Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/Sobornost/yug2eY_8YCbd-uASSgw2g47_Wf4.roa
File:                     yug2eY_8YCbd-uASSgw2g47_Wf4.roa (raw, json)
Hash identifier:          U4OX4xBsS+aDOQu97OzI3cXcF82UOd5AH5eB8AyiMrg=
Subject key identifier:   CA:E8:36:79:8F:FC:60:26:DD:FA:E0:12:4A:0C:36:83:8E:FF:59:FE
Certificate issuer:       /CN=4be2706ac16dc810b08cbeb400e17382b2c25a64
Certificate serial:       D7
Authority key identifier: 4B:E2:70:6A:C1:6D:C8:10:B0:8C:BE:B4:00:E1:73:82:B2:C2:5A:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S-JwasFtyBCwjL60AOFzgrLCWmQ.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/Sobornost/yug2eY_8YCbd-uASSgw2g47_Wf4.roa
Signing time:             Thu 10 Dec 2020 10:38:07 +0000
ROA not before:           Thu 10 Dec 2020 10:38:07 +0000
ROA not after:            Thu 01 Jul 2021 00:00:00 +0000
asID:                     15562
IP address blocks:        2001:67c:208c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 215 (0xd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4be2706ac16dc810b08cbeb400e17382b2c25a64
        Validity
            Not Before: Dec 10 10:38:07 2020 GMT
            Not After : Jul  1 00:00:00 2021 GMT
        Subject: CN=CAE836798FFC6026DDFAE0124A0C36838EFF59FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5e:42:7d:e6:03:07:82:bf:7b:21:51:cd:e6:
                    d7:d1:9c:11:14:7a:99:b5:eb:91:66:a2:dd:ca:60:
                    da:bc:e2:17:77:26:14:5d:01:e9:8d:e2:82:ba:aa:
                    74:3a:94:17:ac:d1:16:41:51:1a:24:0c:3a:1a:cf:
                    83:9e:8f:9e:6b:da:04:f2:77:32:2a:2e:87:a6:6b:
                    ba:a2:98:07:73:0e:3c:5c:32:7a:78:05:f0:2d:92:
                    b2:6e:97:bd:be:90:28:53:13:12:f8:c1:9b:58:a2:
                    9b:59:eb:a8:de:83:15:ae:81:60:7e:e0:07:04:88:
                    22:d0:1b:9b:74:dc:27:32:5b:97:ed:0b:10:8d:2d:
                    c4:02:c1:ed:04:c7:7b:8f:d9:71:74:d2:87:12:db:
                    38:5d:12:ae:8d:cf:8a:b5:d4:92:de:db:ba:02:92:
                    cf:1e:2c:df:c8:b5:66:52:25:b7:23:63:4a:65:0b:
                    6d:64:45:f4:df:41:45:05:b9:61:eb:a6:67:04:25:
                    72:cb:40:86:82:33:db:ea:65:16:60:a1:d7:ce:64:
                    de:83:e8:65:2e:bc:70:60:d2:e0:15:e4:65:8a:ad:
                    80:57:fe:97:39:a5:ff:76:a0:51:d5:dd:28:94:f1:
                    9b:da:ec:f7:ec:d8:6c:f8:3d:55:c1:00:d3:f4:91:
                    99:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E8:36:79:8F:FC:60:26:DD:FA:E0:12:4A:0C:36:83:8E:FF:59:FE
            X509v3 Authority Key Identifier:
                keyid:4B:E2:70:6A:C1:6D:C8:10:B0:8C:BE:B4:00:E1:73:82:B2:C2:5A:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/Sobornost/S-JwasFtyBCwjL60AOFzgrLCWmQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-JwasFtyBCwjL60AOFzgrLCWmQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/Sobornost/yug2eY_8YCbd-uASSgw2g47_Wf4.roa
