Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/Sobornost/Z-rglogoCEF0Pi2WuDNUmQEnnGo.roa
File:                     Z-rglogoCEF0Pi2WuDNUmQEnnGo.roa (raw, json)
Hash identifier:          TIcubsVBfaADJSFLneXscxVUL4LvgR6IxzTMCx8WZ4A=
Subject key identifier:   67:EA:E0:96:88:28:08:41:74:3E:2D:96:B8:33:54:99:01:27:9C:6A
Certificate issuer:       /CN=4be2706ac16dc810b08cbeb400e17382b2c25a64
Certificate serial:       69
Authority key identifier: 4B:E2:70:6A:C1:6D:C8:10:B0:8C:BE:B4:00:E1:73:82:B2:C2:5A:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S-JwasFtyBCwjL60AOFzgrLCWmQ.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/Sobornost/Z-rglogoCEF0Pi2WuDNUmQEnnGo.roa
Signing time:             Tue 08 Dec 2020 13:00:42 +0000
ROA not before:           Tue 08 Dec 2020 13:00:42 +0000
ROA not after:            Thu 01 Jul 2021 00:00:00 +0000
asID:                     15562
IP address blocks:        2001:67c:208c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4be2706ac16dc810b08cbeb400e17382b2c25a64
        Validity
            Not Before: Dec  8 13:00:42 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=67EAE09688280841743E2D96B833549901279C6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4a:b6:0a:09:ac:03:b5:8f:78:41:9d:a6:34:
                    8e:50:e1:d9:c0:09:8f:51:5f:b7:33:68:11:26:d4:
                    3c:66:af:e8:db:49:4c:fc:38:1c:33:77:9e:92:88:
                    e6:86:c4:81:63:b3:66:d5:18:8e:d6:a6:f5:38:cf:
                    94:91:ec:1f:22:d8:04:50:fc:85:30:4b:e5:4d:ed:
                    a0:8a:9f:c9:11:de:f4:e2:cc:91:b8:7a:cb:35:57:
                    18:c5:6c:05:ee:44:99:b5:7b:39:93:0d:06:dc:74:
                    a1:46:37:be:8b:b8:cf:03:fd:34:05:52:c1:eb:25:
                    23:40:bb:33:59:50:49:7d:e7:5b:79:2b:54:ab:33:
                    e2:52:89:d6:9e:8d:0a:74:d0:5b:bb:0a:0f:17:cd:
                    d3:c0:6c:25:8e:10:14:26:78:1c:9d:5c:ce:c7:d3:
                    1f:eb:5b:81:94:8f:64:fc:9b:fc:36:6f:02:6b:cf:
                    50:46:a5:69:7c:82:7b:71:53:14:6a:04:70:be:4a:
                    66:84:84:04:79:2a:a4:e5:27:b5:75:42:c3:47:40:
                    ab:73:59:ab:d3:99:d8:22:08:b9:29:90:b9:dc:0f:
                    86:cc:2f:ab:e1:77:30:25:e9:6c:54:81:93:68:b9:
                    66:f8:ff:e7:80:f5:e1:1b:83:ff:3f:45:a3:03:9c:
                    52:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:EA:E0:96:88:28:08:41:74:3E:2D:96:B8:33:54:99:01:27:9C:6A
            X509v3 Authority Key Identifier:
                keyid:4B:E2:70:6A:C1:6D:C8:10:B0:8C:BE:B4:00:E1:73:82:B2:C2:5A:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/Sobornost/S-JwasFtyBCwjL60AOFzgrLCWmQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-JwasFtyBCwjL60AOFzgrLCWmQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/Sobornost/Z-rglogoCEF0Pi2WuDNUmQEnnGo.roa
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:208c::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:24:48:84:d6:46:d4:7b:9e:7c:c8:ce:81:02:72:90:4f:df:
         c6:d0:0e:0a:64:55:78:bb:c6:51:bc:e7:b6:e7:1f:52:cd:b2:
         3b:12:d9:0f:4f:35:39:d5:24:0b:91:f4:2e:0f:e4:0a:c5:d4:
         9c:11:57:68:4a:57:88:8e:92:59:20:50:84:9c:5b:41:68:0e:
         20:e3:a2:be:3d:9c:59:04:04:b0:5f:d7:11:62:0d:d8:83:54:
         d1:1e:bc:7a:eb:4d:e0:ae:b4:83:1f:5e:c0:c7:c1:a7:ce:26:
         7a:90:e6:90:b9:5d:89:90:00:a7:a9:94:e4:2b:70:34:05:78:
         b8:f7:02:48:c0:04:df:71:e1:c8:1c:82:b5:d5:0f:da:e6:4c:
         fd:c6:f2:2f:83:30:7f:8d:d3:36:23:ba:2c:cf:f4:19:fe:c9:
         17:40:a9:88:88:f9:19:43:58:9d:48:62:56:23:41:81:2c:44:
         cf:7b:fd:64:3a:19:af:ff:49:b9:7a:74:88:21:63:41:10:d8:
         28:16:b5:1a:92:75:02:03:05:29:93:5d:07:5b:f1:aa:17:08:
         a6:21:43:b1:e0:9a:c7:84:ea:86:b0:6b:30:68:bf:b1:8f:be:
         36:02:d9:f4:64:9c:cd:76:e1:86:8b:f1:61:dd:77:a1:8e:bc:
         03:f1:13:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----