Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/scO8yrMqAgNEVi0PWBH3aCscoto.roa
File:                     scO8yrMqAgNEVi0PWBH3aCscoto.roa (raw, json)
Hash identifier:          avJjoHxrNJfmNXpfDXLeOZoe3D6JuBzEoRzR2vrqyfM=
Subject key identifier:   B1:C3:BC:CA:B3:2A:02:03:44:56:2D:0F:58:11:F7:68:2B:1C:A2:DA
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4595
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/scO8yrMqAgNEVi0PWBH3aCscoto.roa
Signing time:             Thu 31 Mar 2022 00:30:07 +0000
ROA not before:           Thu 31 Mar 2022 00:30:07 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        147.28.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17813 (0x4595)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Mar 31 00:30:07 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=B1C3BCCAB32A020344562D0F5811F7682B1CA2DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:26:18:81:41:56:ea:d2:94:9f:e9:91:80:f0:
                    2a:30:80:e6:02:0b:cd:a1:f7:85:5c:c7:a4:8d:1f:
                    81:79:97:25:a9:02:bf:03:df:b0:0f:76:67:a8:f3:
                    db:86:f0:e3:d8:d2:00:f3:ee:1c:d2:31:4c:2d:20:
                    59:f8:4b:51:fc:d2:93:97:16:34:2b:69:ee:01:ed:
                    66:ff:ca:72:df:3b:1a:0f:18:3b:11:52:65:75:da:
                    c4:cf:85:68:c6:58:45:a7:2b:24:af:72:db:a2:f1:
                    d9:59:a3:cc:09:9c:bf:cf:b0:b8:8f:2d:74:8c:d7:
                    76:a2:de:87:41:e2:84:9a:20:f5:45:9b:97:1f:f9:
                    06:22:b2:10:06:40:fc:af:d9:87:9f:1b:cd:16:dc:
                    62:df:15:08:7e:31:f7:8b:8f:e0:fc:70:12:ee:d6:
                    6f:68:6c:8d:a5:4f:f7:b7:74:ea:95:96:55:b6:a0:
                    49:81:e7:91:a9:09:ff:72:36:d1:e1:19:85:1f:c5:
                    ae:cc:93:7a:a9:9f:56:62:d6:b2:12:a3:20:5c:d8:
                    c7:4b:2f:db:71:00:b4:cf:f8:0d:ec:f6:7c:6e:ec:
                    73:c5:3a:86:0b:cf:52:57:b2:18:95:e5:1d:7d:64:
                    c4:37:9f:18:0f:f3:34:03:99:65:1e:0b:ae:a0:57:
                    e8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C3:BC:CA:B3:2A:02:03:44:56:2D:0F:58:11:F7:68:2B:1C:A2:DA
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/scO8yrMqAgNEVi0PWBH3aCscoto.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:1d:92:92:ce:6b:58:74:d7:b1:19:dc:e3:8b:27:1d:0d:01:
         75:42:09:2b:4d:36:7d:59:61:2d:bd:46:22:f6:54:66:8e:f2:
         59:83:3d:a4:24:dd:57:ed:24:9c:72:2e:ef:d5:f5:0a:f2:4e:
         25:3c:52:03:1f:2c:c5:1e:d3:c7:a6:6f:49:0d:e4:65:68:a6:
         4f:80:5f:96:8c:f8:43:76:20:d6:59:2d:91:21:21:4d:77:9f:
         d2:fc:f3:82:44:4b:73:c0:c2:09:a4:23:78:18:78:38:76:41:
         46:61:fa:75:b9:6d:d4:2f:78:61:eb:01:b9:ff:f6:83:78:a6:
         a3:96:fe:3e:e5:c1:e8:54:32:f1:ab:1a:8b:ae:01:7b:34:c1:
         f7:46:45:41:e1:b5:43:8e:9e:10:1f:f9:07:66:6b:a5:cd:34:
         65:3b:8e:02:64:39:53:e7:1d:84:64:81:ba:dc:6f:18:d6:33:
         9c:5d:fd:3f:0d:ed:96:45:d5:8b:02:64:53:b6:93:bd:8c:07:
         ed:b8:2e:1d:e9:5a:90:90:cd:e6:ed:4e:40:67:d0:c2:c8:f8:
         01:a5:1a:4c:e6:cb:67:6e:ff:1d:36:ee:e0:48:cc:9e:13:a3:
         3a:3d:a4:ba:3c:fb:50:2a:c7:9d:67:66:b4:d1:70:55:b1:64:
         70:87:5b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----