Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/jJXt9GEY3y2ClxwXI3A621vzH_s.roa
File:                     jJXt9GEY3y2ClxwXI3A621vzH_s.roa (raw, json)
Hash identifier:          QyEywA6y8qV0FPvvxI+CocrY0UyqUtG3beRz6haTh60=
Subject key identifier:   8C:95:ED:F4:61:18:DF:2D:82:97:1C:17:23:70:3A:DB:5B:F3:1F:FB
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4309
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/jJXt9GEY3y2ClxwXI3A621vzH_s.roa
Signing time:             Sat 12 Feb 2022 00:30:06 +0000
ROA not before:           Sat 12 Feb 2022 00:30:06 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        147.28.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17161 (0x4309)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb 12 00:30:06 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=8C95EDF46118DF2D82971C1723703ADB5BF31FFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:b4:5a:aa:3c:59:df:17:2f:87:3f:06:49:
                    5d:09:58:79:ba:0b:e7:8d:43:77:23:50:13:c1:d1:
                    f9:5d:e7:39:09:fa:e0:30:0d:80:f3:6f:2d:31:d7:
                    c3:8d:5a:b1:10:7c:a1:0f:d5:32:19:07:e0:93:57:
                    4b:d5:7a:63:84:8f:35:a9:c1:58:cd:da:e5:a6:c2:
                    14:74:8f:1e:6c:46:bc:1a:b9:8b:65:fc:33:40:06:
                    9a:69:cb:f9:ed:c6:cb:74:5c:d6:7e:c5:4b:98:5e:
                    94:17:1c:87:00:99:6a:85:49:17:9c:2b:aa:50:47:
                    f1:70:3c:27:ce:ff:9e:88:a4:1e:4d:97:a8:39:36:
                    81:ae:05:48:25:c4:f8:bc:34:f6:24:b4:ef:4c:a6:
                    3c:73:af:af:85:b8:ad:24:0a:32:0f:ca:c2:2a:f9:
                    aa:18:7f:3e:5d:d0:20:2f:c1:8f:9c:b6:6e:56:2a:
                    9a:cb:17:b1:6d:41:f5:af:be:d2:65:c8:ef:6d:fc:
                    68:c7:1f:76:e7:66:2a:79:2e:44:a8:8c:c8:96:7f:
                    ba:91:96:85:4c:01:55:2a:1c:9b:06:8d:a4:86:33:
                    8f:0e:50:c8:fa:01:98:49:48:55:41:59:4d:87:fe:
                    4e:ac:31:3c:9b:b7:7d:f0:ba:97:bc:ad:08:9e:2d:
                    bb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:95:ED:F4:61:18:DF:2D:82:97:1C:17:23:70:3A:DB:5B:F3:1F:FB
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/jJXt9GEY3y2ClxwXI3A621vzH_s.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:14:e3:4e:01:6c:d8:42:fd:60:e8:43:02:e0:ff:f5:cd:12:
         b9:dd:68:fe:ee:55:35:e5:26:da:7a:45:11:1d:d4:b9:b7:53:
         b3:22:87:0c:97:77:dd:11:9e:0c:82:7c:b5:5e:e1:03:88:74:
         10:4c:a3:28:1c:33:ff:91:40:07:9a:55:80:ad:fb:0d:4a:c9:
         ec:db:2b:b3:01:14:d4:d0:e5:9c:45:f3:4a:a1:c4:26:29:82:
         ee:c6:9e:34:88:2b:0c:6b:7f:12:3f:79:92:61:2b:ac:96:b4:
         d4:d7:0f:f3:14:1d:a0:47:46:6c:28:f5:d1:18:57:b7:55:13:
         ab:4b:71:b4:6f:44:eb:ab:02:c2:9e:da:16:c4:ad:da:75:64:
         26:e8:a9:a3:c7:67:7b:0c:c3:cb:63:be:16:bf:2b:00:3f:cd:
         33:c0:d4:b5:3b:7e:72:7c:f6:ca:e2:3c:d4:39:53:46:b1:54:
         2c:83:59:0a:49:80:ca:87:67:d3:64:e7:57:2e:fd:de:a3:98:
         d5:d2:9e:4d:1c:17:a6:5b:55:3a:1e:e5:3e:58:64:a2:55:b8:
         7c:63:a3:fa:5f:6b:95:89:06:c0:46:22:47:d7:87:77:11:8c:
         f0:48:9e:93:9c:37:78:85:d7:78:68:6e:44:c2:83:f3:a3:d4:
         c4:9d:64:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----