Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/Sobornost/Sobornost-OP/nZ2WvO2X9Ntu75qEmTYe-EQhmlI.roa
File:                     nZ2WvO2X9Ntu75qEmTYe-EQhmlI.roa (raw, json)
Hash identifier:          drih3E2i65et5vH+2vo/k0CPBj00Dr0SdE6xLGb08Pc=
Subject key identifier:   9D:9D:96:BC:ED:97:F4:DB:6E:EF:9A:84:99:36:1E:F8:44:21:9A:52
Certificate issuer:       /CN=B6A4CA79360F31160847D5001F799787C78827CA
Certificate serial:       03
Authority key identifier: B6:A4:CA:79:36:0F:31:16:08:47:D5:00:1F:79:97:87:C7:88:27:CA
Authority info access:    rsync://chloe.sobornost.net/rpki/Sobornost/tqTKeTYPMRYIR9UAH3mXh8eIJ8o.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/Sobornost/Sobornost-OP/nZ2WvO2X9Ntu75qEmTYe-EQhmlI.roa
Signing time:             Mon 28 Dec 2020 18:15:06 +0000
ROA not before:           Mon 28 Dec 2020 18:15:06 +0000
ROA not after:            Tue 28 Dec 2021 18:02:40 +0000
asID:                     15562
IP address blocks:        147.28.48.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6A4CA79360F31160847D5001F799787C78827CA
        Validity
            Not Before: Dec 28 18:15:06 2020 GMT
            Not After : Dec 28 18:02:40 2021 GMT
        Subject: CN=9D9D96BCED97F4DB6EEF9A8499361EF844219A52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:52:83:ad:0f:f8:d4:f9:e4:15:1a:2a:8f:3a:
                    20:de:3c:50:d3:41:dd:fa:5c:d8:f4:c9:c4:b6:4b:
                    10:6c:53:13:5c:0f:22:7d:eb:c4:6f:19:bd:1a:23:
                    01:ef:dd:da:bb:14:c2:ee:0c:71:37:c7:47:34:1a:
                    a9:1b:67:77:70:c3:ee:5c:36:0d:6b:b6:f9:78:02:
                    a2:b4:63:3f:76:4a:4b:64:7c:1d:f5:ca:0c:a9:56:
                    5e:52:8b:22:b5:e7:5e:77:2c:8c:71:f8:56:a3:22:
                    66:43:78:06:7f:26:4c:b3:7f:b0:eb:80:85:c1:7f:
                    00:68:ad:4f:e2:54:c7:75:9c:87:8c:2c:ec:d1:f2:
                    cb:1c:7f:2d:10:fd:99:0d:ca:99:a6:e8:a6:0c:2f:
                    38:f7:4d:cb:85:a1:f2:52:93:2c:11:33:65:f9:1a:
                    6a:96:07:2b:95:62:21:2e:5c:91:a6:cc:4c:87:b5:
                    58:ea:ba:05:c2:ec:ec:4a:7c:35:36:5d:0d:5c:dc:
                    03:36:3f:b6:84:4f:fd:d0:57:84:4a:78:af:69:45:
                    08:7b:d9:a1:87:4e:c5:02:bf:51:24:bb:3c:da:e8:
                    b0:ee:18:e3:4a:8f:48:c0:20:1d:66:ff:c6:01:25:
                    96:b4:f0:05:4e:43:4e:a4:f3:1f:3e:87:25:85:fd:
                    b4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:9D:96:BC:ED:97:F4:DB:6E:EF:9A:84:99:36:1E:F8:44:21:9A:52
            X509v3 Authority Key Identifier:
                keyid:B6:A4:CA:79:36:0F:31:16:08:47:D5:00:1F:79:97:87:C7:88:27:CA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/Sobornost/Sobornost-OP/tqTKeTYPMRYIR9UAH3mXh8eIJ8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://chloe.sobornost.net/rpki/Sobornost/tqTKeTYPMRYIR9UAH3mXh8eIJ8o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/Sobornost/Sobornost-OP/nZ2WvO2X9Ntu75qEmTYe-EQhmlI.roa
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/news.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b7:ad:7d:57:21:93:11:de:1d:9e:1a:c5:c7:90:a2:17:ed:3b:
         92:fa:87:42:b7:37:a6:cc:42:9c:0a:e0:43:f0:27:75:c0:05:
         34:74:2f:6d:11:6c:3a:42:e1:76:7c:6d:89:12:f1:d1:f7:df:
         a2:de:ac:fd:6c:7e:a6:89:18:cb:58:54:97:06:e4:cd:7e:0c:
         02:8c:3d:24:47:74:47:ea:a5:74:04:68:7a:51:a3:11:65:67:
         2c:b8:b5:16:30:fc:18:02:2f:f5:d4:db:14:f2:13:35:96:53:
         19:56:c2:f0:4d:7a:38:ba:58:72:29:a0:e1:e2:2c:6f:a3:f0:
         69:b6:d1:4a:97:a8:d5:5d:28:df:fa:ae:c3:32:38:20:5f:4a:
         dc:45:f6:4a:3a:45:78:8c:a4:66:4b:ff:68:cb:e2:2d:c6:cc:
         f6:e8:ec:8e:1c:7b:e5:1c:27:07:d7:f6:f5:26:c1:83:2e:1b:
         4e:e9:4b:13:c7:b9:6a:7a:84:db:93:19:ba:43:66:8c:de:fa:
         4e:ec:c3:1b:4c:bd:66:d0:0c:15:e6:4f:90:af:e9:30:7e:e6:
         44:54:0d:53:b0:3e:ab:ff:26:e3:b8:c4:79:50:74:d5:c3:87:
         c0:34:64:20:dc:c0:d7:da:1d:1a:f2:23:eb:31:21:d0:f1:9e:
         e8:fe:37:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----