Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/p9R2j9cp1IViGokX-1BqMwGzYYk.roa
File:                     p9R2j9cp1IViGokX-1BqMwGzYYk.roa (raw, json)
Hash identifier:          6OuKmYC/nIJiC+8+U4E2bJmzlEGgtwu6PaKfKtxiQxo=
Subject key identifier:   A7:D4:76:8F:D7:29:D4:85:62:1A:89:17:FB:50:6A:33:01:B3:61:89
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       43DA
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/p9R2j9cp1IViGokX-1BqMwGzYYk.roa
Signing time:             Sun 27 Feb 2022 00:30:14 +0000
ROA not before:           Sun 27 Feb 2022 00:30:14 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        45.132.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17370 (0x43da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb 27 00:30:14 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=A7D4768FD729D485621A8917FB506A3301B36189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bc:54:e8:3d:4e:33:99:04:d0:9a:f2:1d:89:
                    bd:b9:6c:9c:1b:84:f8:52:b0:1b:87:d4:fe:2e:e7:
                    88:48:2a:54:bb:df:47:ed:63:d7:a8:41:0d:bc:76:
                    43:41:c9:77:24:73:82:61:4f:ea:48:0d:37:39:8b:
                    77:8e:19:f8:9b:c4:52:99:c5:a0:a5:c3:c1:cd:4f:
                    92:64:0a:24:b0:53:f2:29:b2:e0:9e:df:cd:40:fd:
                    55:07:e0:00:d8:0a:95:15:22:73:44:7e:16:f0:2e:
                    8e:df:63:0a:61:11:10:94:5f:d0:15:ef:a5:81:c5:
                    9f:82:6f:ef:2c:9a:c2:65:85:dd:23:82:b6:a1:d2:
                    c4:85:35:8d:78:73:9e:f2:8b:29:10:3b:a8:c1:48:
                    ee:69:2c:c5:5d:21:e5:6f:a9:f8:bf:e3:0e:58:ec:
                    df:31:66:1c:db:3f:e1:9f:5a:7b:eb:7a:29:d2:2b:
                    0f:4b:7b:cf:73:a3:2c:07:27:b6:f1:65:25:e8:e4:
                    0b:8d:de:09:28:24:7a:21:2e:89:08:4f:d9:44:b1:
                    f0:25:cd:1c:bf:25:77:eb:0a:f0:c7:b4:99:71:95:
                    9c:62:54:10:2f:d8:4e:8a:c1:59:eb:6b:7e:6e:67:
                    4b:0c:75:b9:dd:3c:1a:cf:83:58:8e:d3:bb:97:b6:
                    5e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D4:76:8F:D7:29:D4:85:62:1A:89:17:FB:50:6A:33:01:B3:61:89
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/p9R2j9cp1IViGokX-1BqMwGzYYk.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:6b:5d:f0:49:7d:58:c9:13:ff:65:e3:a0:c7:f4:1b:68:d1:
         a9:f7:84:a8:78:05:a6:d8:4f:2a:0d:ca:04:81:2c:46:5b:75:
         03:2e:a9:0f:ab:ae:c7:26:7e:3f:a1:55:8a:57:08:95:61:5c:
         e7:7a:51:3e:82:35:f2:ce:4a:29:fc:5a:5f:13:19:7f:59:88:
         08:ce:6e:5b:8b:d7:a5:13:8a:f9:db:fc:a2:09:7a:71:53:ba:
         cb:06:87:4b:5c:27:0d:7f:27:34:41:51:ed:ee:83:9d:3b:f8:
         bc:69:ba:9b:ec:ca:47:ad:2d:ff:92:3c:2f:45:03:fa:e2:97:
         6d:37:5c:2c:aa:64:75:7c:1d:a2:00:a8:ac:31:3b:eb:44:7b:
         89:6f:19:e3:f5:de:cf:fc:6f:eb:05:9d:46:02:ba:7c:34:ee:
         96:35:d8:72:e1:fb:21:08:42:e4:b6:68:b8:0b:6f:ee:f5:83:
         55:c4:a2:7c:ed:34:bc:eb:da:0d:56:66:fc:17:81:1a:77:55:
         48:9a:5d:0b:0e:63:f0:5f:ab:7e:84:ea:8e:06:bf:73:3c:74:
         15:92:7e:f3:84:cb:28:14:61:83:e4:a2:97:8d:34:7b:16:77:
         87:34:9c:83:d2:61:08:33:f8:88:a0:ec:23:0f:5f:e5:f2:c7:
         57:c4:bd:2a
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICQ9owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjAyMjcw
MDMwMTRaFw0yMzAxMDEwMTAxMDJaMDMxMTAvBgNVBAMTKEE3RDQ3NjhGRDcyOUQ0
ODU2MjFBODkxN0ZCNTA2QTMzMDFCMzYxODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFvFToPU4zmQTQmvIdib25bJwbhPhSsBuH1P4u54hIKlS730ft
Y9eoQQ28dkNByXckc4JhT+pIDTc5i3eOGfibxFKZxaClw8HNT5JkCiSwU/IpsuCe
381A/VUH4ADYCpUVInNEfhbwLo7fYwphERCUX9AV76WBxZ+Cb+8smsJlhd0jgrah
0sSFNY14c57yiykQO6jBSO5pLMVdIeVvqfi/4w5Y7N8xZhzbP+GfWnvreinSKw9L
e89zoywHJ7bxZSXo5AuN3gkoJHohLokIT9lEsfAlzRy/JXfrCvDHtJlxlZxiVBAv
2E6KwVnra35uZ0sMdbndPBrPg1iO07uXtl4RAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUp9R2j9cp1IViGokX+1BqMwGzYYkwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS9wOVIyajljcDFJVmlHb2tYLTFCcU13R3pZWWsucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL0wDQYJKoZIhvcNAQELBQADggEB
AJdrXfBJfVjJE/9l46DH9Bto0an3hKh4BabYTyoNygSBLEZbdQMuqQ+rrscmfj+h
VYpXCJVhXOd6UT6CNfLOSin8Wl8TGX9ZiAjObluL16UTivnb/KIJenFTussGh0tc
Jw1/JzRBUe3ug507+LxpupvsyketLf+SPC9FA/ril203XCyqZHV8HaIAqKwxO+tE
e4lvGeP13s/8b+sFnUYCunw07pY12HLh+yEIQuS2aLgLb+71g1XEonztNLzr2g1W
ZvwXgRp3VUiaXQsOY/Bfq36E6o4Gv3M8dBWSfvOEyygUYYPkopeNNHsWd4c0nIPS
YQgz+Iig7CMPX+Xyx1fEvSo=
-----END CERTIFICATE-----