Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/6nv2Lzx9MwmEm1Rh7M9ATTaAM9g.roa
File:                     6nv2Lzx9MwmEm1Rh7M9ATTaAM9g.roa (raw, json)
Hash identifier:          xNizs/cPsxTH9GsU85s2uU9pV+4OCCNOr6ILf3TYpbc=
Subject key identifier:   EA:7B:F6:2F:3C:7D:33:09:84:9B:54:61:EC:CF:40:4D:36:80:33:D8
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       45F8
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/6nv2Lzx9MwmEm1Rh7M9ATTaAM9g.roa
Signing time:             Thu 07 Apr 2022 00:30:09 +0000
ROA not before:           Thu 07 Apr 2022 00:30:09 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        147.28.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17912 (0x45f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Apr  7 00:30:09 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=EA7BF62F3C7D3309849B5461ECCF404D368033D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:7d:d9:7a:b8:fd:f0:c1:76:40:a6:0d:b5:b5:
                    6b:75:c2:fb:24:f4:43:86:a1:a0:0a:9a:cb:0b:bc:
                    a2:ef:16:58:4a:3a:ad:f2:97:19:36:69:bf:ef:3a:
                    40:e8:12:bd:c6:0b:2c:ae:39:02:ec:e4:c9:b8:f9:
                    c2:5a:3a:69:e5:c1:2f:64:3e:5e:df:a4:a1:5c:fa:
                    7f:5a:91:aa:ab:6b:bc:86:ee:58:2f:e5:a9:37:9e:
                    14:3b:f7:8d:5b:dd:cb:77:52:ea:3b:75:e6:08:12:
                    f6:72:d8:1b:f3:81:93:e9:06:36:a7:8a:5c:be:37:
                    ce:8f:06:32:5d:42:d0:68:24:d9:85:6c:82:b8:0a:
                    cf:3b:73:b2:3a:77:f6:59:03:13:e3:01:14:0a:45:
                    4f:21:59:e8:56:5c:4e:0c:8e:e8:f4:d0:0f:26:a6:
                    b0:8f:a1:a7:90:f4:9c:36:73:74:34:f9:c7:f9:d6:
                    e2:30:71:c6:3d:e7:be:22:eb:07:8e:0e:57:7b:b9:
                    0b:5d:1f:1a:b1:09:28:e8:2d:6b:bb:c9:54:f5:91:
                    5d:0c:d5:38:ed:90:8b:9e:81:ce:5e:52:77:bb:59:
                    62:0f:e0:bb:c3:c4:b9:03:0e:7d:6d:c8:ec:48:80:
                    12:ad:c3:68:df:ce:49:38:b4:c2:cc:3c:0a:c3:8b:
                    ef:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7B:F6:2F:3C:7D:33:09:84:9B:54:61:EC:CF:40:4D:36:80:33:D8
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/6nv2Lzx9MwmEm1Rh7M9ATTaAM9g.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:f1:02:4b:7f:c7:ea:d5:03:67:b4:51:f6:d6:19:e5:ef:50:
         9e:57:8b:4a:8e:06:52:43:78:b3:ac:43:fd:c3:49:d6:05:da:
         e4:76:6d:18:ca:ea:3a:ca:6a:d2:ee:02:af:6d:dc:72:cd:f5:
         09:75:27:52:01:68:57:c6:96:ae:af:66:11:1a:8b:1e:09:6e:
         27:33:1d:da:20:bf:d9:3f:2d:82:4c:2c:cb:73:be:f7:29:46:
         4e:77:c8:3f:ee:52:d5:c6:55:98:61:dc:6e:4d:1c:92:c7:71:
         54:7b:90:d8:91:64:1c:3b:c1:c8:26:58:df:fe:12:2e:58:87:
         a8:1c:33:60:be:aa:d3:f7:25:62:24:69:2a:92:53:fd:b3:ee:
         57:64:be:d3:cd:d0:76:d9:7a:d3:c4:87:27:cb:4c:35:a0:4b:
         88:86:f2:d0:e7:9f:5c:72:37:32:04:74:b2:bc:2f:66:47:90:
         3e:b6:3a:b1:17:94:02:af:78:57:ec:7b:a2:fd:67:d1:a2:6a:
         80:7f:a8:bc:78:cf:70:5a:5b:84:78:b4:b0:8f:4a:24:2b:62:
         fa:6d:a8:a2:d5:61:33:27:fd:d4:cc:8c:75:d2:98:c0:27:2c:
         ce:1c:1b:f6:86:21:0c:4b:63:e7:d4:ef:3e:95:db:92:62:1b:
         57:aa:81:27
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICRfgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA0MDcw
MDMwMDlaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKEVBN0JGNjJGM0M3RDMz
MDk4NDlCNTQ2MUVDQ0Y0MDREMzY4MDMzRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD3fdl6uP3wwXZApg21tWt1wvsk9EOGoaAKmssLvKLvFlhKOq3y
lxk2ab/vOkDoEr3GCyyuOQLs5Mm4+cJaOmnlwS9kPl7fpKFc+n9akaqra7yG7lgv
5ak3nhQ7941b3ct3Uuo7deYIEvZy2BvzgZPpBjanily+N86PBjJdQtBoJNmFbIK4
Cs87c7I6d/ZZAxPjARQKRU8hWehWXE4Mjuj00A8mprCPoaeQ9Jw2c3Q0+cf51uIw
ccY9574i6weODld7uQtdHxqxCSjoLWu7yVT1kV0M1TjtkIuegc5eUne7WWIP4LvD
xLkDDn1tyOxIgBKtw2jfzkk4tMLMPArDi+8VAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU6nv2Lzx9MwmEm1Rh7M9ATTaAM9gwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS82bnYyTHp4OU13bUVtMVJoN005QVRUYUFNOWcucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTHA0wDQYJKoZIhvcNAQELBQADggEB
AGrxAkt/x+rVA2e0UfbWGeXvUJ5Xi0qOBlJDeLOsQ/3DSdYF2uR2bRjK6jrKatLu
Aq9t3HLN9Ql1J1IBaFfGlq6vZhEaix4JbiczHdogv9k/LYJMLMtzvvcpRk53yD/u
UtXGVZhh3G5NHJLHcVR7kNiRZBw7wcgmWN/+Ei5Yh6gcM2C+qtP3JWIkaSqSU/2z
7ldkvtPN0HbZetPEhyfLTDWgS4iG8tDnn1xyNzIEdLK8L2ZHkD62OrEXlAKveFfs
e6L9Z9GiaoB/qLx4z3BaW4R4tLCPSiQrYvptqKLVYTMn/dTMjHXSmMAnLM4cG/aG
IQxLY+fU7z6V25JiG1eqgSc=
-----END CERTIFICATE-----