Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/wK18dxfnsIzfz1FutRN-PeIC3MM.roa
File:                     wK18dxfnsIzfz1FutRN-PeIC3MM.roa (raw, json)
Hash identifier:          m1zA076YeH2nAG+CTLZoGDeGNvWpFgwBmSiDLApKJwY=
Subject key identifier:   C0:AD:7C:77:17:E7:B0:8C:DF:CF:51:6E:B5:13:7E:3D:E2:02:DC:C3
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       45A2
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/wK18dxfnsIzfz1FutRN-PeIC3MM.roa
Signing time:             Fri 01 Apr 2022 00:30:06 +0000
ROA not before:           Fri 01 Apr 2022 00:30:06 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        147.28.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17826 (0x45a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Apr  1 00:30:06 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=C0AD7C7717E7B08CDFCF516EB5137E3DE202DCC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a1:be:4b:07:94:02:c5:f0:15:df:ce:e2:a4:
                    03:ed:9f:2d:73:5c:96:c8:09:7e:2c:5d:c3:14:6a:
                    e1:c1:cf:ab:37:b1:d9:4d:d9:63:37:e5:e4:db:da:
                    90:b1:20:c3:bf:d5:b6:f9:6e:37:8d:6f:a3:73:bd:
                    5e:b1:f2:d5:7e:c8:46:c9:67:50:ba:55:a7:60:f9:
                    1f:6c:f1:12:f8:d2:8a:08:bb:3f:cc:a4:5d:7f:73:
                    5c:d6:a3:0d:17:30:bf:f6:55:ba:b0:ea:48:96:56:
                    17:49:1f:1b:3d:05:77:bf:4d:1f:ec:28:db:16:ce:
                    3d:fb:bd:b8:85:a2:8e:5d:19:d5:c0:60:36:ab:44:
                    d7:c0:a5:fd:9d:6f:d8:ae:ed:1b:44:bf:82:78:c5:
                    7f:b7:25:7b:23:1e:dc:7a:af:41:ce:68:33:16:dd:
                    b7:40:7a:eb:29:82:b3:b0:3b:62:8d:ce:d8:f1:d4:
                    29:42:d9:47:68:9d:91:28:ee:73:db:bd:f2:ff:f0:
                    05:d7:47:0d:2a:93:a0:08:3f:79:a4:48:3d:0a:d3:
                    3a:77:9b:9d:48:e4:49:e4:ef:69:9a:0c:f9:9d:1c:
                    5c:ec:5b:ba:6d:c7:0c:83:f9:0b:f3:f5:34:43:6d:
                    50:3c:ca:eb:97:0e:16:03:dc:e5:c4:65:93:3e:ce:
                    2b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:AD:7C:77:17:E7:B0:8C:DF:CF:51:6E:B5:13:7E:3D:E2:02:DC:C3
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/wK18dxfnsIzfz1FutRN-PeIC3MM.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:c1:f5:fa:d2:85:1d:18:7e:16:f1:a9:50:67:d5:b3:99:30:
         bc:ec:64:e6:a0:b3:db:70:a5:b2:fa:1b:c6:ef:45:b1:8f:3f:
         53:4e:5b:0c:c1:e0:af:3b:69:3c:89:50:c0:b1:1f:18:bb:0e:
         e1:c0:bd:e4:5f:1e:b1:89:1a:e0:92:ab:52:f1:c5:5f:0a:b5:
         27:93:89:31:64:69:bf:7b:40:f4:29:8a:87:33:c1:a7:06:e1:
         b7:60:aa:3f:75:a7:37:65:ed:35:76:20:5f:c4:c6:f3:58:f7:
         1a:b1:1f:e2:71:97:46:65:aa:65:ed:91:12:fa:9c:e3:f8:4c:
         a9:36:a3:92:46:d3:e7:b8:5a:9d:ca:2b:98:d4:4d:35:46:4f:
         d7:f9:e9:e0:41:3a:d3:5d:6f:f7:a1:7b:92:3b:3f:eb:1b:32:
         b7:c8:7b:ea:8b:66:12:66:96:24:08:2b:76:12:ca:64:6d:e1:
         1e:10:4d:22:7e:e8:a0:44:8b:50:3b:a2:d3:6e:71:6d:37:f4:
         81:fb:3e:25:82:dc:10:8f:8b:f3:70:1c:4d:34:df:26:c3:53:
         97:f4:88:a0:5f:31:d9:e4:f4:b1:8e:4a:b4:87:4b:b8:11:c6:
         53:3b:0b:c0:c1:d6:4e:2e:23:db:4d:e9:fc:be:cd:7f:9b:5b:
         0d:68:36:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----