Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/4OFkussbDhO-MoPVbVoK0CL43q8.roa
File:                     4OFkussbDhO-MoPVbVoK0CL43q8.roa (raw, json)
Hash identifier:          llL+447PGDeF6swZ3HWUSsRWxRyg3KDJjy1SphqeL0c=
Subject key identifier:   E0:E1:64:BA:CB:1B:0E:13:BE:32:83:D5:6D:5A:0A:D0:22:F8:DE:AF
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       435F
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/4OFkussbDhO-MoPVbVoK0CL43q8.roa
Signing time:             Fri 18 Feb 2022 00:30:09 +0000
ROA not before:           Fri 18 Feb 2022 00:30:09 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        45.132.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17247 (0x435f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb 18 00:30:09 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=E0E164BACB1B0E13BE3283D56D5A0AD022F8DEAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e3:6c:ba:74:a3:f4:cf:61:6e:2a:de:a9:ff:
                    91:af:5a:a8:e9:43:71:a5:29:29:2d:b9:ab:15:1e:
                    06:5e:f4:6c:63:85:62:0c:84:03:be:06:f1:31:6d:
                    03:cc:51:fa:62:8d:38:c2:e2:4e:1e:fb:d5:fb:e7:
                    9a:e8:62:fb:77:10:51:5d:42:ea:b2:ac:38:6b:4a:
                    bc:7f:2c:75:c5:42:af:29:a8:44:6a:3b:a5:8f:8b:
                    cb:1e:b1:c2:01:48:24:e4:41:a1:37:f4:9a:39:eb:
                    8d:60:73:81:e1:a3:da:63:2b:1c:36:39:0d:81:f2:
                    0c:44:9c:59:fe:a3:5e:f3:69:0b:b7:ae:85:5f:8f:
                    06:fd:3b:2f:20:02:10:2b:1d:13:ca:de:38:bb:f0:
                    7e:aa:f1:bf:06:61:58:23:17:fc:65:b3:11:8c:4f:
                    d7:01:16:3e:74:c3:c8:44:1c:00:aa:1a:01:aa:a0:
                    cd:08:bf:0d:5e:0c:d5:34:26:88:62:9d:62:1b:ea:
                    5d:35:9b:52:1d:2b:61:71:8b:0a:95:a6:71:fd:c6:
                    2b:a6:5b:5b:fa:49:82:0a:a4:fa:63:f1:fa:0c:7e:
                    89:0c:43:63:61:5d:ac:45:31:18:94:2f:40:1f:60:
                    18:88:d3:72:c5:2f:70:1c:26:3e:f6:42:e0:ba:f6:
                    13:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E1:64:BA:CB:1B:0E:13:BE:32:83:D5:6D:5A:0A:D0:22:F8:DE:AF
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/4OFkussbDhO-MoPVbVoK0CL43q8.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:d4:4a:e8:50:9d:6d:96:13:9a:0d:39:1a:ae:c4:9c:1b:9c:
         90:8c:03:0e:89:ed:9d:aa:c5:4b:d5:21:c6:cd:ea:ee:30:09:
         38:96:59:9b:8a:ac:04:4f:f5:01:11:40:c9:d4:38:71:f6:b4:
         0e:e9:92:bc:e1:c9:74:70:f6:ab:99:bb:e9:df:90:40:a3:07:
         c7:62:a9:82:a6:4e:bb:1d:76:1f:bb:3e:6e:62:c4:14:77:1c:
         24:e4:fc:59:2b:34:8a:11:6c:fe:d8:c7:74:c0:c3:1f:86:de:
         4e:c1:7f:a0:fe:f7:92:61:7c:55:f6:b9:2c:a1:6b:49:2d:ce:
         3b:22:b7:af:c2:a3:db:03:d6:38:d4:5b:2c:42:21:b6:41:73:
         0d:d5:7e:a8:23:5b:69:ab:da:89:cb:b9:aa:86:54:d8:56:28:
         1b:a6:99:aa:5c:c8:38:e8:36:ab:1f:0f:de:98:66:cc:90:94:
         05:d3:a2:5b:b8:21:32:03:2d:bb:02:14:25:a4:d9:a4:10:ad:
         21:7a:99:c9:3f:11:14:ae:1a:0b:63:10:f0:84:e0:4d:19:cb:
         7d:f0:2f:ba:bd:a9:6c:ce:1f:52:be:c5:e3:0a:bb:ad:0f:ca:
         d5:0a:0a:19:b5:03:dd:ac:91:16:a1:0a:f0:5b:ef:26:a9:c5:
         43:75:69:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----