Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/opQPuUSJ-f09xX7xFYG58sYkCog.roa
File:                     opQPuUSJ-f09xX7xFYG58sYkCog.roa (raw, json)
Hash identifier:          pOLPDVoy4EnGAQTgMcxwoos/PWXVmfl1p8Nz1YP/FB8=
Subject key identifier:   A2:94:0F:B9:44:89:F9:FD:3D:C5:7E:F1:15:81:B9:F2:C6:24:0A:88
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4937
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/opQPuUSJ-f09xX7xFYG58sYkCog.roa
Signing time:             Fri 03 Jun 2022 00:30:12 +0000
ROA not before:           Fri 03 Jun 2022 00:30:12 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     51224
IP address blocks:        45.132.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18743 (0x4937)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Jun  3 00:30:12 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=A2940FB94489F9FD3DC57EF11581B9F2C6240A88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b8:73:88:9e:ba:9f:77:ff:b1:4b:92:d6:c9:
                    8f:0e:e8:0b:6c:29:74:83:4b:fa:e1:c6:34:0a:47:
                    ee:d5:f5:20:d7:a6:0e:ef:94:74:68:ef:a0:fe:d4:
                    d3:05:55:3a:8b:47:92:91:18:5e:57:cc:0e:06:40:
                    19:29:4d:07:37:8e:6b:84:4d:c9:a2:c4:9e:bb:c3:
                    1f:81:a7:fb:1d:0f:05:06:c0:27:62:53:c8:60:ae:
                    3e:de:aa:d6:43:78:30:2d:b4:26:05:09:68:10:c1:
                    f0:1f:68:6b:0a:fc:6c:db:99:f6:72:eb:e0:e1:86:
                    22:36:3c:74:5c:a5:53:7a:e7:c2:af:da:91:a4:98:
                    e0:71:f6:87:9c:dc:97:55:e5:87:6a:66:0d:85:50:
                    f5:8c:65:ec:6d:39:6c:c3:0b:00:44:4b:fe:b1:dd:
                    3b:02:f0:22:bf:78:bc:f9:eb:4c:67:7d:8d:6d:09:
                    4a:b4:65:5a:f5:61:63:b9:8e:e2:e0:af:61:99:d9:
                    07:f2:be:86:6a:cf:2d:4e:70:b9:3e:db:b5:69:67:
                    69:e6:b0:04:6e:83:18:99:5f:e2:31:58:ee:08:4d:
                    ec:89:eb:88:3c:f7:03:be:4e:00:f4:13:66:45:d4:
                    41:ed:76:e4:dc:a1:bb:77:da:f0:1c:ec:b0:08:8b:
                    8f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:94:0F:B9:44:89:F9:FD:3D:C5:7E:F1:15:81:B9:F2:C6:24:0A:88
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/opQPuUSJ-f09xX7xFYG58sYkCog.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:e4:6e:55:11:6f:bf:3d:a0:9d:63:a8:32:25:27:43:c4:01:
         14:e5:ac:d5:0c:db:9d:28:29:b1:6b:b1:53:65:76:0e:53:60:
         a8:d8:81:bd:21:98:a0:a8:43:2c:00:4c:a1:30:3a:ed:1a:e5:
         cd:49:41:bf:e2:e2:af:46:52:c4:22:d7:7b:40:e3:41:ca:1f:
         10:25:eb:e4:32:9d:c5:1c:0f:30:9e:b4:94:6a:8a:54:41:f9:
         10:72:39:62:80:d4:5b:c9:8f:c7:eb:93:f2:f0:3e:a2:c6:d5:
         a7:99:bd:a7:0f:a1:3e:dd:b4:3d:e7:f0:6f:7b:ff:31:25:e9:
         87:1c:44:5c:0e:06:41:45:1b:2b:ae:7b:00:ac:6f:64:b5:25:
         64:3b:52:05:98:58:7f:3b:d2:a1:08:43:91:e9:5a:86:97:a0:
         3c:9a:6d:ad:98:d3:94:e1:8c:9f:7e:35:6c:5a:04:1e:6f:e1:
         29:d2:72:27:b1:00:d1:62:0b:a6:49:a1:a7:b2:19:8e:01:a0:
         98:e3:89:04:3a:7d:09:f8:c7:62:fc:0e:1d:ce:79:a2:02:1d:
         29:7f:7f:a8:61:4e:c9:c5:4c:9b:ed:6c:4c:aa:6f:70:68:ae:
         a5:73:ff:dc:62:9d:1c:51:79:c3:cd:74:f5:aa:d9:3d:d3:dc:
         83:4b:0f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----