Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/-mvN19oVNd_gdL8ETfxEbjMxmfk.roa
File:                     -mvN19oVNd_gdL8ETfxEbjMxmfk.roa (raw, json)
Hash identifier:          7Zd4xc4di4fKTFMAJ6bQ7X2PDAtHZlbyvER5uUMQyak=
Subject key identifier:   FA:6B:CD:D7:DA:15:35:DF:E0:74:BF:04:4D:FC:44:6E:33:31:99:F9
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4749
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/-mvN19oVNd_gdL8ETfxEbjMxmfk.roa
Signing time:             Sun 01 May 2022 00:30:07 +0000
ROA not before:           Sun 01 May 2022 00:30:07 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        147.28.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18249 (0x4749)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: May  1 00:30:07 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=FA6BCDD7DA1535DFE074BF044DFC446E333199F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b4:e6:d5:09:4a:ad:db:d5:64:5c:3c:bf:1b:
                    7e:4d:65:09:8f:74:7a:75:77:e4:e7:8a:4a:64:ad:
                    49:c4:e8:eb:38:f0:23:0e:1a:d3:17:91:c1:e0:80:
                    4f:92:19:70:ad:1a:93:d6:40:1a:ef:78:08:28:02:
                    17:13:bb:a5:da:b5:4e:09:7d:f5:e8:e2:da:a4:e5:
                    09:bf:b3:cf:db:11:cb:6a:24:e4:48:1f:cb:1a:64:
                    ae:4e:78:8a:b4:ac:c5:73:8f:05:7f:90:08:66:96:
                    00:35:3f:c8:2f:7d:d1:30:56:9c:44:cb:51:02:74:
                    70:2a:e2:6f:38:4a:ce:4b:34:5f:07:3d:67:e3:d5:
                    f5:fd:7d:73:2d:5f:e7:46:7b:18:95:9a:36:bf:b2:
                    72:a2:0f:ac:44:df:7b:4a:e9:1c:fe:f4:4f:09:b1:
                    e5:6d:2d:9a:c8:72:54:4d:4b:e7:91:66:0a:9d:03:
                    f4:e5:d3:be:14:d4:4a:73:db:5c:7b:9f:88:3b:7e:
                    3e:c8:0d:18:ad:d1:24:9d:10:3b:98:b1:70:a0:2b:
                    95:5c:15:62:51:3c:b0:cc:2f:87:b4:37:be:f7:42:
                    21:86:c3:de:ff:cb:82:7b:53:28:39:64:4c:01:d8:
                    16:4c:36:8f:63:64:30:97:85:ed:2b:38:32:26:5e:
                    b7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:6B:CD:D7:DA:15:35:DF:E0:74:BF:04:4D:FC:44:6E:33:31:99:F9
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/-mvN19oVNd_gdL8ETfxEbjMxmfk.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:5e:6d:75:63:f1:37:a7:81:ac:b3:c3:08:ac:4e:d5:ba:32:
         d3:b7:66:fc:41:c2:8e:d0:c1:73:e9:31:7e:fa:8e:19:94:6e:
         1f:2a:2c:e8:c0:7e:34:43:60:a4:15:ed:6e:3b:71:36:53:04:
         83:f2:62:d9:cb:91:a7:8d:1c:52:39:41:c0:76:10:29:64:79:
         11:9b:ef:a9:71:b8:fb:cc:65:80:55:ef:db:86:a1:78:ce:7c:
         18:68:66:26:ce:ad:ec:96:bf:5d:84:f0:fe:99:77:a4:d0:3a:
         af:79:c6:de:e2:dd:82:f2:58:45:af:4d:69:6a:23:c1:e5:60:
         08:30:55:25:04:46:aa:a3:f2:cc:e3:01:b3:66:ef:14:ce:ac:
         f2:e1:57:d9:ba:6b:62:6a:0a:70:46:f7:6d:61:f6:66:21:9a:
         9b:a7:fa:66:fa:0f:fc:87:cd:3c:45:5b:d2:94:2a:77:85:25:
         3f:51:9e:6b:5f:57:3b:13:06:9a:ef:77:2d:74:9a:f6:76:69:
         29:19:ef:58:b3:3f:dc:fd:31:93:f2:d1:cb:95:30:fc:c4:14:
         b2:0c:15:ab:a0:cc:d4:53:e9:cc:5c:b3:f8:87:e4:a0:8a:e8:
         e4:02:01:2b:f9:25:5d:88:7e:ce:20:80:e1:11:4b:43:12:5d:
         b4:85:9d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----