Route Origin Authorization

$ rpki-client -vvf cb.rg.net/rpki/RGnet-cb/jdoQlH_ztvSFB7-EIkTnKTMKLb0.roa
File:                     jdoQlH_ztvSFB7-EIkTnKTMKLb0.roa (raw, json)
Hash identifier:          sP6PusBQoKaI0FHNNJC7lZenI0b3w81GpPbDPzrMNn4=
Subject key identifier:   8D:DA:10:94:7F:F3:B6:F4:85:07:BF:84:22:44:E7:29:33:0A:2D:BD
Certificate issuer:       /CN=06D0ED55BA251ECFE68A641939DD1C3C3ACCCA81
Certificate serial:       38C1
Authority key identifier: 06:D0:ED:55:BA:25:1E:CF:E6:8A:64:19:39:DD:1C:3C:3A:CC:CA:81
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/BtDtVbolHs_mimQZOd0cPDrMyoE.cer
Subject info access:      rsync://cb.rg.net/rpki/RGnet-cb/jdoQlH_ztvSFB7-EIkTnKTMKLb0.roa
Signing time:             Fri 17 Sep 2021 01:11:49 +0000
ROA not before:           Fri 17 Sep 2021 01:11:49 +0000
ROA not after:            Fri 01 Jul 2022 01:01:02 +0000
asID:                     3130
IP address blocks:        198.180.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14529 (0x38c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06D0ED55BA251ECFE68A641939DD1C3C3ACCCA81
        Validity
            Not Before: Sep 17 01:11:49 2021 GMT
            Not After : Jul  1 01:01:02 2022 GMT
        Subject: CN=8DDA10947FF3B6F48507BF842244E729330A2DBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:dd:1b:ee:8e:75:f2:81:ad:ac:47:72:b8:2a:
                    5b:5e:78:e7:01:d5:19:2d:56:e5:b6:62:d2:1f:cc:
                    af:8a:d7:3a:1e:cd:a5:fd:00:1f:98:d9:d8:80:a2:
                    e7:40:f5:18:59:9e:06:6e:dd:2c:b9:b7:99:eb:ea:
                    16:b7:e9:e1:f5:6c:e3:1e:db:47:81:ba:42:dc:83:
                    cf:09:a8:41:e7:3f:2d:c6:f0:83:4f:62:94:e7:d5:
                    98:bc:73:7e:71:a1:ae:95:d3:86:15:9b:72:1c:70:
                    62:9b:f2:70:ea:f1:90:e0:98:db:20:1c:d6:6a:33:
                    f6:a1:ea:41:ea:a4:7b:ab:9d:80:e4:47:b8:87:17:
                    60:bf:04:cb:ec:f8:78:85:a2:a1:3a:1e:ec:6f:a8:
                    ab:96:b1:3d:45:5c:23:30:e6:4e:16:da:53:a5:3d:
                    b6:22:33:8e:78:d8:df:f6:e3:11:12:b1:52:43:9f:
                    bb:d7:89:65:dd:25:26:db:2e:64:a0:2f:a9:ee:1c:
                    e7:e7:97:5c:c9:14:95:5b:2a:b2:09:81:78:61:00:
                    f9:f1:a6:07:d7:08:da:94:46:c3:18:f6:ed:07:06:
                    5c:1f:dc:8e:2e:2e:10:9c:2e:c3:e2:31:0d:70:22:
                    e7:ce:51:b2:5a:03:81:46:c0:df:22:5f:13:57:50:
                    67:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DA:10:94:7F:F3:B6:F4:85:07:BF:84:22:44:E7:29:33:0A:2D:BD
            X509v3 Authority Key Identifier:
                keyid:06:D0:ED:55:BA:25:1E:CF:E6:8A:64:19:39:DD:1C:3C:3A:CC:CA:81

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cb.rg.net/rpki/RGnet-cb/BtDtVbolHs_mimQZOd0cPDrMyoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/BtDtVbolHs_mimQZOd0cPDrMyoE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://cb.rg.net/rpki/RGnet-cb/jdoQlH_ztvSFB7-EIkTnKTMKLb0.roa
                RPKI Notify - URI:https://cb.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.180.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:8d:da:5b:8e:f6:c9:f8:3e:3d:6c:c2:c3:e4:73:45:8b:0e:
         9a:b4:9e:7d:69:f3:cf:7d:57:25:10:8b:f4:f9:a9:df:10:5e:
         91:e7:5d:a7:3b:33:88:b6:51:1e:65:44:2c:0c:13:c8:ec:61:
         c8:ba:9d:dc:35:d1:e1:cb:a4:d0:9c:94:91:84:7b:fb:db:60:
         98:40:a8:1e:3d:52:a9:69:a6:8b:4f:f6:c3:78:95:f3:c3:74:
         7a:d3:3e:3d:49:76:c1:f0:fb:03:e4:98:d0:7b:4a:19:30:b8:
         7e:ba:b3:1e:2b:5b:91:d2:86:aa:2a:41:87:0d:e1:15:0d:ec:
         a4:2f:5c:cb:d2:23:ba:2f:8a:b6:fa:f3:b4:04:d4:0b:a0:68:
         d1:99:65:14:f0:43:05:cd:6d:f9:3c:a1:8f:15:3c:61:65:cb:
         cf:ae:e0:f3:a7:c7:4a:c1:95:cd:a2:47:be:f0:b8:2a:f2:ad:
         70:9c:aa:d1:30:de:b4:61:9c:c4:7d:48:61:9f:8d:6e:a3:1b:
         b8:e8:05:05:cf:47:cd:0b:c9:f0:51:c7:12:d0:f2:a2:d4:23:
         2a:0c:69:cb:bd:a1:da:07:2c:1d:ff:bc:56:7a:b8:80:d1:57:
         f0:0b:b6:84:fb:5d:ba:4e:5c:39:38:f1:6c:00:9d:d8:7a:c8:
         93:fd:b4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----