Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/nqm66t1J7z3esULQVF91NnW680A.roa
File:                     nqm66t1J7z3esULQVF91NnW680A.roa (raw, json)
Hash identifier:          KYNgPUH/Q6W6irIU5IvuQdgn1iBlcBssUM8JulNl824=
Subject key identifier:   9E:A9:BA:EA:DD:49:EF:3D:DE:B1:42:D0:54:5F:75:36:75:BA:F3:40
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       42C1
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/nqm66t1J7z3esULQVF91NnW680A.roa
Signing time:             Mon 07 Feb 2022 00:30:06 +0000
ROA not before:           Mon 07 Feb 2022 00:30:06 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        147.28.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17089 (0x42c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb  7 00:30:06 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=9EA9BAEADD49EF3DDEB142D0545F753675BAF340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9a:d1:1b:74:f5:98:2c:2e:23:85:e4:1c:2e:
                    84:dc:9b:2e:d2:72:ad:2b:fe:7a:dd:6f:39:90:c5:
                    b9:ff:20:57:59:f1:bb:5e:6b:10:e3:ca:c8:b6:15:
                    37:f8:a9:5e:74:77:d0:c2:a4:01:a8:02:8c:23:0c:
                    57:fb:18:0b:1f:c0:43:bd:3c:36:3b:ff:a2:a3:75:
                    03:f9:b5:bd:ca:fd:d2:2d:5c:bd:da:f7:2a:66:52:
                    a3:dc:94:05:66:cf:5b:97:97:6a:25:a7:29:f6:4c:
                    9c:37:97:ad:c6:46:c0:fc:e9:ee:f5:d3:27:4e:63:
                    a3:01:b1:f4:17:eb:8f:0e:3b:9d:5d:44:2e:bb:f5:
                    fa:a1:ed:30:80:c6:44:bc:70:88:d6:17:3e:86:68:
                    ab:c6:3c:8d:99:3c:c5:53:56:ed:c3:76:b5:b2:c4:
                    77:9e:d7:37:20:03:7f:1c:8d:9a:71:39:82:a8:f4:
                    49:a4:77:46:1f:83:2d:88:c3:31:de:98:fb:c1:3c:
                    15:b4:9b:c4:7d:3d:6a:59:d4:e5:16:c2:62:bb:b3:
                    42:01:e8:87:ca:a6:1f:44:3e:98:de:d6:24:23:1e:
                    16:ac:fc:0b:f1:71:35:20:04:a9:f1:e9:d7:63:ea:
                    a1:54:1a:9d:26:58:bf:2a:14:31:b7:a1:f8:5b:9a:
                    b9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A9:BA:EA:DD:49:EF:3D:DE:B1:42:D0:54:5F:75:36:75:BA:F3:40
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/nqm66t1J7z3esULQVF91NnW680A.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:0e:2a:5b:03:a3:df:5d:1d:cc:55:09:54:77:8b:96:0c:3b:
         9a:7f:de:75:11:ab:8a:1b:c0:bc:8b:1a:b4:ad:e0:47:46:35:
         a2:93:02:cc:b9:6d:d5:79:e9:9f:e9:83:29:11:99:7c:a8:a0:
         0f:87:38:fe:fe:12:9b:c7:87:50:e4:d3:6f:0c:ac:92:11:8a:
         8b:3d:e7:19:e2:ac:76:f0:6b:82:de:12:43:83:0d:1d:8d:9e:
         b3:77:11:f5:5d:35:27:93:6f:1f:b3:ad:82:9c:8b:e1:cd:da:
         e3:fa:04:9f:73:06:11:06:f0:f5:95:4e:5c:60:61:72:f9:dc:
         ba:99:df:0a:b6:92:03:74:49:62:aa:50:6e:6f:74:12:39:30:
         b8:f5:18:fc:bd:f2:5d:7a:95:28:12:b7:82:7e:d2:20:35:8f:
         1a:a1:81:c1:cb:f2:48:5f:d9:54:6a:1c:ca:25:37:1a:5c:4c:
         79:6b:77:d8:63:57:10:fc:66:ce:4a:46:6f:63:3f:aa:ec:ce:
         90:52:61:45:2d:02:b7:b3:c9:4e:72:39:d0:04:db:81:c7:78:
         a2:2d:24:38:db:6e:a5:b7:8d:2c:c7:60:63:a7:1e:98:8b:5e:
         d2:8f:e4:82:d5:03:3b:d9:56:d4:db:8b:d0:0d:59:e3:34:ce:
         66:b1:61:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----