Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/AUWTE5G5dDsFPqftw9AJmjWwmXU.roa
File:                     AUWTE5G5dDsFPqftw9AJmjWwmXU.roa (raw, json)
Hash identifier:          Z5v0rd/RvzQNASFtW0bsjxU91EqEo3X4TUxqKQxK9+E=
Subject key identifier:   01:45:93:13:91:B9:74:3B:05:3E:A7:ED:C3:D0:09:9A:35:B0:99:75
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       43A5
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/AUWTE5G5dDsFPqftw9AJmjWwmXU.roa
Signing time:             Wed 23 Feb 2022 00:30:10 +0000
ROA not before:           Wed 23 Feb 2022 00:30:10 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     51224
IP address blocks:        45.132.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17317 (0x43a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Feb 23 00:30:10 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=0145931391B9743B053EA7EDC3D0099A35B09975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:34:50:15:cb:fe:bf:b1:0b:c0:d4:7e:7d:96:
                    68:a3:4f:36:17:65:58:d8:9f:02:dc:6f:a9:ba:f1:
                    f6:4c:28:96:57:56:21:05:32:a1:61:82:1b:23:2d:
                    f5:47:bd:10:22:06:fd:e5:5a:f6:39:0c:12:12:c4:
                    02:d1:23:d4:fc:8f:30:dc:6a:6d:c1:44:d6:f8:12:
                    a9:cb:86:98:2b:6f:92:d7:f5:d3:d7:a7:fc:85:64:
                    17:f5:03:bb:a7:a6:34:78:1f:ec:fa:cd:58:0e:a1:
                    4a:99:9e:91:5f:2f:71:bd:61:ec:a2:61:79:59:6a:
                    95:e7:b5:a3:81:25:8d:04:ae:8f:7f:7a:c4:3d:b7:
                    ce:82:c3:25:b6:b1:2e:05:7f:5f:12:46:c9:52:8a:
                    c3:d5:55:47:81:4c:56:8a:d0:51:26:19:60:82:94:
                    17:a5:bf:b4:79:f9:72:b8:78:34:38:87:b4:00:e4:
                    45:5c:38:48:72:c5:f9:54:3e:28:40:12:ba:17:d7:
                    41:d3:b7:60:1d:bd:fa:38:fb:16:f7:9f:67:3b:95:
                    07:81:05:44:5a:91:63:1a:f4:03:d4:be:0b:c9:6a:
                    a9:04:1d:61:14:22:e9:40:69:95:99:0e:6a:0b:3c:
                    0a:bd:a5:28:0c:86:40:fc:36:6c:fe:88:69:51:ba:
                    61:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:45:93:13:91:B9:74:3B:05:3E:A7:ED:C3:D0:09:9A:35:B0:99:75
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/AUWTE5G5dDsFPqftw9AJmjWwmXU.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:fe:e2:15:9a:f7:1e:31:6a:0b:de:ff:a3:fb:c9:c5:f2:72:
         46:62:e4:50:e1:fa:f8:6f:e2:8e:79:53:9d:ce:11:25:cf:2a:
         13:a6:a6:8b:e9:aa:b9:48:d6:ef:f3:e2:d6:5d:a1:2d:a0:e8:
         e7:d7:b1:ea:ea:a3:6d:f4:da:26:bb:f6:1c:4b:4e:9d:3a:07:
         a5:a7:1b:0f:96:aa:86:30:d7:b8:42:a0:37:d8:85:ec:8a:13:
         e9:8c:af:82:1a:17:22:39:e1:71:65:28:d9:32:eb:5b:bc:1d:
         ec:44:47:36:4e:b6:21:22:60:06:cd:bd:14:b0:59:92:c5:6a:
         7f:6a:6f:51:e1:a9:5d:5c:bc:ef:0f:77:03:b8:b5:33:41:0d:
         45:28:9a:45:78:de:67:63:17:15:40:aa:fe:a6:94:59:19:47:
         ff:73:15:aa:45:c3:c4:62:36:ee:c2:47:77:66:06:81:60:64:
         ba:95:8a:2a:2b:d8:81:a9:f2:5e:06:fa:10:78:7a:38:b0:7a:
         ad:58:e9:74:c5:b0:a7:db:fb:8f:5e:a6:b2:64:c4:db:43:c4:
         75:cd:58:ba:b5:2b:f7:08:7b:db:6c:a8:e7:51:96:c6:27:7d:
         a1:f5:34:82:a6:63:39:ad:17:d9:a6:9f:23:0e:cf:17:34:c5:
         bf:ad:04:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----