Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/76l58_OSw_UQZNYiYFyk155fty4.roa
File:                     76l58_OSw_UQZNYiYFyk155fty4.roa (raw, json)
Hash identifier:          RapO1s+v6ksY1+1c01j2EA4CuObX7FdUyirsPx6NBDQ=
Subject key identifier:   EF:A9:79:F3:F3:92:C3:F5:10:64:D6:22:60:5C:A4:D7:9E:5F:B7:2E
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       47E4
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/76l58_OSw_UQZNYiYFyk155fty4.roa
Signing time:             Thu 12 May 2022 00:30:10 +0000
ROA not before:           Thu 12 May 2022 00:30:10 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     51224
IP address blocks:        45.132.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18404 (0x47e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: May 12 00:30:10 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=EFA979F3F392C3F51064D622605CA4D79E5FB72E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:28:56:a0:b3:6c:a7:2d:d4:9c:33:44:32:cd:
                    58:06:70:af:3c:6a:8c:26:5a:26:b0:0e:84:5c:5d:
                    18:38:6b:2d:1b:5e:12:f0:7f:14:7f:78:c8:84:a6:
                    62:cb:61:5e:50:d3:81:92:68:51:a4:27:01:35:56:
                    9c:cc:89:0a:b0:21:ae:87:e3:1a:fb:02:28:94:a0:
                    f1:05:f2:f3:75:bc:36:3a:08:8e:4b:54:a2:37:97:
                    00:15:a0:9a:c2:f6:99:7f:ba:1a:1f:21:03:67:52:
                    d2:d7:7d:9f:57:08:b0:61:8a:52:9d:2e:fe:08:44:
                    e8:0e:cb:ff:3d:27:ae:c0:0a:be:ec:b5:b9:ac:7c:
                    16:8d:92:d7:fa:5e:25:75:b6:e7:df:9f:45:b5:ea:
                    10:ad:56:cb:0b:50:43:17:fe:3e:05:2f:9a:75:7b:
                    5b:b5:53:c7:41:76:22:65:19:36:85:1b:94:b6:4e:
                    fa:90:16:32:46:57:f4:19:1d:8f:f8:75:a3:a0:f9:
                    21:1c:4f:ea:20:09:c8:7f:d4:2d:07:11:0d:8e:e0:
                    79:02:5b:fe:14:3f:38:95:6f:36:58:d6:c7:af:49:
                    28:c7:e5:78:30:01:23:e6:a5:a3:2b:68:de:ca:33:
                    45:40:bc:7a:09:74:b8:7d:dc:3e:4b:03:8d:10:d3:
                    5a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A9:79:F3:F3:92:C3:F5:10:64:D6:22:60:5C:A4:D7:9E:5F:B7:2E
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/76l58_OSw_UQZNYiYFyk155fty4.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:5e:ed:e9:e0:ee:25:53:f5:59:b0:c8:f3:f2:df:b0:16:a4:
         80:b7:dc:02:d2:fa:39:26:83:25:82:9f:41:ac:d9:b6:2a:8c:
         b1:bf:14:1e:46:0c:04:36:6b:1a:51:05:7d:d4:ac:78:cf:c6:
         9c:63:99:e7:dc:1d:3c:16:ee:a6:c4:a9:f9:46:4a:8c:3e:4c:
         74:3a:8d:e1:ac:27:52:38:e8:ef:ae:1c:6f:a6:b0:10:34:6e:
         c9:9e:db:5b:52:0a:e6:84:d7:c5:5a:69:75:08:6e:ec:58:a7:
         3f:36:d1:70:34:af:00:b4:d2:55:16:1c:d2:a0:d2:fd:24:5c:
         d0:fb:ef:98:c3:aa:2a:eb:8a:83:e6:e8:69:61:d3:a7:52:78:
         b5:a3:0d:ba:b5:9a:13:ec:76:f6:38:b5:dd:84:2e:e9:f5:c3:
         cd:df:a4:00:e6:21:d7:79:97:6a:cf:c1:c7:7d:44:d7:75:3c:
         26:18:ab:49:f7:c8:4d:42:3a:7b:18:ad:c6:19:90:3d:df:31:
         99:73:97:be:17:a5:ad:20:dc:6d:74:1c:78:3d:70:34:6d:a9:
         82:59:59:71:da:b7:e9:2e:38:dc:fc:f1:75:46:9d:d7:56:aa:
         ae:cd:db:ba:10:26:89:ba:3d:de:39:f8:bf:68:a1:33:ae:56:
         a7:09:48:b2
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICR+QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNThD
N0Y3OTI2N0FGNzRCQTdEMkZDQzI1NjI2NTJDMzVCNUUxM0VCMTAeFw0yMjA1MTIw
MDMwMTBaFw0yMzA0MDEyMjIxMTRaMDMxMTAvBgNVBAMTKEVGQTk3OUYzRjM5MkMz
RjUxMDY0RDYyMjYwNUNBNEQ3OUU1RkI3MkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCVKFags2ynLdScM0QyzVgGcK88aowmWiawDoRcXRg4ay0bXhLw
fxR/eMiEpmLLYV5Q04GSaFGkJwE1VpzMiQqwIa6H4xr7AiiUoPEF8vN1vDY6CI5L
VKI3lwAVoJrC9pl/uhofIQNnUtLXfZ9XCLBhilKdLv4IROgOy/89J67ACr7stbms
fBaNktf6XiV1tuffn0W16hCtVssLUEMX/j4FL5p1e1u1U8dBdiJlGTaFG5S2TvqQ
FjJGV/QZHY/4daOg+SEcT+ogCch/1C0HEQ2O4HkCW/4UPziVbzZY1sevSSjH5Xgw
ASPmpaMraN7KM0VAvHoJdLh93D5LA40Q01oTAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU76l58/OSw/UQZNYiYFyk155fty4wHwYDVR0jBBgwFoAUWMf3kmevdLp9L8wl
YmUsNbXhPrEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBWBgNVHR8ETzBNMEug
SaBHhkVyc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL292c0NBL1dNZjNr
bWV2ZExwOUw4d2xZbVVzTmJYaFByRS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsG
AQUFBzAChj9yc3luYzovL2NhLnJnLm5ldC9ycGtpL1JHbmV0LU9VL1dNZjNrbWV2
ZExwOUw4d2xZbVVzTmJYaFByRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIGSBggrBgEF
BQcBCwSBhTCBgjBRBggrBgEFBQcwC4ZFcnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9S
R25ldC1PVS9vdnNDQS83Nmw1OF9PU3dfVVFaTllpWUZ5azE1NWZ0eTQucm9hMC0G
CCsGAQUFBzANhiFodHRwczovL2NhLnJnLm5ldC9ycmRwL25vdGlmeS54bWwwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthL0wDQYJKoZIhvcNAQELBQADggEB
AE1e7eng7iVT9VmwyPPy37AWpIC33ALS+jkmgyWCn0Gs2bYqjLG/FB5GDAQ2axpR
BX3UrHjPxpxjmefcHTwW7qbEqflGSow+THQ6jeGsJ1I46O+uHG+msBA0bsme21tS
CuaE18VaaXUIbuxYpz820XA0rwC00lUWHNKg0v0kXND775jDqirrioPm6Glh06dS
eLWjDbq1mhPsdvY4td2ELun1w83fpADmIdd5l2rPwcd9RNd1PCYYq0n3yE1COnsY
rcYZkD3fMZlzl74Xpa0g3G10HHg9cDRtqYJZWXHat+kuONz88XVGnddWqq7N27oQ
Jom6Pd45+L9ooTOuVqcJSLI=
-----END CERTIFICATE-----