Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/w9clQYMoX8YU8rQuM56EKA7nEPI.roa
File:                     w9clQYMoX8YU8rQuM56EKA7nEPI.roa (raw, json)
Hash identifier:          cT/kiFc+xnd8AYjxA8qK1PEMA5BkTOGEAjPZGtqVqN4=
Subject key identifier:   C3:D7:25:41:83:28:5F:C6:14:F2:B4:2E:33:9E:84:28:0E:E7:10:F2
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4838
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/w9clQYMoX8YU8rQuM56EKA7nEPI.roa
Signing time:             Wed 18 May 2022 00:30:07 +0000
ROA not before:           Wed 18 May 2022 00:30:07 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     51224
IP address blocks:        45.132.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18488 (0x4838)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: May 18 00:30:07 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=C3D7254183285FC614F2B42E339E84280EE710F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:97:41:c2:d5:8d:94:da:62:26:fa:88:39:2b:
                    8a:bc:90:87:09:bf:b1:11:24:48:52:48:98:d9:12:
                    a2:c6:ed:db:a9:6e:66:ea:08:c9:6d:7f:bc:88:87:
                    c7:e1:9b:79:d9:02:c5:85:ac:2a:4c:d7:7e:09:aa:
                    a2:71:e7:d7:e0:9f:03:13:4a:22:3c:c0:2d:fc:e9:
                    ad:c7:f9:a8:02:8a:ff:22:76:3c:43:7b:1a:47:4d:
                    00:f4:d0:22:04:fc:81:99:86:10:a8:6d:f6:04:4d:
                    c0:3b:07:93:c2:ba:d8:90:82:8b:c3:20:15:63:84:
                    06:d1:b7:d2:15:19:66:2b:74:55:26:6f:a1:20:5c:
                    37:10:8b:a7:83:0d:3f:ba:06:f6:ce:d2:83:e7:eb:
                    d8:96:31:3c:68:68:82:87:04:20:f1:36:f2:9b:df:
                    6c:9f:f2:51:5a:e5:d8:ed:20:16:2a:22:ec:92:bb:
                    68:42:ac:9a:89:9e:9c:62:be:d5:dc:22:cc:a8:6f:
                    fe:96:25:b2:b1:2f:34:9b:7d:6c:c5:b8:28:4b:10:
                    7c:ab:fe:d6:eb:46:3b:2b:e8:10:8b:71:db:ca:b4:
                    a9:af:61:55:b7:ab:e2:1d:dd:87:c5:bc:e7:84:86:
                    17:72:03:5c:1b:70:84:b1:b4:d0:0b:f5:1f:69:e7:
                    d9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D7:25:41:83:28:5F:C6:14:F2:B4:2E:33:9E:84:28:0E:E7:10:F2
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/w9clQYMoX8YU8rQuM56EKA7nEPI.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:bc:82:c5:0a:86:d8:18:91:3e:d2:93:9a:37:bc:21:6b:50:
         40:fb:f6:95:fe:65:9e:a0:b0:c4:40:62:cb:6a:18:b8:c6:64:
         f3:d3:ee:77:6a:83:dc:c5:dc:56:00:15:6f:43:59:3c:a9:54:
         33:15:83:88:92:02:c4:22:50:93:d6:96:d8:d3:39:4e:24:f2:
         25:3e:11:86:aa:d9:05:63:0f:59:28:e8:aa:ea:26:5b:c0:5e:
         e5:2b:ca:f5:21:52:44:12:6f:35:79:5c:b4:d5:f2:01:f0:5d:
         5a:4f:f6:4c:d8:3e:58:d3:86:d2:0c:c2:81:14:8f:72:d8:1f:
         fa:fd:40:a4:34:4a:6b:9e:10:3c:d5:d8:92:5f:fc:02:37:49:
         1f:17:f9:87:85:f6:13:81:10:3f:b0:6d:d5:81:81:fa:8d:ce:
         9a:6b:16:bd:f1:c3:77:12:2a:72:d8:28:c6:39:b3:3b:6f:2e:
         f6:1b:da:4e:5b:60:4a:10:2e:9f:83:c3:f7:96:0a:8a:95:5a:
         6e:6d:88:8c:a6:39:b2:68:8e:6c:5c:8c:1c:ea:ab:31:e1:61:
         56:9c:2f:49:7d:8a:cb:09:c0:c2:51:ea:c2:64:ba:ef:a2:b5:
         5c:85:2d:46:f0:88:e6:f1:ba:6a:c0:29:06:35:98:78:9f:a6:
         1d:b5:60:da
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICSDgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1MTgw
MDMwMDdaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKEMzRDcyNTQxODMyODVG
QzYxNEYyQjQyRTMzOUU4NDI4MEVFNzEwRjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2l0HC1Y2U2mIm+og5K4q8kIcJv7ERJEhSSJjZEqLG7dupbmbq
CMltf7yIh8fhm3nZAsWFrCpM134JqqJx59fgnwMTSiI8wC386a3H+agCiv8idjxD
expHTQD00CIE/IGZhhCobfYETcA7B5PCutiQgovDIBVjhAbRt9IVGWYrdFUmb6Eg
XDcQi6eDDT+6BvbO0oPn69iWMTxoaIKHBCDxNvKb32yf8lFa5djtIBYqIuySu2hC
rJqJnpxivtXcIsyob/6WJbKxLzSbfWzFuChLEHyr/tbrRjsr6BCLcdvKtKmvYVW3
q+Id3YfFvOeEhhdyA1wbcISxtNAL9R9p59mFAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUw9clQYMoX8YU8rQuM56EKA7nEPIwHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS93OWNsUVlNb1g4WVU4clF1TTU2RUtBN25FUEkucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL0wDQYJKoZIhvcNAQELBQADggEB
AAG8gsUKhtgYkT7Sk5o3vCFrUED79pX+ZZ6gsMRAYstqGLjGZPPT7ndqg9zF3FYA
FW9DWTypVDMVg4iSAsQiUJPWltjTOU4k8iU+EYaq2QVjD1ko6KrqJlvAXuUryvUh
UkQSbzV5XLTV8gHwXVpP9kzYPljThtIMwoEUj3LYH/r9QKQ0SmueEDzV2JJf/AI3
SR8X+YeF9hOBED+wbdWBgfqNzpprFr3xw3cSKnLYKMY5sztvLvYb2k5bYEoQLp+D
w/eWCoqVWm5tiIymObJojmxcjBzqqzHhYVacL0l9issJwMJR6sJkuu+itVyFLUbw
iObxumrAKQY1mHifph21YNo=
-----END CERTIFICATE-----