Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/ug2ld0eadP2i847X78BOtzevNh4.roa
File:                     ug2ld0eadP2i847X78BOtzevNh4.roa (raw, json)
Hash identifier:          04IiEii/EP0kHRFK75PHdQNduC3Bg1vISCedLpzUAYk=
Subject key identifier:   BA:0D:A5:77:47:9A:74:FD:A2:F3:8E:D7:EF:C0:4E:B7:37:AF:36:1E
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       490D
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ug2ld0eadP2i847X78BOtzevNh4.roa
Signing time:             Wed 01 Jun 2022 00:30:13 +0000
ROA not before:           Wed 01 Jun 2022 00:30:13 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        147.28.12.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18701 (0x490d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Jun  1 00:30:13 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=BA0DA577479A74FDA2F38ED7EFC04EB737AF361E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8f:a9:c0:56:35:67:29:1f:be:14:50:2f:d7:
                    81:58:32:8f:63:89:5c:85:62:9a:f9:6b:eb:7a:40:
                    ab:74:4c:0a:12:e8:05:65:1e:7e:7b:f5:05:3d:d5:
                    95:cc:2f:31:67:14:9c:15:0d:38:e3:96:9c:1b:66:
                    70:00:1d:94:0a:0a:a7:41:ae:4c:f4:7a:ee:4b:62:
                    1f:3e:30:1d:f1:5d:62:cc:02:47:6b:e0:cf:a9:98:
                    6c:d4:e2:21:69:e8:f8:6e:34:c7:6b:1c:0a:c7:bc:
                    a2:be:c0:83:12:c9:ed:f0:ec:57:d9:70:d3:6b:b0:
                    dc:9f:ab:4f:e7:6c:eb:3e:5e:ef:c0:62:e6:cf:b9:
                    6b:0b:31:37:2d:ed:3c:6a:2a:51:2d:99:43:39:8f:
                    f0:41:15:ee:b7:e3:0f:91:eb:5d:fa:e3:da:34:55:
                    95:0f:25:75:b7:c2:0e:40:09:ad:9a:75:27:67:7a:
                    2b:cf:26:8e:9e:89:ef:1f:42:c0:68:81:62:38:e4:
                    c1:ea:92:8f:4f:bc:7a:1e:91:0b:19:3c:ae:09:f9:
                    31:5d:7b:17:02:17:b1:43:ae:ef:69:05:26:84:e0:
                    92:4f:89:06:8a:fe:dd:36:d0:53:c3:a4:b8:45:2e:
                    2b:ee:97:e1:2f:d6:21:f4:60:78:b0:7b:2d:ce:a1:
                    ae:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:0D:A5:77:47:9A:74:FD:A2:F3:8E:D7:EF:C0:4E:B7:37:AF:36:1E
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ug2ld0eadP2i847X78BOtzevNh4.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:fb:0d:e1:1a:ff:a2:a6:75:d9:4e:b4:53:8d:28:a3:d0:93:
         32:4d:ce:a9:f9:46:04:55:0d:9d:90:14:4e:5d:fd:55:6b:d0:
         c7:89:39:f6:56:df:2a:a8:eb:a7:96:9a:c2:2a:51:30:5e:5b:
         c4:5f:dd:21:94:66:79:5e:c6:1e:3d:b4:93:59:38:21:a7:7a:
         be:4c:6e:64:6d:31:c4:5e:1f:ac:a4:47:6d:12:bf:7f:89:e6:
         db:11:14:81:9b:98:6c:cf:7e:67:af:8c:e4:ff:23:77:69:73:
         e2:08:85:a2:49:70:42:34:02:9c:df:8d:e2:94:39:40:c8:77:
         6c:b9:c5:08:1a:10:6a:a3:2e:8d:b0:ab:75:16:a9:57:8c:37:
         db:95:ba:11:86:c5:7a:16:6f:31:a2:b6:58:80:91:4b:38:63:
         08:f5:20:bf:54:95:3d:c1:43:e5:13:f5:12:e5:40:08:d3:60:
         7d:1b:97:79:0f:3f:7d:78:32:51:00:a2:dd:16:1e:1f:c7:ce:
         dd:75:f1:9f:ed:7b:de:46:08:17:48:7d:74:df:f5:f9:f8:4d:
         82:7a:09:4f:7d:29:af:e1:22:b6:b1:66:3e:37:d3:42:c3:e0:
         ed:6d:59:37:e3:7f:8e:58:26:42:58:0b:c1:4c:a8:58:18:55:
         54:8f:ae:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----