Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/Sobornost/NcYRN_dQvAlHwo8pFpzP4HOgEv4.roa
File:                     NcYRN_dQvAlHwo8pFpzP4HOgEv4.roa (raw, json)
Hash identifier:          q71Hof2KyEUddChh8/yj5Upd/IMffSrLOApWci7a1fI=
Subject key identifier:   35:C6:11:37:F7:50:BC:09:47:C2:8F:29:16:9C:CF:E0:73:A0:12:FE
Certificate issuer:       /CN=4be2706ac16dc810b08cbeb400e17382b2c25a64
Certificate serial:       10
Authority key identifier: 4B:E2:70:6A:C1:6D:C8:10:B0:8C:BE:B4:00:E1:73:82:B2:C2:5A:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S-JwasFtyBCwjL60AOFzgrLCWmQ.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/Sobornost/NcYRN_dQvAlHwo8pFpzP4HOgEv4.roa
Signing time:             Mon 07 Dec 2020 11:42:28 +0000
ROA not before:           Mon 07 Dec 2020 11:42:28 +0000
ROA not after:            Thu 01 Jul 2021 00:00:00 +0000
asID:                     15562
IP address blocks:        2001:67c:208c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4be2706ac16dc810b08cbeb400e17382b2c25a64
        Validity
            Not Before: Dec  7 11:42:28 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=35C61137F750BC0947C28F29169CCFE073A012FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fd:fc:9a:73:6c:22:53:e8:e6:c4:3b:02:96:
                    61:68:c4:38:f9:aa:f1:56:55:d3:4e:28:44:d3:db:
                    86:e5:69:bd:96:08:ee:ea:b1:01:65:f4:8a:9a:1e:
                    5b:83:c6:42:c7:50:b4:b9:e3:fd:04:52:84:69:0f:
                    d5:cc:af:3e:b1:ca:f7:31:25:ae:b5:f8:34:f4:12:
                    80:5d:d4:b1:09:dd:2a:87:18:72:59:d8:3d:36:90:
                    62:d1:9a:5c:86:ce:65:d0:d4:19:06:95:e4:6e:ca:
                    2f:1a:71:a0:c6:cd:fe:a0:4a:10:f9:53:2a:78:9b:
                    16:9d:58:1f:96:e1:b4:1e:f9:50:60:1a:f2:86:da:
                    57:25:37:04:1a:a2:58:ee:c8:f6:63:8a:a0:c0:4f:
                    6d:3a:f3:b0:bb:90:28:c3:dc:70:ac:0d:c7:0e:73:
                    ea:03:61:b5:cb:a9:28:22:34:20:e5:98:e0:2b:43:
                    ae:02:38:f3:b8:c9:cd:4e:ce:cc:8e:56:8b:c4:b3:
                    95:a1:24:15:34:02:d0:c3:a4:9d:3d:d4:2c:cd:8a:
                    08:2e:16:5d:5d:ec:55:c3:71:5e:cb:cd:ba:ea:8b:
                    8f:4b:32:cc:c9:68:e9:5c:94:29:09:23:07:9c:78:
                    46:c9:22:cb:c2:87:b9:e6:1f:5a:cf:66:1e:af:56:
                    29:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C6:11:37:F7:50:BC:09:47:C2:8F:29:16:9C:CF:E0:73:A0:12:FE
            X509v3 Authority Key Identifier:
                keyid:4B:E2:70:6A:C1:6D:C8:10:B0:8C:BE:B4:00:E1:73:82:B2:C2:5A:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/Sobornost/S-JwasFtyBCwjL60AOFzgrLCWmQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-JwasFtyBCwjL60AOFzgrLCWmQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/Sobornost/NcYRN_dQvAlHwo8pFpzP4HOgEv4.roa
