Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/2SaLMnC74e6C2HR-Db6XADHNWc4.roa
File:                     2SaLMnC74e6C2HR-Db6XADHNWc4.roa (raw, json)
Hash identifier:          FCWFldpRFSZ/q1I0FGnrTr83y+oNB2VJDJtUufBz2FQ=
Subject key identifier:   D9:26:8B:32:70:BB:E1:EE:82:D8:74:7E:0D:BE:97:00:31:CD:59:CE
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4324
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/2SaLMnC74e6C2HR-Db6XADHNWc4.roa
Signing time:             Mon 14 Feb 2022 00:30:06 +0000
ROA not before:           Mon 14 Feb 2022 00:30:06 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        45.132.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17188 (0x4324)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb 14 00:30:06 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=D9268B3270BBE1EE82D8747E0DBE970031CD59CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:36:4d:26:89:76:cb:10:8a:e6:64:1f:ab:66:
                    e5:64:2b:fd:8f:40:fd:16:01:1e:74:9c:66:89:be:
                    f2:b0:7b:9f:01:69:d9:9d:4f:b7:58:35:18:7f:a8:
                    7e:a1:54:96:d4:42:01:d2:39:df:e3:eb:86:d3:5b:
                    31:a1:d5:5d:6f:38:b5:da:1c:b6:94:ee:cb:ff:06:
                    a6:dd:e3:49:02:45:a2:55:b0:53:29:40:08:cd:4f:
                    8b:db:b3:7f:0a:11:60:84:ed:91:77:59:b0:de:ed:
                    3f:17:a2:49:49:b7:b7:2e:40:b4:4c:d5:9b:c7:8c:
                    3d:37:f1:51:16:fc:eb:8b:fc:8d:ea:1e:7d:e3:10:
                    f7:a7:eb:6e:b4:87:f2:14:17:00:3b:0b:04:22:54:
                    27:70:6f:de:55:da:f4:30:a3:73:b1:2d:9d:c5:11:
                    01:57:eb:94:a8:37:67:c0:60:a0:b3:5f:00:ff:44:
                    34:f2:d3:b0:37:a2:95:b0:46:47:36:0c:5c:46:5c:
                    35:a0:4e:86:5a:0d:20:52:53:e0:e4:9a:9a:46:2f:
                    fa:53:e7:74:fd:00:27:d6:b6:b6:41:01:42:96:0a:
                    8c:4d:3a:8e:2b:ab:07:13:6b:2a:5e:32:ca:22:a7:
                    ee:c4:41:86:42:1a:e9:54:f8:22:0b:02:be:97:ff:
                    04:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:26:8B:32:70:BB:E1:EE:82:D8:74:7E:0D:BE:97:00:31:CD:59:CE
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/2SaLMnC74e6C2HR-Db6XADHNWc4.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:d5:3d:0e:71:74:96:b4:aa:ec:03:82:5f:bd:08:12:5a:c4:
         12:4a:ea:82:41:bc:e3:31:32:b0:b2:1b:62:91:bc:a2:0b:ef:
         06:cc:c2:ff:96:a3:97:e2:48:4d:97:1a:87:b1:79:aa:c3:a8:
         61:89:ab:8d:60:90:a4:ce:ad:bd:70:8d:d5:5d:51:e7:33:b0:
         8d:ea:43:4e:64:6c:3c:29:5a:3e:9f:be:93:16:a6:7d:ab:7c:
         ce:8a:e4:88:b2:d1:84:60:d0:ea:07:5f:4d:ee:67:83:04:4f:
         48:0e:1b:74:3f:0b:4a:28:68:a4:11:f0:3e:ea:a5:9a:e8:ca:
         dd:bf:60:c2:22:e4:25:c2:b4:a8:35:10:32:90:2a:8c:bb:82:
         73:0b:b6:ee:f1:10:8b:f8:50:f3:bc:4d:02:10:8e:6f:69:69:
         a8:19:c3:9e:fe:b7:c6:4f:0a:17:7e:02:5e:07:7c:87:ea:90:
         0f:4b:45:8f:02:49:53:1e:cd:45:01:69:ef:54:9e:ed:6b:93:
         ad:62:34:21:cd:a0:69:31:0c:0e:93:19:5a:bd:27:e0:cb:2e:
         dc:89:41:63:71:a1:58:82:c5:47:11:10:a1:ba:63:c7:5d:1b:
         91:78:1a:89:8b:48:99:08:df:a6:70:e5:22:ee:9f:c3:d1:cb:
         b9:da:3e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----