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:208c::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:bb:7a:63:1d:c0:df:3c:cd:53:28:5c:ce:f7:23:e5:5f:80:
         b4:89:9d:0e:b8:e9:b6:7f:db:e1:9b:d6:08:9e:ee:79:0e:31:
         9d:48:ef:3f:49:41:31:b8:c8:c5:8b:b3:86:7f:97:a5:72:9b:
         0a:a3:cc:09:7a:f1:82:e7:f2:12:29:35:8a:cf:52:2e:d0:78:
         37:71:17:1f:53:15:6c:e2:5d:19:8b:be:ae:e8:26:ae:34:13:
         76:3b:e8:eb:a1:ba:34:3f:c9:c6:af:fd:ff:fa:d2:31:e6:19:
         cb:73:47:69:e0:cc:57:00:ca:6d:21:70:60:ff:de:3f:a9:63:
         a3:55:52:db:bc:78:1a:86:df:ef:0b:fd:c0:2c:f0:48:64:f5:
         9e:70:bf:ee:e5:0a:28:95:51:d3:dd:07:1e:f1:74:26:48:6f:
         45:4b:2c:e4:24:af:07:36:88:aa:e5:11:bc:a9:96:c6:b1:d5:
         24:66:02:e8:22:00:39:61:06:17:b9:65:9c:4c:c9:97:24:6e:
         ce:46:b7:e9:6a:e1:00:37:9d:3f:f0:42:2c:d3:16:68:70:d3:
         d4:32:da:03:fe:d3:aa:80:8c:25:9a:f9:03:e1:68:f6:07:ac:
         ca:95:78:2e:bd:8a:c7:28:50:19:59:3c:dd:a5:f5:50:d8:86:
         b9:fa:c8:03
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgICANcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNGJl
MjcwNmFjMTZkYzgxMGIwOGNiZWI0MDBlMTczODJiMmMyNWE2NDAeFw0yMDEyMTAx
MDM4MDdaFw0yMTA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKENBRTgzNjc5OEZGQzYw
MjZEREZBRTAxMjRBMEMzNjgzOEVGRjU5RkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIXkJ95gMHgr97IVHN5tfRnBEUepm165Fmot3KYNq84hd3JhRd
AemN4oK6qnQ6lBes0RZBURokDDoaz4Oej55r2gTydzIqLoema7qimAdzDjxcMnp4
BfAtkrJul72+kChTExL4wZtYoptZ66jegxWugWB+4AcEiCLQG5t03CcyW5ftCxCN
LcQCwe0Ex3uP2XF00ocS2zhdEq6Nz4q11JLe27oCks8eLN/ItWZSJbcjY0plC21k
RfTfQUUFuWHrpmcEJXLLQIaCM9vqZRZgodfOZN6D6GUuvHBg0uAV5GWKrYBX/pc5
pf92oFHV3SiU8Zva7Pfs2Gz4PVXBANP0kZk7AgMBAAGjggH5MIIB9TAdBgNVHQ4E
FgQUyug2eY/8YCbd+uASSgw2g47/Wf4wHwYDVR0jBBgwFoAUS+JwasFtyBCwjL60
AOFzgrLCWmQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL2NobG9lLnNvYm9ybm9zdC5uZXQvcnBraS9Tb2Jvcm5vc3Qv
Uy1Kd2FzRnR5QkN3akw2MEFPRnpnckxDV21RLmNybDBkBggrBgEFBQcBAQRYMFYw
VAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RF
RkFVTFQvUy1Kd2FzRnR5QkN3akw2MEFPRnpnckxDV21RLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgaEGCCsGAQUFBwELBIGUMIGRMFYGCCsGAQUFBzALhkpyc3luYzovL2No
bG9lLnNvYm9ybm9zdC5uZXQvcnBraS9Tb2Jvcm5vc3QveXVnMmVZXzhZQ2JkLXVB
U1NndzJnNDdfV2Y0LnJvYTA3BggrBgEFBQcwDYYraHR0cHM6Ly9jaGxvZS5zb2Jv
cm5vc3QubmV0L3Jwa2kvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQC
AAIwCQMHACABBnwgjDANBgkqhkiG9w0BAQsFAAOCAQEAY7t6Yx3A3zzNUyhczvcj
5V+AtImdDrjptn/b4ZvWCJ7ueQ4xnUjvP0lBMbjIxYuzhn+XpXKbCqPMCXrxgufy
Eik1is9SLtB4N3EXH1MVbOJdGYu+rugmrjQTdjvo66G6ND/Jxq/9//rSMeYZy3NH
aeDMVwDKbSFwYP/eP6ljo1VS27x4Gobf7wv9wCzwSGT1nnC/7uUKKJVR090HHvF0
JkhvRUss5CSvBzaIquURvKmWxrHVJGYC6CIAOWEGF7llnEzJlyRuzka36WrhADed
P/BCLNMWaHDT1DLaA/7TqoCMJZr5A+Fo9gesypV4Lr2KxyhQGVk83aX1UNiGufrI
Aw==
-----END CERTIFICATE-----