Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/BqDUGyBsqZTAa1WBEgBVfFKV5kk.roa
File:                     BqDUGyBsqZTAa1WBEgBVfFKV5kk.roa (raw, json)
Hash identifier:          kF7AphwNlogoIXKFNuhXNuwR7Zrh/bRnrwzgmAQ6sZc=
Subject key identifier:   06:A0:D4:1B:20:6C:A9:94:C0:6B:55:81:12:00:55:7C:52:95:E6:49
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       44DA
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/BqDUGyBsqZTAa1WBEgBVfFKV5kk.roa
Signing time:             Fri 18 Mar 2022 00:30:07 +0000
ROA not before:           Fri 18 Mar 2022 00:30:07 +0000
ROA not after:            Sun 01 Jan 2023 01:01:02 +0000
asID:                     47065
IP address blocks:        147.28.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17626 (0x44da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Mar 18 00:30:07 2022 GMT
            Not After : Jan  1 01:01:02 2023 GMT
        Subject: CN=06A0D41B206CA994C06B55811200557C5295E649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:48:c2:e3:11:82:d7:12:ca:11:01:81:ad:e8:
                    de:3e:1d:f5:39:3f:03:0a:a3:94:f0:fd:45:98:0f:
                    26:8a:c1:4c:20:5f:c3:15:91:fd:86:37:a4:3f:10:
                    9a:46:3d:43:d0:40:a9:53:8e:8d:8e:3c:8a:c0:fa:
                    87:47:c6:af:48:31:10:d4:bb:2c:de:3c:d9:b0:85:
                    fe:35:db:d9:9f:73:7e:00:94:b8:9d:b7:21:0a:ab:
                    c9:ec:ac:e6:1e:ad:c2:01:69:17:1e:f0:3a:46:06:
                    10:4a:d8:d4:ea:f0:7a:0e:0b:fd:3d:2f:5d:3f:2c:
                    55:94:51:3d:0b:74:4b:25:82:ae:03:15:12:34:ff:
                    42:27:d0:3b:48:3d:84:f4:0d:f9:a9:3a:59:e4:1a:
                    2d:f8:d3:b6:35:55:00:c1:55:3e:3b:65:12:ba:de:
                    3d:54:bf:81:c3:1c:10:a7:4a:50:01:4b:67:1c:ba:
                    3f:29:1d:04:c6:55:30:2e:82:cb:5e:b0:d4:a4:87:
                    70:4c:b7:26:17:51:2e:4e:00:7f:e9:2b:1f:1e:2a:
                    e2:35:0a:9f:d8:99:92:e2:6f:d3:a2:f1:50:93:6a:
                    e1:33:c8:61:20:f9:84:7a:74:71:80:b8:b7:0f:21:
                    fb:86:79:a6:e6:3a:82:37:49:51:b4:87:97:9a:4a:
                    af:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A0:D4:1B:20:6C:A9:94:C0:6B:55:81:12:00:55:7C:52:95:E6:49
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/BqDUGyBsqZTAa1WBEgBVfFKV5kk.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:99:95:1a:fe:b0:9a:86:ae:ba:1f:5b:fd:25:d2:b4:a0:ff:
         fe:04:3e:4e:19:30:c6:00:04:67:99:69:f3:0e:1e:ea:1c:96:
         b0:0a:49:5c:85:ae:85:bd:e8:c1:f1:37:a9:1f:1a:f6:03:08:
         87:f7:63:b5:e9:bc:b2:00:c5:0e:c8:91:26:bc:a7:19:a2:ef:
         4c:50:8d:14:7d:f1:14:d3:20:fe:c7:bc:ec:d8:d6:1b:50:58:
         82:24:79:14:05:83:62:71:55:3c:68:ca:04:ec:a8:92:85:82:
         c2:b8:54:85:93:14:e6:6d:fa:d8:19:64:0c:0c:83:c5:02:c3:
         24:4d:e8:a9:b1:27:56:2c:5d:f7:22:f4:c3:cd:dc:8a:a5:37:
         9b:e9:04:f3:cd:ca:92:db:82:7f:b0:e5:d5:8e:15:6b:df:65:
         ca:83:30:6d:c1:3d:01:c9:32:eb:91:3a:31:0f:2f:e7:d2:84:
         5d:7b:7b:50:04:61:71:fc:14:50:09:f6:e9:7c:bc:07:77:c3:
         d2:bc:ca:20:b4:ac:d2:b4:59:5c:95:57:df:2d:8e:c5:e8:f8:
         80:0f:9c:c8:9f:fe:21:66:40:3a:ab:1d:ad:ba:58:ab:08:d7:
         80:7c:2b:25:38:16:6c:3c:47:69:b7:93:b8:ee:55:4b:25:de:
         13:4e:2d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----