Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/TS0PF1Sp2VJdISspfeSG--R7uLY.roa
File:                     TS0PF1Sp2VJdISspfeSG--R7uLY.roa (raw, json)
Hash identifier:          wDXy9EXtB7q9plVn19IKAMjLa8lWTwz+qT0Mypw3Dtc=
Subject key identifier:   4D:2D:0F:17:54:A9:D9:52:5D:21:2B:29:7D:E4:86:FB:E4:7B:B8:B6
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       47D2
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/TS0PF1Sp2VJdISspfeSG--R7uLY.roa
Signing time:             Wed 11 May 2022 00:30:11 +0000
ROA not before:           Wed 11 May 2022 00:30:11 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        45.132.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18386 (0x47d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: May 11 00:30:11 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=4D2D0F1754A9D9525D212B297DE486FBE47BB8B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4f:69:a3:9c:92:06:c9:cb:e3:08:08:a8:4b:
                    d4:01:e9:3a:69:fd:95:8c:ee:3a:90:96:75:68:7a:
                    8e:cd:4d:14:ad:45:d6:c6:36:a8:9a:4c:16:58:5f:
                    31:d4:28:76:89:99:f1:3c:99:9b:22:3b:53:ae:ab:
                    a3:09:d3:46:bf:1a:ea:9e:f8:91:a2:93:01:65:44:
                    29:59:d6:65:c5:95:3b:ae:56:79:aa:f0:b7:c6:03:
                    18:4b:1c:de:53:82:4e:a2:5b:7c:aa:ac:57:ff:6b:
                    60:37:28:9d:9f:a2:10:69:e5:b4:19:24:ec:90:2d:
                    a5:e0:ea:45:2d:9c:3c:fa:3b:df:58:b8:6a:61:5d:
                    2d:a8:83:69:df:1c:7b:18:f1:a2:d4:82:b8:7f:a9:
                    40:fc:cd:4c:5e:d7:fa:bf:5b:60:02:be:8e:43:8e:
                    a4:ea:b2:a6:46:61:13:95:67:7c:48:37:b3:61:44:
                    47:96:04:ec:95:5e:c1:65:e0:09:f9:32:42:12:19:
                    3b:56:de:6c:92:f8:f2:01:ee:4f:51:55:23:e1:0e:
                    83:7b:d8:31:44:09:69:82:0d:68:7b:e1:ee:a2:66:
                    2a:e9:24:84:56:ea:97:24:cd:d0:f9:bb:21:f0:66:
                    3c:75:3f:ff:74:c3:d5:69:ff:56:04:47:07:c7:6b:
                    ad:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2D:0F:17:54:A9:D9:52:5D:21:2B:29:7D:E4:86:FB:E4:7B:B8:B6
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/TS0PF1Sp2VJdISspfeSG--R7uLY.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:1a:3e:5d:f0:b1:e5:9b:c5:7b:77:83:de:26:45:3a:1e:ed:
         be:b2:30:80:ad:4a:2e:d8:6e:fd:cb:10:7d:13:14:14:ff:c9:
         37:28:71:76:bf:9c:d4:b6:46:6c:59:8c:5c:cd:43:c8:8a:46:
         df:c4:5b:c4:f2:ab:02:7c:13:7f:97:65:1b:df:ba:00:74:f2:
         6e:9e:de:1b:20:04:89:f7:76:0e:94:bd:7e:74:21:79:23:5a:
         4f:eb:28:0a:2b:5a:14:ce:22:27:1c:d2:43:49:cb:f5:41:50:
         88:ed:18:b9:f5:02:8f:25:70:ba:dd:d4:d1:d3:c8:d2:33:81:
         7a:b1:ed:a4:d6:a8:61:94:a8:66:b0:3d:f4:54:9f:d1:ab:30:
         a6:58:a4:47:e6:72:a0:9a:58:3f:68:d7:1c:60:1d:bb:77:db:
         13:19:d7:66:be:7a:e0:6b:2b:0e:c8:44:b4:cf:a7:2a:9c:09:
         70:7d:96:01:f2:c6:36:a7:4e:5d:ae:34:44:dc:57:e7:e8:30:
         b4:6e:f0:5c:b0:f7:af:fb:e9:e3:a9:c6:ad:c7:7a:a3:fa:07:
         6e:5f:57:30:f8:99:c8:f5:fa:92:da:d5:14:d3:8e:82:1a:78:
         44:80:2e:eb:95:45:5a:ac:58:d5:39:28:4e:28:d1:88:78:01:
         bd:64:43:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----