Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/JBBPvy-S_duzdrtr9FT0mW4mNdg.roa
File:                     JBBPvy-S_duzdrtr9FT0mW4mNdg.roa (raw, json)
Hash identifier:          ceBgHoewGNMfFATpH8aP57eqIpWcHpjo3oZndufZItU=
Subject key identifier:   24:10:4F:BF:2F:92:FD:DB:B3:76:BB:6B:F4:54:F4:99:6E:26:35:D8
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       480E
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/JBBPvy-S_duzdrtr9FT0mW4mNdg.roa
Signing time:             Sun 15 May 2022 00:30:08 +0000
ROA not before:           Sun 15 May 2022 00:30:08 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        45.132.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18446 (0x480e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: May 15 00:30:08 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=24104FBF2F92FDDBB376BB6BF454F4996E2635D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5c:82:4e:2d:17:40:d3:65:c5:41:75:35:78:
                    6f:81:24:56:8b:6e:be:69:f1:72:98:0f:f6:61:c1:
                    8a:b4:2c:8a:72:37:a6:05:6c:23:d4:06:5e:b0:95:
                    fe:9e:f5:05:87:a2:41:33:80:95:6a:71:b9:84:5d:
                    b1:af:7c:ec:9d:3e:ab:48:cb:59:80:43:66:93:a3:
                    07:9f:aa:33:47:ff:b8:96:c9:7a:4d:11:45:83:c6:
                    bd:14:2e:58:6a:ee:5b:91:c7:38:8f:f1:02:0c:1a:
                    70:d7:d8:d8:4d:09:f6:3b:d1:52:2d:ce:16:70:6b:
                    de:d6:33:88:04:ff:c5:38:27:1c:bf:60:6e:1b:14:
                    6a:b2:19:94:54:cf:40:49:28:4c:9d:70:78:f6:c8:
                    b3:77:62:6a:6e:73:ab:5f:91:54:45:d1:c9:99:a4:
                    5f:a8:55:46:e3:4f:e6:0e:23:59:3b:b1:54:17:d4:
                    cb:e4:58:40:1a:ac:15:3e:ef:ec:59:9c:6f:3b:9a:
                    18:50:47:e1:f5:1e:39:c2:5b:d3:11:d8:ec:e1:d9:
                    47:28:bd:14:e1:9c:02:50:bc:3e:b4:c9:51:a7:08:
                    42:ae:dd:d0:34:52:e7:84:67:30:ee:05:1c:a5:31:
                    25:a8:2d:2f:ee:63:08:c6:5f:da:dc:3c:dd:c7:d9:
                    69:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:10:4F:BF:2F:92:FD:DB:B3:76:BB:6B:F4:54:F4:99:6E:26:35:D8
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/JBBPvy-S_duzdrtr9FT0mW4mNdg.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:cf:8c:7c:61:59:47:3a:81:d6:21:6a:33:25:c1:37:0c:e0:
         2e:22:d3:ba:c2:cc:62:20:86:54:ca:82:60:6a:bd:48:ac:a2:
         82:f0:0b:14:9a:e5:f4:25:22:3b:fb:37:dd:b3:82:da:bc:27:
         3a:01:22:81:58:0a:86:d4:ad:67:41:18:92:b9:57:d0:82:c1:
         58:e6:3a:fe:25:38:6b:3f:4c:47:33:a9:18:56:e0:01:06:7b:
         e2:57:9d:b7:5f:fb:61:2d:d1:33:07:5f:83:10:fc:c3:7f:f7:
         ab:45:2d:ae:14:11:66:39:20:12:89:f9:ea:44:ad:cb:24:ba:
         8b:8b:d2:08:66:ff:b2:0a:68:57:b6:da:ab:df:ac:56:d7:55:
         a6:7e:6a:d7:ac:ca:71:16:37:17:d5:4b:ca:4a:58:0b:bd:cd:
         94:e7:3f:70:f3:99:b9:73:f9:7e:17:66:49:5d:9c:aa:bb:f0:
         ba:fa:44:df:b7:56:e7:a1:6b:7e:83:7e:98:1b:bd:9e:51:64:
         fd:56:bf:82:0a:1b:1d:9a:07:46:dc:33:44:70:fc:0c:ea:81:
         56:e6:81:33:d6:ce:8d:d4:c1:cb:e7:75:fc:fc:7c:7c:a0:11:
         77:10:bd:c5:db:f9:db:02:13:aa:b7:29:ab:fb:65:d2:b1:6c:
         b2:cd:a4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org