraS9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAIAEGfCCMMA0GCSqGSIb3DQEBCwUAA4IBAQCtKELOyFhHyojhwi1SQQqT
IMPx10YCjo9+JhhH3hE6n0zNHzR5+gVc5852fhNE1Dx115zXOL+1JiYd0GGSpNfc
HMAdlNFjOinrVOCqmwbZvAPZ5itECPS95LH4smbsBOalCF0QFFlDDnBrClH00llB
XUgBQmd+Ems/YizHeGx1cB7n8ycItYeABKo8tOd3qoOxoGurYSLHfT1c+GXBuVWL
NBADOH6K/EX6PcraQhg0uSeYtsNwvF52kFxKBK8akZ/I/JPg6z4FW3D0+AFBaFjy
owbIkrPG7Mm8cqvmQTKY4jyV1wWnYPZNHbclpMe7DP21YhTsH9dqZsAeF2bMDPA4
-----END CERTIFICATE-----