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:208c::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:b5:da:02:b7:7c:77:e7:62:dd:eb:5c:e7:cf:9b:5c:95:5e:
         ef:01:fe:83:ac:62:ca:b6:3a:10:64:04:9f:e5:ae:d8:f2:5b:
         42:60:a2:26:cf:1d:ef:9d:95:9a:9a:a2:63:f7:5e:f4:e4:50:
         78:c6:bd:9f:28:b8:47:1c:dd:8a:00:93:7d:71:05:5e:56:6a:
         c1:b4:20:8d:64:db:3c:d4:92:9b:90:e6:36:80:95:92:66:5f:
         ac:17:dd:3c:25:db:ab:47:ce:e3:61:a4:eb:6b:52:5c:5e:03:
         43:33:46:0a:14:f9:4b:b6:2c:36:ec:b6:55:3d:ba:8a:b5:f4:
         5c:cb:e2:da:76:76:42:5d:0d:4d:4c:f9:b1:9b:83:9b:07:fd:
         fc:c3:28:64:7a:ef:6a:76:64:fc:05:a7:8a:7d:0a:4f:d8:68:
         cf:4d:6f:58:3c:f8:81:0b:b1:e9:77:06:84:e7:58:33:42:07:
         70:39:aa:48:a5:37:cc:61:20:6f:92:30:53:4a:f6:e3:75:0c:
         ee:47:04:d4:88:2e:a8:b3:77:92:16:9d:3f:41:3e:96:a7:b3:
         2a:d7:3a:6c:7f:6a:98:7f:ab:16:89:2f:04:33:61:4d:fa:03:
         b1:da:25:0f:af:b7:87:34:6a:b9:f2:cf:f4:f0:d8:98:52:c1:
         da:0b:f0:30
-----BEGIN CERTIFICATE-----
MIIE3DCCA8SgAwIBAgIBEDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0YmUy
NzA2YWMxNmRjODEwYjA4Y2JlYjQwMGUxNzM4MmIyYzI1YTY0MB4XDTIwMTIwNzEx
NDIyOFoXDTIxMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzVDNjExMzdGNzUwQkMw
OTQ3QzI4RjI5MTY5Q0NGRTA3M0EwMTJGRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALz9/JpzbCJT6ObEOwKWYWjEOPmq8VZV004oRNPbhuVpvZYI7uqx
AWX0ipoeW4PGQsdQtLnj/QRShGkP1cyvPrHK9zElrrX4NPQSgF3UsQndKocYclnY
PTaQYtGaXIbOZdDUGQaV5G7KLxpxoMbN/qBKEPlTKnibFp1YH5bhtB75UGAa8oba
VyU3BBqiWO7I9mOKoMBPbTrzsLuQKMPccKwNxw5z6gNhtcupKCI0IOWY4CtDrgI4
87jJzU7OzI5Wi8SzlaEkFTQC0MOknT3ULM2KCC4WXV3sVcNxXsvNuuqLj0syzMlo
6VyUKQkjB5x4Rskiy8KHueYfWs9mHq9WKU8CAwEAAaOCAfkwggH1MB0GA1UdDgQW
BBQ1xhE391C8CUfCjykWnM/gc6AS/jAfBgNVHSMEGDAWgBRL4nBqwW3IELCMvrQA
4XOCssJaZDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGA1UdHwRUMFIwUKBO
oEyGSnJzeW5jOi8vY2hsb2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1NvYm9ybm9zdC9T
LUp3YXNGdHlCQ3dqTDYwQU9GemdyTENXbVEuY3JsMGQGCCsGAQUFBwEBBFgwVjBU
BggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVG
QVVMVC9TLUp3YXNGdHlCQ3dqTDYwQU9GemdyTENXbVEuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBoQYIKwYBBQUHAQsEgZQwgZEwVgYIKwYBBQUHMAuGSnJzeW5jOi8vY2hs
b2Uuc29ib3Jub3N0Lm5ldC9ycGtpL1NvYm9ybm9zdC9OY1lSTl9kUXZBbEh3bzhw
RnB6UDRIT2dFdjQucm9hMDcGCCsGAQUFBzANhitodHRwczovL2NobG9lLnNvYm9y
bm9zdC5uZXQvcnBraS9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAIAEGfCCMMA0GCSqGSIb3DQEBCwUAA4IBAQBttdoCt3x352Ld61znz5tc
lV7vAf6DrGLKtjoQZASf5a7Y8ltCYKImzx3vnZWamqJj91705FB4xr2fKLhHHN2K
AJN9cQVeVmrBtCCNZNs81JKbkOY2gJWSZl+sF908JdurR87jYaTra1JcXgNDM0YK
FPlLtiw27LZVPbqKtfRcy+LadnZCXQ1NTPmxm4ObB/38wyhkeu9qdmT8BaeKfQpP
2GjPTW9YPPiBC7HpdwaE51gzQgdwOapIpTfMYSBvkjBTSvbjdQzuRwTUiC6os3eS
Fp0/QT6Wp7Mq1zpsf2qYf6sWiS8EM2FN+gOx2iUPr7eHNGq58s/08NiYUsHaC/Aw
-----END CERTIFICATE-----