Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/X3VZGX81zyJ3tcTd5lRWNlzultQ.roa
File:                     X3VZGX81zyJ3tcTd5lRWNlzultQ.roa (raw, json)
Hash identifier:          lPKOHwTjwXeHcqShZ8HnbEUo/bpjvXT6f84pBehP6TU=
Subject key identifier:   5F:75:59:19:7F:35:CF:22:77:B5:C4:DD:E6:54:56:36:5C:EE:96:D4
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4306
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/X3VZGX81zyJ3tcTd5lRWNlzultQ.roa
Signing time:             Sat 12 Feb 2022 00:30:05 +0000
ROA not before:           Sat 12 Feb 2022 00:30:05 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        147.28.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17158 (0x4306)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb 12 00:30:05 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=5F7559197F35CF2277B5C4DDE65456365CEE96D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0a:b9:e3:d8:76:e3:fb:c9:4a:56:f1:60:99:
                    93:ea:73:e7:19:62:21:3b:1f:a8:1e:00:d3:81:08:
                    3a:8e:a4:12:c1:5d:8b:d1:b7:b5:83:83:be:e6:3d:
                    1a:71:92:b1:79:91:a0:59:c9:e2:6f:c9:11:4a:1b:
                    75:b9:15:a6:e1:5c:70:5d:a7:f6:dd:6f:17:c3:91:
                    40:da:7b:88:9f:b6:2b:28:92:96:f7:54:7b:30:f3:
                    e6:09:52:b6:08:56:dd:81:07:a3:ed:14:c9:35:b8:
                    aa:6b:dc:4d:6d:96:2a:dd:04:0f:0f:60:af:8b:43:
                    0c:90:c1:ad:e3:7a:25:65:7f:f6:3e:3f:33:dd:e1:
                    20:31:73:77:3b:a3:39:6a:84:3d:ea:b2:ee:7b:29:
                    12:1b:44:20:9e:57:47:65:d3:a9:43:a8:e6:6b:b8:
                    63:34:6c:61:54:0d:11:d3:05:7e:3f:d0:0b:ce:53:
                    16:b5:d1:bf:6c:25:d6:7d:5a:b1:ca:b1:bd:6d:c7:
                    f4:f9:fe:a1:02:7d:9e:9c:06:0e:95:12:47:75:1e:
                    e5:93:9a:7d:81:db:d1:fa:f6:e3:6d:67:ef:f0:99:
                    c6:fb:4e:98:6b:72:3b:c2:a4:2b:cc:b6:b5:f7:82:
                    e8:5c:36:66:59:17:6a:5d:b9:9e:61:86:4f:df:79:
                    7e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:75:59:19:7F:35:CF:22:77:B5:C4:DD:E6:54:56:36:5C:EE:96:D4
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/X3VZGX81zyJ3tcTd5lRWNlzultQ.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:3c:9f:7e:33:ec:e7:a7:86:42:49:10:1b:03:71:3e:ed:18:
         fc:e4:18:bd:83:ee:d0:0e:ee:70:1a:91:4f:12:4e:b0:82:c5:
         cb:cd:e4:62:9d:b8:67:ec:b8:a5:f6:a7:aa:b9:b0:20:99:1b:
         da:11:11:8e:73:68:96:d8:cd:0b:4c:04:48:47:63:d8:17:d8:
         91:cf:f1:a1:93:47:82:d8:84:16:20:6f:de:0b:93:41:86:ab:
         e6:c2:60:22:12:76:0a:6c:65:c5:c3:5d:0f:81:ee:21:45:a3:
         94:18:7d:70:42:78:36:67:e5:c5:05:ac:4d:a2:0d:3d:79:d5:
         40:79:3a:63:61:37:b3:d5:31:d0:0c:fa:95:5e:ec:e7:40:33:
         83:96:c6:25:58:de:3d:88:e6:1f:08:fe:93:0f:97:96:e5:bc:
         22:6d:ff:50:62:b2:14:72:6f:8f:aa:c8:b2:e4:07:4b:41:d7:
         f9:e8:65:68:9e:80:8f:1f:f4:5c:6d:00:15:ff:2a:5e:3f:7f:
         fa:c2:fd:ab:4a:5d:96:61:3c:bd:33:da:48:2b:ee:2f:94:6e:
         97:23:7b:ab:1d:57:07:ff:78:f0:d5:0c:02:9b:ee:69:9d:8f:
         fb:f9:22:6b:e6:03:79:55:c5:a9:08:3a:df:dd:ef:99:96:cf:
         04:f3:d3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----