Just a thought, but if the lookup gave you back a certificate, you'd get a public key and a set of attributes all certified by an authority.
Then the choice of whether to trust the data becomes a matter of delegated trust, which we basically understand.
