Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/i1_ZH0-SoJb47V1Min6RMEibg_M.roa
File:                     i1_ZH0-SoJb47V1Min6RMEibg_M.roa (raw, json)
Hash identifier:          xldtTpNuLJRV7ANa+5TWCK5ksULfJXCAtT4ZmUyIu54=
Subject key identifier:   8B:5F:D9:1F:4F:92:A0:96:F8:ED:5D:4C:8A:7E:91:30:48:9B:83:F3
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4746
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/i1_ZH0-SoJb47V1Min6RMEibg_M.roa
Signing time:             Sun 01 May 2022 00:30:07 +0000
ROA not before:           Sun 01 May 2022 00:30:07 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        45.132.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18246 (0x4746)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: May  1 00:30:07 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=8B5FD91F4F92A096F8ED5D4C8A7E9130489B83F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:77:ac:0d:1b:2d:48:f6:8b:72:4b:cf:85:2a:
                    c1:0d:f0:15:94:34:99:01:95:01:b1:fc:38:03:91:
                    68:f9:f7:33:d3:ea:e9:a9:91:55:03:b4:24:39:55:
                    b7:55:03:83:3a:7c:ed:ed:64:36:b1:da:ae:9f:89:
                    21:f8:4e:81:8b:00:6f:f3:a5:42:88:96:b2:ce:c0:
                    2f:b6:44:90:45:98:07:62:2e:fe:b0:c3:74:41:a9:
                    71:1a:23:4c:f5:f7:aa:6c:f6:78:00:4d:cb:a8:1f:
                    49:25:9f:48:cc:aa:d4:b9:b2:40:bf:ce:b3:8e:df:
                    df:73:c5:3f:cb:b8:5a:18:78:35:d8:af:25:79:29:
                    ea:15:a9:46:b3:2c:ed:94:be:f1:17:ee:ed:e4:12:
                    d1:f6:74:2e:76:4f:01:22:94:59:75:d4:67:56:3a:
                    a0:71:a4:00:52:6a:d4:da:98:55:a7:ed:a0:5f:1d:
                    95:1f:04:8a:c8:61:62:c1:be:d9:de:fc:08:aa:72:
                    15:62:b5:bc:58:cf:44:01:5b:99:81:7c:d3:d9:88:
                    74:c7:f2:a7:ff:11:d3:56:68:0f:4b:6f:26:81:40:
                    d1:fc:f3:fe:22:43:be:66:08:04:be:14:be:3f:c1:
                    2d:a6:fa:00:f7:69:85:7d:4a:39:26:d9:94:4d:66:
                    c5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:5F:D9:1F:4F:92:A0:96:F8:ED:5D:4C:8A:7E:91:30:48:9B:83:F3
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/i1_ZH0-SoJb47V1Min6RMEibg_M.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:7d:72:83:e7:af:4a:89:53:de:d7:61:9a:d6:46:3b:b7:ff:
         73:ff:ad:10:7b:1b:15:b9:c2:e9:ad:4b:9f:6b:20:47:b3:1c:
         cb:e8:8d:09:5a:77:99:e1:a0:75:50:39:a2:c2:c3:be:e7:bf:
         64:8f:e0:9f:81:03:3f:60:97:9e:d7:d5:df:31:ae:61:19:6b:
         da:11:0c:74:8f:0f:46:69:f4:ff:39:45:75:b8:dd:0a:e9:65:
         ac:7f:e1:eb:13:0c:b9:eb:de:b6:39:ea:1c:95:6b:cf:c2:23:
         74:07:10:67:23:0b:9e:16:52:8b:1a:9a:a2:db:64:ba:94:7d:
         61:62:e1:37:8a:35:38:29:a6:90:1b:76:d7:67:9d:f1:b7:bf:
         fc:f0:67:3b:b2:44:ff:e9:66:d3:ec:08:5a:68:84:b7:27:47:
         fa:98:4c:4a:6c:70:6c:08:c0:d4:61:a7:0e:64:42:83:ec:11:
         54:9a:81:75:e1:2d:7f:5b:97:b9:88:cf:7c:ba:38:a3:b3:e5:
         ee:2c:15:f4:cf:91:b2:7a:fa:9c:7f:5f:11:ca:c8:89:b1:b4:
         04:f7:78:cc:66:e2:f6:66:f4:69:82:10:f5:22:67:0e:a3:fa:
         1a:e4:a0:7d:6f:34:62:ee:e9:82:6d:cf:7f:9d:21:1b:34:7a:
         d5:7e:7f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----