Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/fpyqoRjexoRdOHBJtADHW-Ywv3c.roa
File:                     fpyqoRjexoRdOHBJtADHW-Ywv3c.roa (raw, json)
Hash identifier:          XAwfBm9Hxd8wLoMEgVmI4zsEoKEqQvfImn8D8Xrq3f8=
Subject key identifier:   7E:9C:AA:A1:18:DE:C6:84:5D:38:70:49:B4:00:C7:5B:E6:30:BF:77
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       477D
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/fpyqoRjexoRdOHBJtADHW-Ywv3c.roa
Signing time:             Thu 05 May 2022 00:30:07 +0000
ROA not before:           Thu 05 May 2022 00:30:07 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        147.28.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18301 (0x477d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: May  5 00:30:07 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=7E9CAAA118DEC6845D387049B400C75BE630BF77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1f:eb:af:de:59:ae:95:27:c2:76:ed:e7:63:
                    13:3f:fe:4f:2a:0e:37:34:45:1b:96:b6:63:ab:5b:
                    ff:37:25:5d:cd:66:b2:b4:7f:2a:a5:2f:68:f1:dc:
                    46:83:ff:f8:1e:c1:ca:e2:e2:21:a4:b2:96:19:6e:
                    46:7a:02:3a:40:b2:a2:f4:db:4e:de:f5:e3:35:5b:
                    ca:60:b7:47:0b:21:0b:d7:71:82:25:fc:ef:53:59:
                    26:bb:dd:0a:3a:16:4b:6d:bc:64:26:cd:f4:a6:c0:
                    c7:a7:25:78:ca:68:76:d2:ea:57:b1:60:92:86:35:
                    36:43:1a:db:aa:bd:90:84:73:fc:1e:14:c6:6b:5f:
                    6d:e4:2c:ec:ee:c9:93:9b:b5:94:55:55:47:ad:82:
                    24:40:cf:ca:19:3d:e8:f6:61:b2:9f:77:25:cc:ae:
                    8e:a5:fd:9a:e6:bc:a8:fd:c7:48:79:e4:25:70:5d:
                    66:5f:c1:74:1c:09:eb:7d:b4:bb:c6:ac:30:18:44:
                    4e:d1:1b:6e:bb:20:bb:ec:0a:b1:dc:4c:66:8d:3e:
                    92:6d:b9:62:95:93:83:b1:87:36:28:5d:0d:8c:25:
                    06:a5:66:f3:30:3c:00:b8:ba:ce:6e:de:ea:6f:c3:
                    6a:e2:c1:0a:24:e3:28:64:f6:3c:19:e1:2c:53:43:
                    e1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9C:AA:A1:18:DE:C6:84:5D:38:70:49:B4:00:C7:5B:E6:30:BF:77
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/fpyqoRjexoRdOHBJtADHW-Ywv3c.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:4d:73:e6:7d:16:d9:a8:e8:ad:23:83:bd:33:d3:35:0c:b6:
         4c:99:7e:ff:51:38:4c:41:15:59:73:9a:8b:37:d2:a9:d9:e3:
         5b:53:0a:b3:98:91:52:53:64:1d:21:73:7e:67:dd:bf:27:e8:
         1e:97:e5:11:d9:6a:fb:47:46:3d:26:aa:10:21:d1:a2:e1:1f:
         af:9d:1e:ea:5a:60:90:2c:b8:d7:82:f2:37:77:04:a2:b3:63:
         4a:6f:59:b8:48:cf:b8:11:4d:56:d1:0d:38:e3:da:94:69:d0:
         62:db:62:7b:ea:dc:1c:81:a2:45:db:db:47:b8:c8:64:0a:bd:
         9e:2d:bd:a8:fc:f4:c2:94:f0:73:dc:7d:2b:ce:f0:8a:02:47:
         b2:01:23:9d:fc:17:0c:de:a3:b0:ba:76:8c:20:11:37:76:7b:
         4d:aa:10:68:5a:8c:03:7e:9f:b6:25:81:7c:ee:14:41:56:91:
         61:2c:a0:16:e8:b0:91:d6:10:34:93:37:30:c4:d2:c2:13:0a:
         96:9b:0d:db:6f:35:ac:38:36:a0:30:e3:44:dd:99:b5:ba:75:
         72:18:4f:52:ca:bc:60:a2:7b:63:8e:35:ed:a4:af:c3:8d:39:
         a7:71:1a:48:b5:2d:ca:4c:26:41:55:54:28:38:6e:86:a5:cc:
         ac:f0:f1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----