Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/PBoRmZR82bat2m_weMdf_P991qI.roa
File:                     PBoRmZR82bat2m_weMdf_P991qI.roa (raw, json)
Hash identifier:          N+vFRvyy6k1x6ZNfjiIgn4caohisQkZ2qux4/f8aYPM=
Subject key identifier:   3C:1A:11:99:94:7C:D9:B6:AD:DA:6F:F0:78:C7:5F:FC:FF:7D:D6:A2
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       447D
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/PBoRmZR82bat2m_weMdf_P991qI.roa
Signing time:             Fri 11 Mar 2022 00:36:55 +0000
ROA not before:           Fri 11 Mar 2022 00:36:55 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        147.28.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17533 (0x447d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Mar 11 00:36:55 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=3C1A1199947CD9B6ADDA6FF078C75FFCFF7DD6A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e7:39:42:d2:c6:43:74:e9:5c:ad:ad:7e:8d:
                    80:7a:f0:90:ad:02:26:aa:1d:51:04:6f:d8:bb:cb:
                    20:f0:ca:92:7f:de:c6:e2:4f:29:64:59:c6:dd:2a:
                    4b:26:4e:05:d8:ec:52:f5:2c:ff:15:17:b5:b8:bd:
                    d6:1c:a7:84:08:08:21:4b:6a:fd:a2:c4:58:e8:e9:
                    1b:0d:b8:39:9c:14:30:04:24:17:67:55:ff:87:ef:
                    4b:ff:1c:c0:cb:5b:d6:2c:60:e9:9e:32:82:a5:d2:
                    f5:ed:fe:9e:3e:f7:67:a4:66:28:d3:93:6b:69:87:
                    c8:c0:05:ab:5c:fa:8c:17:52:d3:fb:dd:ed:56:cf:
                    6f:7e:db:e8:41:cd:43:e5:9e:b8:91:9c:2d:fb:14:
                    7f:a4:24:97:51:e6:7c:04:ff:a6:37:3f:5a:52:0a:
                    5b:7f:fb:b5:d7:1f:c1:36:49:ef:19:27:1b:28:2e:
                    5e:32:ec:6c:42:a7:88:99:c3:07:76:01:1d:b2:89:
                    08:a4:10:a1:74:09:56:c4:23:d2:bb:f8:1d:dc:bc:
                    56:08:33:bc:de:b2:dd:48:a6:4f:b6:5f:87:5a:91:
                    92:69:41:55:dd:df:f4:06:d3:ae:be:41:55:8e:03:
                    11:95:8d:4e:0a:81:d7:3f:c4:53:53:59:85:c2:41:
                    45:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:1A:11:99:94:7C:D9:B6:AD:DA:6F:F0:78:C7:5F:FC:FF:7D:D6:A2
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/PBoRmZR82bat2m_weMdf_P991qI.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:f6:0b:94:96:e7:ce:cd:ba:63:ef:35:11:bf:bc:72:fd:20:
         37:31:5f:4a:d5:77:65:d5:5a:69:05:aa:91:c9:3c:e2:6e:99:
         a9:20:5a:73:22:94:e1:5d:8c:55:c4:cf:33:24:d7:d3:93:69:
         ca:f7:9b:bd:88:d8:9c:c4:a5:37:0b:5f:22:3c:16:55:f4:2b:
         39:d6:17:45:7e:00:a4:f4:e1:16:1b:39:ae:39:36:ba:2c:66:
         c2:e1:4b:a5:1c:0c:8d:65:8d:97:36:17:cd:2b:2f:a2:16:b0:
         d2:26:d9:9a:bf:50:a9:e7:89:4b:de:74:67:6d:43:a4:d6:61:
         21:81:be:4b:22:24:1d:27:06:35:b5:80:19:5d:1e:d5:bc:b8:
         6f:75:94:29:f1:f6:b3:34:96:4b:0f:9f:3d:45:55:79:12:00:
         dc:90:f9:97:3c:66:37:69:9e:c6:27:d6:a1:35:88:aa:72:54:
         1c:7d:77:de:80:b6:ac:51:01:55:1e:0d:e5:15:8f:40:e5:e9:
         83:59:50:dc:17:30:c1:f7:b9:f6:50:5c:5d:f9:38:77:2d:8d:
         cf:c1:35:66:3b:e6:b7:7a:40:2a:c6:3b:dd:04:a1:ea:f9:3b:
         1e:2b:57:b7:d5:59:f4:ac:27:70:4e:13:7a:25:ed:69:6e:e3:
         ae:48:5e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----