Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/HsVRT1MY3UXrLwXa4YZr-RagLjw.roa
File:                     HsVRT1MY3UXrLwXa4YZr-RagLjw.roa (raw, json)
Hash identifier:          DMBF8DKa05c/4YD3wO850dfgT7i5PSnqSdb9bwt6dKU=
Subject key identifier:   1E:C5:51:4F:53:18:DD:45:EB:2F:05:DA:E1:86:6B:F9:16:A0:2E:3C
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       428E
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/HsVRT1MY3UXrLwXa4YZr-RagLjw.roa
Signing time:             Thu 03 Feb 2022 00:30:09 +0000
ROA not before:           Thu 03 Feb 2022 00:30:09 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        45.132.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17038 (0x428e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb  3 00:30:09 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=1EC5514F5318DD45EB2F05DAE1866BF916A02E3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d8:aa:80:20:b6:f5:6f:c3:a9:a9:0f:03:ee:
                    76:f2:4e:d4:e3:80:12:02:13:e6:44:2c:31:90:19:
                    80:27:fc:f6:97:7e:9e:70:97:32:2a:6d:a8:c6:1b:
                    9f:fb:28:8b:f4:91:21:44:f8:2e:05:8b:6e:0c:4b:
                    9f:6b:b6:12:e0:ae:80:1f:d6:50:5b:89:ea:fb:c5:
                    92:79:b4:85:71:b4:be:ff:b0:08:e5:7f:a5:9c:3b:
                    b8:b9:c2:cf:56:7b:42:5d:a0:7c:29:d4:d9:b4:2d:
                    c2:c5:a4:f3:d1:76:5d:b3:23:db:03:71:d4:ea:de:
                    54:04:eb:26:83:f2:47:01:61:a2:79:1e:31:43:ec:
                    76:a3:b4:e2:9a:2b:fe:3a:66:fc:1c:b6:2a:90:38:
                    70:fc:1f:b3:7e:62:c6:81:58:ee:88:87:be:a5:16:
                    95:dd:8f:b2:fa:28:ec:e4:fc:61:bc:9d:0e:26:7e:
                    e8:a5:cd:88:fd:6e:ef:08:72:eb:5b:97:da:92:7e:
                    a7:d3:48:8c:6f:4b:c7:45:b1:e8:04:72:dc:1d:57:
                    02:25:2c:5f:6b:4b:6f:51:3b:b1:5d:db:2d:94:c0:
                    8d:6f:d7:ca:b4:22:3d:1e:43:00:95:d9:d7:e2:12:
                    33:f5:c7:e1:df:b5:91:c2:3d:0c:d9:d7:73:6b:d3:
                    ad:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C5:51:4F:53:18:DD:45:EB:2F:05:DA:E1:86:6B:F9:16:A0:2E:3C
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/HsVRT1MY3UXrLwXa4YZr-RagLjw.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:c9:9f:ec:05:aa:b6:5d:39:fe:42:7a:26:2f:5c:0e:9d:a6:
         c5:5f:a2:77:73:11:2f:1c:6a:ef:ff:a9:97:a4:57:4e:35:53:
         1c:e9:05:82:5a:c3:10:36:d4:1f:55:bf:32:ed:e1:3a:88:34:
         fe:a6:05:db:63:28:a2:a0:52:e9:fc:53:8f:7a:b0:4a:3e:17:
         48:6e:06:78:02:ee:0a:b8:5d:44:50:f6:de:05:dd:f6:4a:8d:
         d1:89:19:e0:7c:52:f8:81:38:72:22:48:54:c7:b2:11:8a:29:
         d6:13:74:21:d0:40:47:53:24:44:66:cd:ff:1b:f2:1e:a3:e4:
         7f:74:9d:c5:06:75:b8:26:93:12:b6:93:cd:93:f0:26:81:28:
         99:cc:b2:f2:b8:21:ed:fe:69:32:12:c1:50:1e:a0:b0:96:ff:
         bb:8a:f4:89:67:5a:b1:62:b1:5c:9e:fa:1b:7c:56:9c:3c:df:
         5d:cd:cb:bb:61:c4:f9:65:ce:b8:c0:b3:f4:de:ae:e4:03:e6:
         5e:c0:e6:d5:e4:78:1c:d1:57:c7:e3:3c:17:fb:55:8a:c3:e0:
         8c:65:64:24:69:65:b0:5b:23:85:97:70:c6:1d:d5:e4:8c:69:
         2c:7f:d2:d8:47:73:69:e2:de:69:2d:25:c3:ee:b3:77:d5:d8:
         aa:1f:45:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----