Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/4rBKl9Wnvng9xmStReW485S6ai0.roa
File:                     4rBKl9Wnvng9xmStReW485S6ai0.roa (raw, json)
Hash identifier:          gQur/mRCVqh4ojDZVP+d/KR8S3zEGL+OXJM3LG2AiZQ=
Subject key identifier:   E2:B0:4A:97:D5:A7:BE:78:3D:C6:64:AD:45:E5:B8:F3:94:BA:6A:2D
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       4315
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/4rBKl9Wnvng9xmStReW485S6ai0.roa
Signing time:             Sun 13 Feb 2022 00:30:06 +0000
ROA not before:           Sun 13 Feb 2022 00:30:06 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        147.28.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17173 (0x4315)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb 13 00:30:06 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=E2B04A97D5A7BE783DC664AD45E5B8F394BA6A2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9d:11:8a:72:fe:b3:20:da:16:34:fa:f9:1b:
                    b8:1c:4c:57:21:a6:8a:38:83:f9:5e:30:14:7c:3b:
                    15:05:c6:b3:79:83:2f:da:20:5c:33:5e:b6:d2:bb:
                    59:61:5d:d0:58:55:c5:53:81:33:ff:27:dd:eb:bc:
                    5e:f8:bc:a2:16:e3:11:3b:4c:94:99:d8:68:a3:f6:
                    62:a8:12:27:6e:4c:33:fb:c6:0a:b3:ea:5a:79:da:
                    6b:45:77:67:b3:6b:1a:43:44:ec:ee:b8:15:b4:0b:
                    8e:ff:5a:da:1e:21:05:ee:56:35:dd:48:21:e0:be:
                    8b:1c:8a:e4:fe:b0:bd:b1:3f:4d:da:5d:b7:a6:3f:
                    6d:1e:4b:1f:c6:ea:49:60:97:33:1d:b0:fa:22:29:
                    ba:c6:5e:e9:09:c6:5e:05:bc:7e:5c:8e:b1:56:ac:
                    c5:0f:69:76:94:20:02:c0:8f:79:e8:f4:2d:65:bb:
                    d2:25:0b:76:e9:45:f4:e2:90:95:cd:65:01:e1:11:
                    8c:73:0b:d5:55:f5:27:85:b8:8c:1d:1f:98:5f:97:
                    a0:ec:56:23:8a:2c:f3:06:31:2c:4a:9f:5f:e0:f1:
                    20:7e:5d:c4:42:5d:43:fd:98:94:97:44:4c:bd:d3:
                    03:e6:25:3a:e1:1b:04:ce:a3:08:81:97:aa:cc:5a:
                    4f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B0:4A:97:D5:A7:BE:78:3D:C6:64:AD:45:E5:B8:F3:94:BA:6A:2D
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/4rBKl9Wnvng9xmStReW485S6ai0.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:49:bf:54:3e:44:0e:a4:d0:9c:10:e0:f7:85:19:ac:20:79:
         ff:da:98:f4:b2:ea:55:9b:9d:5b:03:3c:98:4b:f1:1b:c7:fa:
         ff:f5:5c:a9:63:22:fb:5b:90:05:ab:41:00:47:5d:aa:f1:43:
         5e:63:e6:fc:e1:d7:ae:b5:d1:7e:42:4c:df:50:61:03:d6:98:
         4f:59:3f:e2:29:05:73:79:12:9e:87:b2:7b:fa:69:e4:37:c7:
         6d:a8:1d:93:11:a4:d6:c4:81:41:f6:0e:63:d2:56:f7:6d:64:
         7e:49:a3:7d:20:35:bf:86:b9:a8:6f:07:82:7a:54:7a:2a:94:
         2a:79:2d:f1:f6:e7:a0:1a:88:9f:59:fe:07:83:4c:ca:10:3d:
         b4:f0:a6:df:c3:de:94:14:2a:d7:5d:36:21:84:60:ca:11:fe:
         aa:af:6b:78:4e:98:60:48:d9:21:7f:3a:c0:5f:23:72:f1:84:
         3e:5d:c1:d3:d4:bb:9f:3e:51:24:4f:38:49:fb:1a:13:07:6f:
         69:ac:15:9f:e5:7c:0b:42:60:99:d7:d6:b6:ae:fc:a2:ef:bf:
         f1:db:13:20:28:44:13:b1:6f:67:d3:12:94:c7:8e:15:40:0a:
         4f:1c:33:6a:35:1b:65:43:b0:d9:97:9b:de:f1:18:93:d0:90:
         cd:0f:68:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----